Overview

overview

8

Static

static

3

OCCT.exe

windows11-21h2-x64

8

Resubmissions

11/05/2026, 14:54

260511-saavxscx5w

11/05/2026, 14:36

260511-ryyffscv9y8

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    909s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    11/05/2026, 14:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OCCT.exe
  • Size 288.7MB
  • Sample260511-ryyffscv9y
  • SHA256 2a9fe4faad285b45d035947a2e90d248afaafc25c4738a429577c88f1e75d130
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
bootkitdefense_evasiondiscoverymotwpersistencephishingprivilege_escalationransomwarespywaretrojanupx

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 11 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
    phishingmotw
  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • Drops file in System32 directory 54 IoCs
  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 7 IoCs
  • Drops file in Windows directory 16 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 8 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 10 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 8 IoCs
    defense_evasionspywaretrojan
  • NTFS ADS 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 42 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\OCCT.exe
    "C:\Users\Admin\AppData\Local\Temp\OCCT.exe"
    1⤵
    • Loads dropped DLL
    • Modifies system certificate store
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:3120
    • C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNREAL5\prereq\dx\DXSETUP.exe
      "C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNREAL5\prereq\dx\DXSETUP.exe" /silent
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in System32 directory
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:3420
      • C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:3784
      • C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe X3DAudio1_7_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:6712
      • C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe D3DX9_43_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:7104
      • C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe d3dx10_43_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:6052
      • C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe d3dx11_43_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:976
      • C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe d3dcsx_43_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:3776
      • C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe D3DCompiler_43_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:6120
      • C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe XACT3_7_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:5444
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:5828
      • C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
        C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe XAudio2_7_x64.inf
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Windows directory
        PID:6796
      • C:\Windows\system32\regsvr32.exe
        C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:6872
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
    1⤵
      PID:5236
    • C:\Windows\System32\oobe\UserOOBEBroker.exe
      C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
      1⤵
      • Drops file in Windows directory
      PID:5368
    • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
      C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
      1⤵
      • System Location Discovery: System Language Discovery
      PID:1704
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
      1⤵
      • Enumerates system info in registry
      PID:1568
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
      1⤵
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:804
    • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
      C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
      1⤵
      • System Location Discovery: System Language Discovery
      PID:3380
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:1108
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xa4,0x114,0x7ff969ebc728,0x7ff969ebc734,0x7ff969ebc740
        2⤵
          PID:5348
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1636,i,12939143094927555910,6010546197687854017,262144 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2072 /prefetch:2
          2⤵
            PID:2040
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1768,i,602352122608836476,13402678112410541453,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2128 /prefetch:11
            2⤵
            • Downloads MZ/PE file
            • Mark of the Web detected: This indicates that the page was originally saved or cloned.
            • System Time Discovery
            PID:4544
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2348,i,11644249463210176216,7134927589284614357,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2360 /prefetch:13
            2⤵
              PID:5056
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,12305734551631867965,18423162552473204509,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3224 /prefetch:1
              2⤵
                PID:5648
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,8257337142818196909,6713891276623261689,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3272 /prefetch:1
                2⤵
                  PID:3664
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4172,i,15790333704620490703,11398933177952612221,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4192 /prefetch:9
                  2⤵
                    PID:4380
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4492,i,15465857904300635454,8536979888614307302,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4536 /prefetch:1
                    2⤵
                      PID:3396
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5600,i,18085045821106463794,2924325748543087405,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5676 /prefetch:1
                      2⤵
                        PID:1688
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5844,i,17679774909293487288,8575864930564897810,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4528 /prefetch:14
                        2⤵
                          PID:3288
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5848,i,12334808451348051762,9240411052291706065,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5824 /prefetch:1
                          2⤵
                            PID:4300
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5552,i,10813015984803965195,97279732840688863,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5896 /prefetch:14
                            2⤵
                              PID:4036
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6080,i,6104783702903152235,16974604706113765201,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6092 /prefetch:14
                              2⤵
                                PID:3992
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6076,i,6937013246315271333,12543366645883717410,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6132 /prefetch:14
                                2⤵
                                  PID:2736
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4220,i,610045597316084943,8392063967615961145,262144 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4196 /prefetch:10
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:3956
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4136,i,3883036064163021589,13142935332657637201,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4612 /prefetch:14
                                  2⤵
                                    PID:5820
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4588,i,5518387653775649666,9149873694780206121,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4496 /prefetch:14
                                    2⤵
                                    • NTFS ADS
                                    PID:3508
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4852,i,15333960205417693879,736941987986875715,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6088 /prefetch:1
                                    2⤵
                                      PID:5444
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4532,i,1615242381061422176,4073003565049014047,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3336 /prefetch:14
                                      2⤵
                                      • NTFS ADS
                                      PID:5952
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4908,i,15903494270286862557,9940422897439267842,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3352 /prefetch:1
                                      2⤵
                                        PID:3764
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5812,i,17410106013166874117,15725880513474578044,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4948 /prefetch:1
                                        2⤵
                                          PID:3580
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6284,i,5067973693874852478,1768816399625351487,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6280 /prefetch:1
                                          2⤵
                                            PID:4784
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4660,i,9293630237970711329,2079394612137465268,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4868 /prefetch:1
                                            2⤵
                                              PID:2476
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4588,i,17924683961298384728,15952897266740769590,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3468 /prefetch:14
                                              2⤵
                                                PID:3976
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4944,i,12511159088426549587,6013845444155017284,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4596 /prefetch:12
                                                2⤵
                                                  PID:6544
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3792,i,17006333217852952150,13121557034956538046,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6600 /prefetch:1
                                                  2⤵
                                                    PID:3148
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6744,i,17482055378085311450,6742525349116546553,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6736 /prefetch:1
                                                    2⤵
                                                      PID:4976
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6876,i,14245985894961771239,5664160430280370040,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6856 /prefetch:1
                                                      2⤵
                                                        PID:6604
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6848,i,12989328761006944634,868527059719584558,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7016 /prefetch:1
                                                        2⤵
                                                          PID:416
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7220,i,9743799415073052590,9411663332332751729,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7240 /prefetch:1
                                                          2⤵
                                                            PID:6976
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6744,i,3598409384842125357,16183892806482721242,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6544 /prefetch:1
                                                            2⤵
                                                              PID:480
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7240,i,4171412732314009632,3483741090557528266,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7236 /prefetch:1
                                                              2⤵
                                                                PID:3192
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7276,i,17581627871311338878,13298859695990893014,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7716 /prefetch:1
                                                                2⤵
                                                                  PID:6252
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7580,i,9192977889236552299,10140451184067778398,524288 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7552 /prefetch:14
                                                                  2⤵
                                                                  • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                                  • NTFS ADS
                                                                  PID:6016
                                                                • C:\Users\Admin\Downloads\hwmonitor_1.63.exe
                                                                  "C:\Users\Admin\Downloads\hwmonitor_1.63.exe"
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:6804
                                                                  • C:\Users\Admin\AppData\Local\Temp\is-7L34K.tmp\hwmonitor_1.63.tmp
                                                                    "C:\Users\Admin\AppData\Local\Temp\is-7L34K.tmp\hwmonitor_1.63.tmp" /SL5="$E03A4,2198701,776192,C:\Users\Admin\Downloads\hwmonitor_1.63.exe"
                                                                    3⤵
                                                                    • Executes dropped EXE
                                                                    • Drops file in Program Files directory
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    PID:6748
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8364,i,4263708191900551720,2259665125847470338,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7544 /prefetch:1
                                                                  2⤵
                                                                    PID:5480
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8240,i,2702430127474436161,9209389267843230295,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7664 /prefetch:1
                                                                    2⤵
                                                                      PID:2088
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8260,i,2867658534588542570,11923632770552792836,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8560 /prefetch:1
                                                                      2⤵
                                                                        PID:2600
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8296,i,4229815940734753623,382347389779764130,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8172 /prefetch:1
                                                                        2⤵
                                                                          PID:6704
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8704,i,17721116553206449675,7356252165496623553,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8184 /prefetch:1
                                                                          2⤵
                                                                            PID:5312
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8724,i,4021161349076394093,11553899095006773543,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8728 /prefetch:1
                                                                            2⤵
                                                                              PID:6672
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=8872,i,6852871234639078943,17792360121619730548,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8900 /prefetch:1
                                                                              2⤵
                                                                                PID:1628
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8880,i,17494894009775076120,16916913955552538718,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9056 /prefetch:1
                                                                                2⤵
                                                                                  PID:232
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9188,i,5689390947672074808,16977499588827012581,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9192 /prefetch:1
                                                                                  2⤵
                                                                                    PID:4388
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9344,i,7952542464411520028,4777691165253140362,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9356 /prefetch:1
                                                                                    2⤵
                                                                                      PID:3504
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9496,i,4484602180345998210,3058085687975116250,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9512 /prefetch:1
                                                                                      2⤵
                                                                                        PID:7068
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9648,i,11391997818547843595,11589431363529831874,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9664 /prefetch:1
                                                                                        2⤵
                                                                                          PID:3568
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9800,i,8786275104421352291,17448684738726212530,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9812 /prefetch:1
                                                                                          2⤵
                                                                                            PID:3784
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=9960,i,17082032406388395656,1649235138078573264,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9968 /prefetch:1
                                                                                            2⤵
                                                                                              PID:1844
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=10112,i,18369458819414200393,7640736285252376196,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10132 /prefetch:1
                                                                                              2⤵
                                                                                                PID:4956
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=10268,i,1644815581065279067,18002003875461362418,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10288 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:5968
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=10100,i,8316850605467104709,4328666598782116305,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10108 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:3928
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10468,i,12999148027931279560,7064900933876644690,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10520 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5248
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10776,i,3401353421043693321,4612086466802098818,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10788 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:4480
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10924,i,3762625628383311057,11517836624860282787,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10912 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:4664
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=11104,i,5936201612885434515,2508273691671457770,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11116 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:4596
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=11244,i,6082350486893170133,13519408449548173826,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11256 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5604
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=11396,i,2819762536124713268,6007778122676196649,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11412 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:4320
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11548,i,8469248827870636022,14375826525561492747,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11564 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:6876
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=11716,i,9131497594549477725,6318308304957826125,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11740 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:2216
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11684,i,17131897767047670070,13831084222843490384,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11860 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:6240
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11884,i,3087842079722910964,15016033947019004392,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11920 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:6372
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=11944,i,17240082558668694603,6984820778851980815,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12036 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:6472
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12072,i,15171210318170541154,9180404239538221749,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12176 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:6596
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=12464,i,11362316638677087980,13561452076472240028,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12476 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:992
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=12516,i,14799404369509830445,11508053049025294885,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12652 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:7108
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=12780,i,6990138621928735069,10942512790217568393,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12792 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:4876
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=12928,i,4534277085539995230,6867104451469555849,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12940 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:1016
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=11692,i,17779005151443607070,13553241636532792683,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=13204 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:7640
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=11292,i,12501915792190786357,17282742886791801807,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11280 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:7768
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=13404,i,18085834357316910205,10650396605612269441,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=13424 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:7780
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=13464,i,6404334418355909213,3400293140825246831,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=13556 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:7788
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=13712,i,4728367381136873673,17786346172130774477,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=13728 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:7796
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=14268,i,6477833794585026208,10692880537426694399,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14276 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:8068
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=14304,i,13940324820218127796,16270596504378543681,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14316 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:8076
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=14368,i,832385126919060979,16323162143612901878,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14484 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:8084
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=14476,i,7771521571145332148,9621262312830740000,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14680 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:8092
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=14420,i,4538582808811306785,8692763563691201770,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14664 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:8100
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=14712,i,9917629047057066474,3907741041072136523,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14788 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:8116
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=14724,i,10285089150531155586,1118049411501580243,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14808 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:8124
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=14736,i,6004777283932209850,8495172668134021038,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14828 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:8132
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=14352,i,686835497826297060,16187750794758279383,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14452 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:8108
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=15064,i,8257155382381871210,7899227351127801413,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14932 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:8140
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=15292,i,10360609871549563085,1091428905009768678,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14228 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:1300
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=14236,i,12463913930508812379,6312012136853577858,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14144 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:2140
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=14068,i,15802910321817792985,1354772017676740314,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14240 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:5360
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=14020,i,5440909866727843651,9723412821901591364,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=13972 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:7728
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=14108,i,2342004583502750354,6503370869692908460,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=13880 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:5008
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=13984,i,5902087505013346292,17957738401201592110,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=16296 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:2308
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=14476,i,15485356772187076496,289981307889063446,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=16328 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:4304
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=16568,i,9109794639538249814,5325841602403360734,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=16580 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:8356
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=16744,i,3535250822674658616,252902356698147539,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=16504 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:8520
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=16800,i,10210190883355196700,7347342156488131676,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=16792 /prefetch:1
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:8528
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=16920,i,14517322857257470653,2976271388336935506,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=16932 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:8536
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=17064,i,8247284563306566989,517507892353002228,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17076 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:8544
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=17212,i,12645876398817708468,12603277514614545434,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17228 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:8552
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=17368,i,9483774926930751490,9442284098253165581,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17384 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:8568
                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=17660,i,16443183597237197733,17755359103238773412,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17736 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:8912
                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=17560,i,17415158405542986704,12735609285740022081,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17772 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:8920
                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=17636,i,9368432403638798332,4433072703182737465,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17816 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:8928
                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=17536,i,9794866017560855543,830800228571491992,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17852 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:8936
                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=17596,i,14154114553243178736,9749444139506850151,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17872 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:8944
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=17360,i,1852805791520236393,15112719803179423579,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17912 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:8952
                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=17700,i,11297596739111168949,6744703446250863257,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17892 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:8960
                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=17728,i,15871614319938841839,18357562429993138296,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17932 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:8968
                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=17528,i,3012906825478797490,14312081490116164195,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17532 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:8976
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=18900,i,10389753983677261973,5574324535560884328,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14080 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:9028
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=19348,i,4859462397264646007,3150556697346355981,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19388 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:9396
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=19544,i,16259786217227806862,6550163703062458757,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19540 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:9404
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=19124,i,4930319859034524815,184222542342595237,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19116 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:9412
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=19504,i,6463482973936306654,6281330096849820875,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19488 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:9420
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=19800,i,13961809528589030881,9903894578503599791,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19816 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:9428
                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=19940,i,14349876568084437121,15690767815133779942,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19992 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:9436
                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=19968,i,14556665966860461261,7723887193965456923,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=20000 /prefetch:1
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:9444
                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=20032,i,15779356374470398046,11448932227215957883,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=20076 /prefetch:1
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:9452
                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=20536,i,18117545956577752414,17788102479340074442,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=20552 /prefetch:1
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:9460
                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=16612,i,6560285369839768518,5219943335899692803,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17500 /prefetch:1
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:9980
                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=17708,i,4179169302119778349,13485766099391068239,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8448 /prefetch:1
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:9988
                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=17520,i,1724706837472712605,16139506559051730149,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=18440 /prefetch:1
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:9996
                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=16920,i,29714115386491042,18170609065785197761,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17588 /prefetch:1
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:10196
                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=19936,i,13978138188944445320,4021306504757578832,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19948 /prefetch:1
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:10204
                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --metrics-shmem-handle=20848,i,6072404686032343525,6056418760251540773,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17064 /prefetch:1
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:9368
                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --metrics-shmem-handle=14708,i,15918940397960189611,14353047046222779517,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=14716 /prefetch:1
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:6768
                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=17212,i,8679461370742268319,189706372443137959,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=17600 /prefetch:1
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:7016
                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=20992,i,9470423502495993067,4040037536834105934,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=21004 /prefetch:1
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:2700
                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --metrics-shmem-handle=21140,i,13171539768874591413,18380780131274481039,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=21152 /prefetch:1
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:4956
                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --metrics-shmem-handle=21288,i,5122630116346890792,9058065581538916615,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=21300 /prefetch:1
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                          PID:9916
                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --metrics-shmem-handle=21436,i,8649889601609378916,10317669062448471727,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=21448 /prefetch:1
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:9924
                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --metrics-shmem-handle=21564,i,3689580583778593095,13316554040429227831,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=21576 /prefetch:1
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:9936
                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --metrics-shmem-handle=20328,i,368069138006792377,13625776901620992307,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=20360 /prefetch:1
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:896
                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --metrics-shmem-handle=21096,i,16586653133156706787,15005667857970083161,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3484 /prefetch:1
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:7576
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --metrics-shmem-handle=21596,i,1686357211633269186,2729985574294561678,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8384 /prefetch:1
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:7616
                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=21580,i,17104945866851393777,9691348491430408894,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=21056 /prefetch:1
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:8108
                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=8448,i,1465932553638824576,1903549963145162206,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8240 /prefetch:1
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                        PID:7248
                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --metrics-shmem-handle=20100,i,8488611076084396050,1571246696992763770,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=20308 /prefetch:1
                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                          PID:2608
                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --metrics-shmem-handle=21528,i,17899964169277606021,14577858885223841198,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=21516 /prefetch:1
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                            PID:8096
                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --metrics-shmem-handle=19200,i,17259625378806081620,9169589254428437282,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=21100 /prefetch:1
                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                              PID:9048
                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --metrics-shmem-handle=19908,i,16738844565508863176,10489343117790666596,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19876 /prefetch:1
                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                PID:8536
                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --metrics-shmem-handle=19104,i,2465196583959030930,125013421386970283,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=20112 /prefetch:1
                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                  PID:8620
                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --metrics-shmem-handle=10160,i,6570914170629658300,3243878154898174616,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19836 /prefetch:1
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                    PID:8552
                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --metrics-shmem-handle=21528,i,12222022973504692690,17916715993066111663,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=20136 /prefetch:1
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                      PID:8596
                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --metrics-shmem-handle=19084,i,13695912802977954494,16061688880252802688,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19060 /prefetch:1
                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                        PID:8684
                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --metrics-shmem-handle=19776,i,14163782044140682180,13665338747880240244,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=19768 /prefetch:1
                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                          PID:8532
                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --metrics-shmem-handle=3448,i,6543347612151077089,3736009222660493127,2097152 --field-trial-handle=2076,i,4333957612554405470,4417567095173640237,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=18608 /prefetch:1
                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                            PID:7860
                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                            PID:1456
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                              PID:4084
                                                                                                                                                                                                                                                                                            • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
                                                                                                                                                                                                                                                                                              "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                              • Modifies registry class
                                                                                                                                                                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                              PID:704
                                                                                                                                                                                                                                                                                            • C:\Windows\System32\rundll32.exe
                                                                                                                                                                                                                                                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                PID:4504
                                                                                                                                                                                                                                                                                              • C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\wt.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Microsoft\WindowsApps\wt.exe"
                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                PID:4740
                                                                                                                                                                                                                                                                                                • C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\WindowsTerminal.exe
                                                                                                                                                                                                                                                                                                  wt.exe
                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                  PID:1500
                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\wsl.exe
                                                                                                                                                                                                                                                                                                    C:\Windows\system32\wsl.exe --list
                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                      PID:3700
                                                                                                                                                                                                                                                                                                    • C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\OpenConsole.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\OpenConsole.exe" --headless --win32input --resizeQuirk --width 120 --height 27 --signal 0xa00 --server 0x9fc
                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                        PID:6064
                                                                                                                                                                                                                                                                                                      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                                        powershell.exe
                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                        PID:1000
                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\vssvc.exe
                                                                                                                                                                                                                                                                                                    C:\Windows\system32\vssvc.exe
                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                    PID:892
                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\srtasks.exe
                                                                                                                                                                                                                                                                                                    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                      PID:1292
                                                                                                                                                                                                                                                                                                    • C:\Program Files\CPUID\HWMonitor\HWMonitor.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files\CPUID\HWMonitor\HWMonitor.exe"
                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                      • Writes to the Master Boot Record (MBR)
                                                                                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                      PID:4952
                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                                                                                                                                                      C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                        PID:2468
                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\taskmgr.exe
                                                                                                                                                                                                                                                                                                        "C:\Windows\system32\taskmgr.exe" /0
                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                        • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                        • Checks processor information in registry
                                                                                                                                                                                                                                                                                                        • Modifies registry class
                                                                                                                                                                                                                                                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                        • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                                                                                        PID:9088
                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                        • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                        • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                        • Modifies registry class
                                                                                                                                                                                                                                                                                                        PID:8284
                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff969ebc728,0x7ff969ebc734,0x7ff969ebc740
                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                            PID:6748
                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1848,i,16666201438565033615,8466662751758589021,262144 --field-trial-handle=1888,i,5808312326387959936,17585664264925092611,262144 --variations-seed-version=20260511-010040.854000-production --mojo-platform-channel-handle=1884 /prefetch:2
                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                              PID:2404
                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2232,i,18225088975844583347,4813640712919070864,524288 --field-trial-handle=1888,i,5808312326387959936,17585664264925092611,262144 --variations-seed-version=20260511-010040.854000-production --mojo-platform-channel-handle=2236 /prefetch:11
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                              • System Time Discovery
                                                                                                                                                                                                                                                                                                              PID:6240
                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,17662967157258163021,14185166942282567826,524288 --field-trial-handle=1888,i,5808312326387959936,17585664264925092611,262144 --variations-seed-version=20260511-010040.854000-production --mojo-platform-channel-handle=2372 /prefetch:13
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:10156
                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,16428706310743604847,9813552934689702521,2097152 --field-trial-handle=1888,i,5808312326387959936,17585664264925092611,262144 --variations-seed-version=20260511-010040.854000-production --mojo-platform-channel-handle=3256 /prefetch:1
                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                  PID:8012
                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3528,i,15943990111491409452,17854749727756491300,2097152 --field-trial-handle=1888,i,5808312326387959936,17585664264925092611,262144 --variations-seed-version=20260511-010040.854000-production --mojo-platform-channel-handle=3536 /prefetch:1
                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                    PID:6732
                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4524,i,6286063278702268269,3451083797617952161,2097152 --field-trial-handle=1888,i,5808312326387959936,17585664264925092611,262144 --variations-seed-version=20260511-010040.854000-production --mojo-platform-channel-handle=4512 /prefetch:1
                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                      PID:9512
                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5200,i,8304860086704328465,365658502317693180,524288 --field-trial-handle=1888,i,5808312326387959936,17585664264925092611,262144 --variations-seed-version=20260511-010040.854000-production --mojo-platform-channel-handle=5156 /prefetch:14
                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                        PID:3380
                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                        PID:1724
                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                          PID:5456
                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                            PID:9896

                                                                                                                                                                                                                                                                                                                          Network

                                                                                                                                                                                                                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                Reconnaissance

                                                                                                                                                                                                                                                                                                                                Resource Development

                                                                                                                                                                                                                                                                                                                                Initial Access

                                                                                                                                                                                                                                                                                                                                Execution

                                                                                                                                                                                                                                                                                                                                Persistence

                                                                                                                                                                                                                                                                                                                                Event Triggered Execution

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1546

                                                                                                                                                                                                                                                                                                                                Component Object Model Hijacking

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1546.015

                                                                                                                                                                                                                                                                                                                                Pre-OS Boot

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1542

                                                                                                                                                                                                                                                                                                                                Bootkit

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1542.003

                                                                                                                                                                                                                                                                                                                                Privilege Escalation

                                                                                                                                                                                                                                                                                                                                Event Triggered Execution

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1546

                                                                                                                                                                                                                                                                                                                                Component Object Model Hijacking

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1546.015

                                                                                                                                                                                                                                                                                                                                Defense Evasion

                                                                                                                                                                                                                                                                                                                                Modify Registry

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1112

                                                                                                                                                                                                                                                                                                                                Pre-OS Boot

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1542

                                                                                                                                                                                                                                                                                                                                Bootkit

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1542.003

                                                                                                                                                                                                                                                                                                                                Subvert Trust Controls

                                                                                                                                                                                                                                                                                                                                2
                                                                                                                                                                                                                                                                                                                                T1553

                                                                                                                                                                                                                                                                                                                                Install Root Certificate

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1553.004

                                                                                                                                                                                                                                                                                                                                SIP and Trust Provider Hijacking

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1553.003

                                                                                                                                                                                                                                                                                                                                Credential Access

                                                                                                                                                                                                                                                                                                                                Discovery

                                                                                                                                                                                                                                                                                                                                Browser Information Discovery

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1217

                                                                                                                                                                                                                                                                                                                                Peripheral Device Discovery

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1120

                                                                                                                                                                                                                                                                                                                                Query Registry

                                                                                                                                                                                                                                                                                                                                4
                                                                                                                                                                                                                                                                                                                                T1012

                                                                                                                                                                                                                                                                                                                                System Information Discovery

                                                                                                                                                                                                                                                                                                                                4
                                                                                                                                                                                                                                                                                                                                T1082

                                                                                                                                                                                                                                                                                                                                System Location Discovery

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1614

                                                                                                                                                                                                                                                                                                                                System Language Discovery

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1614.001

                                                                                                                                                                                                                                                                                                                                System Time Discovery

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1124

                                                                                                                                                                                                                                                                                                                                Lateral Movement

                                                                                                                                                                                                                                                                                                                                Collection

                                                                                                                                                                                                                                                                                                                                Command and Control

                                                                                                                                                                                                                                                                                                                                Web Service

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                T1102

                                                                                                                                                                                                                                                                                                                                Exfiltration

                                                                                                                                                                                                                                                                                                                                Impact

                                                                                                                                                                                                                                                                                                                                Replay Monitor

                                                                                                                                                                                                                                                                                                                                Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                Downloads

                                                                                                                                                                                                                                                                                                                                HWMonitor.exe
                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\CPUID\HWMonitor\HWMonitor.exe
                                                                                                                                                                                                                                                                                                                                • Size 3.4MB
                                                                                                                                                                                                                                                                                                                                • SHA256 02db6764d1f13b837b0a525e5931bdbc67e7a2a4d071e849c7e087255d4a2d5b
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                unins000.exe
                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\CPUID\HWMonitor\unins000.exe
                                                                                                                                                                                                                                                                                                                                • Size 3.0MB
                                                                                                                                                                                                                                                                                                                                • SHA256 6270005159ce90cc83e321975520045fc019aeaa71cca0e2014ee366d99b3b29
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                settings.dat
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                • Size 40B
                                                                                                                                                                                                                                                                                                                                • SHA256 7134ade44c1ddf0c89107a92b1216181db781f14d1f4b18e82773f5dd30fd626
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                • Size 6B
                                                                                                                                                                                                                                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                BrowsingTopicsState
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                                                                                                                                                                                • Size 414B
                                                                                                                                                                                                                                                                                                                                • SHA256 b7c30b07d24402878e30f51210e268e3537a13b323a2ff480f73aca2efb7aee3
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000006
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
                                                                                                                                                                                                                                                                                                                                • Size 67KB
                                                                                                                                                                                                                                                                                                                                • SHA256 8040fb9b23758318712ad783959af672679d82d164b4ca8adf2215836a0dc35a
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000009
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
                                                                                                                                                                                                                                                                                                                                • Size 38KB
                                                                                                                                                                                                                                                                                                                                • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_00000b
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
                                                                                                                                                                                                                                                                                                                                • Size 505KB
                                                                                                                                                                                                                                                                                                                                • SHA256 72f1d3dfb10811e9d280f057579ce43721cb5d910129c29154fe4ee0a2fab09f
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_00000c
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
                                                                                                                                                                                                                                                                                                                                • Size 81KB
                                                                                                                                                                                                                                                                                                                                • SHA256 87d2fbb2b73b6d46eb18f70bcaa77cb7b01015b55f069dfe7896c3021ee9a8da
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000039
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
                                                                                                                                                                                                                                                                                                                                • Size 75KB
                                                                                                                                                                                                                                                                                                                                • SHA256 4c7b0763f622f194bb4c67b99e49528ef065345d45bbe49aa2bbae29703ac0fe
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_00005f
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005f
                                                                                                                                                                                                                                                                                                                                • Size 61KB
                                                                                                                                                                                                                                                                                                                                • SHA256 41473a3e17116efe154a14811690c9fffe42b8b7888711c308073da72dbf190c
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000069
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000069
                                                                                                                                                                                                                                                                                                                                • Size 158KB
                                                                                                                                                                                                                                                                                                                                • SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000072
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072
                                                                                                                                                                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                                                                                                                                                                • SHA256 f1d358c6d7e46a17f833ca5543f7626e8951c7db4fc96be5c1fa0ddf09834db7
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000081
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000081
                                                                                                                                                                                                                                                                                                                                • Size 51KB
                                                                                                                                                                                                                                                                                                                                • SHA256 c35135cb4e8e6a4d1c9cc60ff9b0e8fb23d5568cc69272ee6df455afef52e2a1
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000083
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000083
                                                                                                                                                                                                                                                                                                                                • Size 51KB
                                                                                                                                                                                                                                                                                                                                • SHA256 8e95246891091131d753fb3af619af7404a96b8f0f251a4f1178a0f5df99fdcc
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000085
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000085
                                                                                                                                                                                                                                                                                                                                • Size 91KB
                                                                                                                                                                                                                                                                                                                                • SHA256 9591e031449880d287eb6289f7580e8328c0889056c396778b03b249b64ae2a7
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000086
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000086
                                                                                                                                                                                                                                                                                                                                • Size 91KB
                                                                                                                                                                                                                                                                                                                                • SHA256 b746587b04bfd7e4d1011a6ac3d5e967a2d9df351d43137f6ece6a3a452d1dd0
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000087
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000087
                                                                                                                                                                                                                                                                                                                                • Size 29KB
                                                                                                                                                                                                                                                                                                                                • SHA256 0ea3a6ac5a11f7b18f9d644b89d495c42d4b59b4af2e1197050f610e62c40c1c
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000088
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000088
                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                • SHA256 f0ef7ee8e55facd721d2f1e68ad4304b0418a3d36e141ae54876ecad4e6c5466
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_00008d
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008d
                                                                                                                                                                                                                                                                                                                                • Size 103KB
                                                                                                                                                                                                                                                                                                                                • SHA256 a8d56b4a5475076909814de40d7e42966568dd81b968403fcce6bce878385981
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_00008e
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008e
                                                                                                                                                                                                                                                                                                                                • Size 82KB
                                                                                                                                                                                                                                                                                                                                • SHA256 70f49be4cbce587260995fc746a2a12849ad6f8bd67f3e79f9f0e0327f09c728
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_000090
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000090
                                                                                                                                                                                                                                                                                                                                • Size 85KB
                                                                                                                                                                                                                                                                                                                                • SHA256 da2668a163a6aaec1a477fe799e73868738303dd32458b99730fe248ce4e66e8
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_0000bd
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bd
                                                                                                                                                                                                                                                                                                                                • Size 73KB
                                                                                                                                                                                                                                                                                                                                • SHA256 2355ec3c8ba236a699315f5521067d644ec8e3e255764ea65bb0ec3dbec7a27a
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_0000dd
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000dd
                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                • SHA256 fc5f116de6d9aec7970e902b9dd30886ce96ee44a1537e62d57471d3aa5f66f4
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                f_0000e1
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e1
                                                                                                                                                                                                                                                                                                                                • Size 1024KB
                                                                                                                                                                                                                                                                                                                                • SHA256 5f2b983cfed5c1276ade47b9203207034803e5c2c6f7a1a4b85127c84a8a954f
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                135a9e73b7a29232_0
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\135a9e73b7a29232_0
                                                                                                                                                                                                                                                                                                                                • Size 252B
                                                                                                                                                                                                                                                                                                                                • SHA256 0e4544371c6bc0c43cb591f9894e31d3110e8f43057c7a3fbcd344e6d2b707cc
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                fe8b7ca011cc9644_0
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
                                                                                                                                                                                                                                                                                                                                • Size 261B
                                                                                                                                                                                                                                                                                                                                • SHA256 85500987cc2da16fa7c12fe81836d012fbea9e497f13a3a59d72b64ab1610523
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                • SHA256 ddeb7e0c7744cde733a6aecac9f5743df2dd8b28618c0544571d47e4ddaea3a4
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                • SHA256 5aad4161b4115db40675bfe8a3f1406062dceb33f2be5e5c30a1ca4ebd8c5bd9
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                • SHA256 12d88892d2ae1ec3786189ae915ba2e484fa2760eb552efc6c01c3870a412a50
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                • SHA256 1e9081d75577e404a02a684e138db916390349648972ff6e94a15430211b7cd1
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                CURRENT
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.speedtest.net_0.indexeddb.leveldb\CURRENT
                                                                                                                                                                                                                                                                                                                                • Size 16B
                                                                                                                                                                                                                                                                                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                9cbbbd1b-80e3-4109-bb27-be960a174642.tmp
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\9cbbbd1b-80e3-4109-bb27-be960a174642.tmp
                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                • SHA256 84e48f0161974218e4852107909f9ad477d7cab3288948b530ed31832fb1c42b
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                                                                                • SHA256 01f51d5669dcff42e156c7226f9ea71cddff58779c645f24d5fdb8975f6a1ec2
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Size 77KB
                                                                                                                                                                                                                                                                                                                                • SHA256 e472785463454770c1e985a02f7a693af42fd0bcac170d59a39a1691546f5394
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                • SHA256 fead2102974a80909421421bb5cc066e7c487a109d480262baa64e2bba4a1ef0
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                • SHA256 945748543aa33f82511d166cacc8ca50714d35118c1ebb1e446f42947d32c110
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                • Size 91KB
                                                                                                                                                                                                                                                                                                                                • SHA256 62c6068b153af8cb4237b15fc888620865c52e952545c5099f561aa60ada864c
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                • SHA256 6e61ec344b25a8b3f89287321c7ac8b748db1d6d484f51b3d8e3f6a90fdf384e
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                • SHA256 c289106b7b97a48f97d81b80b0aa9c068c98a44e409f744c291beb46b568b754
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                • SHA256 baa02eae58dbb6070ee1e08449ad21689f50413dc31f17445c7bbd73486b349b
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                • SHA256 9d967ecd6359def16354c058bf9a02633480b9be82b1e3f62453cec2157f665c
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                • SHA256 10decc072f8b45128825230a3d19c018074a84f00786f18d0cd75bb6230bc519
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                • SHA256 4956c0f5a00d2d8407c4e93bfa949d246faed741c00e9dea283cbeb73d007fc9
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                • SHA256 a3b8101848d52033100e62ba87e4e3304c25b5c9fa4c686d4f5b75e1ca750d76
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                • SHA256 b5f48de94c71166b93e4adf312d716ee4913e1c4de8c0ebb0c70432c606faa5d
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                • SHA256 f0ad0af2e2971cd7262ce1a5cad5b377d64d284f8d83412f72c7895fb8680c88
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                • SHA256 42db615d0cf4554eb11c67c8a3df03033cdc2794072cd296934bde3e44c66868
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                • SHA256 56184b0b9090687824c0b37f769ef9b654df1d7498bf0cf7fac5fed8b62c04a2
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                • SHA256 f7e32b603d572499d3c609dd1ffa12320d8abad1c66fd794843cb8e64af89deb
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                • SHA256 82393abf8f2be1316399402902f6e90dda339bbd2fc58e6249cdf841f0066a55
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                • SHA256 2e33ad92eb91cc7fde73de73f246e2f4c6da1ef1316182ee9d6a68bbf2c29838
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                • SHA256 31ba78af40d09376c8d1a91af9d5008309ccd182ddbbb845e6ac200fca816629
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                • SHA256 de6c75f1be4bc50b74971f6257b66daf71fa27d3ee3a130bf9b33c449ba0c7db
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                • SHA256 2f819a79b3cafac3de04b747cb13db3729469911c5347a378a9f81971f609598
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                • SHA256 6062a8ca05040f0826e675a8497ae20539b9c38c592c29c6cc89798319036d50
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                                                                                • SHA256 1d9ba0cc0c9cf71c91c3f283486ee7b2e48add656540454c7e48cc34713801d2
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                • Size 120B
                                                                                                                                                                                                                                                                                                                                • SHA256 a359ec0b2b1a9faaaeea1c1789077303526f04af75cd1a8ce9e53814c42bbfef
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                • Size 120B
                                                                                                                                                                                                                                                                                                                                • SHA256 68dad139e732fc54fd4ee4e79c85930ecee51a87c5a8a0eb684a820a59becb79
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                the-real-index~RFe59d47d.TMP
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59d47d.TMP
                                                                                                                                                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                                                                                                                                                • SHA256 31d711a41a2bbbf36f0a99f7db727efa4db5096b47f94be9edc2bde352447fff
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                                                                                                                                                • SHA256 d8815da2288c4d15ff6964e97ec05ea5ab7f3f0845e0bdbfeddbb0f0214d8e5d
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                                                                                • SHA256 b08a8f8f477d235c4100bfcb74fa08c3d955b3f19dd6446d40921514d7416407
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                index.txt
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                                                                                                                                                                                                                                                • Size 150B
                                                                                                                                                                                                                                                                                                                                • SHA256 5a1c64fffa0b940940110b0e5babb488c26bc7a20ffa7a922e2fc4b9eecca75a
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                index.txt~RFe604133.TMP
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe604133.TMP
                                                                                                                                                                                                                                                                                                                                • Size 157B
                                                                                                                                                                                                                                                                                                                                • SHA256 afeb80b187721f1c19e789d985f2627e6733edc076e327166a0c2b41f8e1dc0d
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                • Size 23B
                                                                                                                                                                                                                                                                                                                                • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                0
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\blob_storage\85837316-13cf-41a0-9c49-4cde9ce49d1c\0
                                                                                                                                                                                                                                                                                                                                • Size 10.0MB
                                                                                                                                                                                                                                                                                                                                • SHA256 b8c2a2042767ca78bb93fcd14217810fa898265cfe8c9cb07c18148175f0cfaa
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\blob_storage\85837316-13cf-41a0-9c49-4cde9ce49d1c\1
                                                                                                                                                                                                                                                                                                                                • Size 10.0MB
                                                                                                                                                                                                                                                                                                                                • SHA256 2e38fe665ad853d2ff9face5b203f902ae354b9f14568b7350c65a4213a37f98
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 202KB
                                                                                                                                                                                                                                                                                                                                • SHA256 8ad00238179d9f3d51a22b909c8cbab26284d016a766c8acc76a1761ffa41e6f
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 202KB
                                                                                                                                                                                                                                                                                                                                • SHA256 29c734480c613e05505ce6438bce180d01841a44facb8ba9b880518f3e42e170
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 202KB
                                                                                                                                                                                                                                                                                                                                • SHA256 3a5614c9cbd72c0d45177d0727ae78b55e27be2a15d4b5bbc463171c6a9a0ed3
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 202KB
                                                                                                                                                                                                                                                                                                                                • SHA256 f1b35aa35b708a92831c05ac5d99f54827fb8411effe54a5be52dca494f4d366
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 202KB
                                                                                                                                                                                                                                                                                                                                • SHA256 7e0f6331a25a654f52a2b81b76112547759e2ab8c2ddd1e0dfd514535b531215
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 202KB
                                                                                                                                                                                                                                                                                                                                • SHA256 e0cf50694e96c332c936b94b4f170b09008d40eae582fb18e32371554a27ee5c
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 90KB
                                                                                                                                                                                                                                                                                                                                • SHA256 ed7965e0fbe6087e6f50136ef3e9068862cbffd93757dba3cb3738c4a8895fcd
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 91KB
                                                                                                                                                                                                                                                                                                                                • SHA256 162ad0588b21e8b4a76436393dfbb44c044e2f520147fd0f740a66b4c0d396ea
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 200KB
                                                                                                                                                                                                                                                                                                                                • SHA256 f8471125cdf641d5e1afb848f6eda0b783a43c09eed0ff230ab77ab2f0f76b1c
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 202KB
                                                                                                                                                                                                                                                                                                                                • SHA256 d64cf2755a7cf74e8e3b0f535e57ace3e5dd34bb88441eafcab4e1e65d38fab9
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Local State
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                • Size 201KB
                                                                                                                                                                                                                                                                                                                                • SHA256 875cdbaf4aa759581a4cf00a43b83ac4a5b1d51ac1de22a8553b8aab1783ceae
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                data_1
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                                                                                                                                                                                                                                                                                                                • Size 264KB
                                                                                                                                                                                                                                                                                                                                • SHA256 7be29e3ba8640ce6d7d483468e0fb88fe9f02e499f28643fbb4afc68d686825f
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                FileCoAuth-2026-5-11.1439.1704.1.odl
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-5-11.1439.1704.1.odl
                                                                                                                                                                                                                                                                                                                                • Size 706B
                                                                                                                                                                                                                                                                                                                                • SHA256 40add5d62b53ca28c09a09a2f4d8ba88c2d299d2c3333f06acc51ce95c1cf508
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\GABISPKE\www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                • SHA256 49ef8d1d524560c3262f0ecb2bdd0541b3060a119b189722700e9f77e5b26317
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\GABISPKE\www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                • SHA256 ee9791693fe813cc4016266a60df6c01d14d892a5491448698088f9c50deaba4
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\GABISPKE\www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                • SHA256 c4ffb411428926d77a27960c1016c13538665878c609e942492ddfabb1051833
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\GABISPKE\www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                                                                                • SHA256 af9c2406d47dd06182c4fa4e2d0e587064bd7b3f96c2119c8fa16f679063afe3
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\GABISPKE\www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                • SHA256 5e14ce7e2b8e8a3a1f825776c4ca168e3e2411bdfd725a1fa641de97d6162f9e
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\GABISPKE\www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                                                                                • SHA256 63ec3410788c319d2519eb039fcc10778b8ea8c8faeafc98b002b7221d702c4b
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                AppCache134229846238651841.txt
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134229846238651841.txt
                                                                                                                                                                                                                                                                                                                                • Size 83KB
                                                                                                                                                                                                                                                                                                                                • SHA256 7fb327522e02c02850d47e03198f10c57842c2a24bb5ce55025434989720ebee
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                libHarfBuzzSharp.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.net\OCCT\4ta2feyd.xqq\libHarfBuzzSharp.dll
                                                                                                                                                                                                                                                                                                                                • Size 1.7MB
                                                                                                                                                                                                                                                                                                                                • SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                libSkiaSharp.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.net\OCCT\4ta2feyd.xqq\libSkiaSharp.dll
                                                                                                                                                                                                                                                                                                                                • Size 9.0MB
                                                                                                                                                                                                                                                                                                                                • SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                D3DCompiler_43.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\D3DCompiler_43.dll
                                                                                                                                                                                                                                                                                                                                • Size 2.0MB
                                                                                                                                                                                                                                                                                                                                • SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                D3DX9_43.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\D3DX9_43.dll
                                                                                                                                                                                                                                                                                                                                • Size 2.3MB
                                                                                                                                                                                                                                                                                                                                • SHA256 84b900dbd7fa978d6e0caee26fc54f2f61d92c9c75d10b35f00e3e82cd1d67b4
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                D3DX9_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\D3DX9_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 667B
                                                                                                                                                                                                                                                                                                                                • SHA256 71bd128262424567380c63c9c23eb819212222317026ad44e965ecac2224b848
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                FEB2010_X3DAudio_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\FEB2010_X3DAudio_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 815B
                                                                                                                                                                                                                                                                                                                                • SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_D3DCompiler_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_D3DCompiler_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 830B
                                                                                                                                                                                                                                                                                                                                • SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_D3DCompiler_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_D3DCompiler_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                • SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_XACT_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_XACT_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 920B
                                                                                                                                                                                                                                                                                                                                • SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_XACT_x86.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_XACT_x86.inf
                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                • SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_XAudio_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_XAudio_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 923B
                                                                                                                                                                                                                                                                                                                                • SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_XAudio_x86.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_XAudio_x86.inf
                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                • SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_d3dcsx_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_d3dcsx_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 815B
                                                                                                                                                                                                                                                                                                                                • SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_d3dcsx_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_d3dcsx_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                • SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_d3dx10_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_d3dx10_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 815B
                                                                                                                                                                                                                                                                                                                                • SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_d3dx10_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_d3dx10_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                • SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_d3dx11_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_d3dx11_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 815B
                                                                                                                                                                                                                                                                                                                                • SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_d3dx11_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_d3dx11_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                • SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_d3dx9_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_d3dx9_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 812B
                                                                                                                                                                                                                                                                                                                                • SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                JUN2010_d3dx9_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\JUN2010_d3dx9_43_x86.inf
                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                • SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                X3DAudio1_7.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\X3DAudio1_7.dll
                                                                                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                                                                                • SHA256 9460709339701ad471a5cabe6365355f4d586dc4fcb86507c1331839dc555446
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                X3DAudio1_7_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\X3DAudio1_7_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 689B
                                                                                                                                                                                                                                                                                                                                • SHA256 1da8585eb518801a26ce5a535620ad7bb4177dfccc8e468c8a003db064849d04
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                XAPOFX1_5.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\XAPOFX1_5.dll
                                                                                                                                                                                                                                                                                                                                • Size 72KB
                                                                                                                                                                                                                                                                                                                                • SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                XAudio2_7.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\XAudio2_7.dll
                                                                                                                                                                                                                                                                                                                                • Size 514KB
                                                                                                                                                                                                                                                                                                                                • SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                apr2007_xinput_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\apr2007_xinput_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 860B
                                                                                                                                                                                                                                                                                                                                • SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                d3dcsx_43.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\d3dcsx_43.dll
                                                                                                                                                                                                                                                                                                                                • Size 1.8MB
                                                                                                                                                                                                                                                                                                                                • SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                d3dx10_43.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\d3dx10_43.dll
                                                                                                                                                                                                                                                                                                                                • Size 459KB
                                                                                                                                                                                                                                                                                                                                • SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                d3dx10_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\d3dx10_43_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 663B
                                                                                                                                                                                                                                                                                                                                • SHA256 e36537b28026f4bf193788fe45605e9b5715117cbe4f638a9384aa3964768855
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                d3dx11_43.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\d3dx11_43.dll
                                                                                                                                                                                                                                                                                                                                • Size 242KB
                                                                                                                                                                                                                                                                                                                                • SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                d3dx9_43.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\d3dx9_43.dll
                                                                                                                                                                                                                                                                                                                                • Size 1.9MB
                                                                                                                                                                                                                                                                                                                                • SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                dxdllreg_x86.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\dxdllreg_x86.inf
                                                                                                                                                                                                                                                                                                                                • Size 724B
                                                                                                                                                                                                                                                                                                                                • SHA256 54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                dxupdate.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\dxupdate.dll
                                                                                                                                                                                                                                                                                                                                • Size 173KB
                                                                                                                                                                                                                                                                                                                                • SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                dxupdate.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\dxupdate.inf
                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                • SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                infinst.exe
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
                                                                                                                                                                                                                                                                                                                                • Size 81KB
                                                                                                                                                                                                                                                                                                                                • SHA256 d8d529f1e4fa4ce7e84d21398c5347d48f652983805591687052ea0038efd3f7
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                infinst.exe
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\infinst.exe
                                                                                                                                                                                                                                                                                                                                • Size 81KB
                                                                                                                                                                                                                                                                                                                                • SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                xactengine3_7.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\xactengine3_7.dll
                                                                                                                                                                                                                                                                                                                                • Size 234KB
                                                                                                                                                                                                                                                                                                                                • SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                xinput1_3.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\xinput1_3.dll
                                                                                                                                                                                                                                                                                                                                • Size 104KB
                                                                                                                                                                                                                                                                                                                                • SHA256 756cad002e1553cfa1a91ebe8c1b9380ffabe0b4b1916c4a4db802396ddfbef8
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                xinput1_3_x64.inf
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\DX496F.tmp\xinput1_3_x64.inf
                                                                                                                                                                                                                                                                                                                                • Size 669B
                                                                                                                                                                                                                                                                                                                                • SHA256 0d411d9424128f19fed2daa95a2983b4b29197f022a754f59d0c7740ad654cca
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                HWiNFO_x64_215.sys
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_215.sys
                                                                                                                                                                                                                                                                                                                                • Size 58KB
                                                                                                                                                                                                                                                                                                                                • SHA256 cc9d399816d0f04548545fa2cc4bb9e8d141624601ac271315cbe92f6e763a1e
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                DSETUP32.DLL
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNREAL5\prereq\dx\DSETUP32.DLL
                                                                                                                                                                                                                                                                                                                                • Size 1.5MB
                                                                                                                                                                                                                                                                                                                                • SHA256 fb0e534f9b0926e518f1c2980640dfd29f14217cdfa37cf3a0c13349127ed9a8
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                DXSETUP.exe
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNREAL5\prereq\dx\DXSETUP.exe
                                                                                                                                                                                                                                                                                                                                • Size 505KB
                                                                                                                                                                                                                                                                                                                                • SHA256 8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                dsetup.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNREAL5\prereq\dx\dsetup.dll
                                                                                                                                                                                                                                                                                                                                • Size 93KB
                                                                                                                                                                                                                                                                                                                                • SHA256 2a61679eeedabf7d0d0ac14e5447486575622d6b7cfa56f136c1576ff96da21f
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Apr2007_xinput_x64.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Apr2007_xinput_x64.cab
                                                                                                                                                                                                                                                                                                                                • Size 94KB
                                                                                                                                                                                                                                                                                                                                • SHA256 e7a09f8235cc587cc63f583e39fbc75008d9677c8bb4dcc11cb8d0178a5153ac
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Feb2010_X3DAudio_x64.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Feb2010_X3DAudio_x64.cab
                                                                                                                                                                                                                                                                                                                                • Size 53KB
                                                                                                                                                                                                                                                                                                                                • SHA256 832b6d48e169b4725ae482ea4d1c3360a09631a89b2fac3aba81a50805a50adc
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_D3DCompiler_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_D3DCompiler_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Size 922KB
                                                                                                                                                                                                                                                                                                                                • SHA256 213ad66ab9e469db1e6a49a646d082bfc3700db94172984e7e36801612af50c6
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_D3DCompiler_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_D3DCompiler_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Size 909KB
                                                                                                                                                                                                                                                                                                                                • SHA256 417eebd5b19f45c67c94c2d2ba8b774c0fc6d958b896d7b1ac12cf5a0ea06e0e
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_XACT_x64.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_XACT_x64.cab
                                                                                                                                                                                                                                                                                                                                • Size 121KB
                                                                                                                                                                                                                                                                                                                                • SHA256 06251ab76450feb7dc2ffb9be7615f5eb56960cefa4c990ef560f2c6f2a7551b
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_XACT_x86.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_XACT_x86.cab
                                                                                                                                                                                                                                                                                                                                • Size 91KB
                                                                                                                                                                                                                                                                                                                                • SHA256 354c2e579ed00b391dd5d8be91b0f45115e7c232ed1b842747830be0fd26e915
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_XAudio_x64.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_XAudio_x64.cab
                                                                                                                                                                                                                                                                                                                                • Size 270KB
                                                                                                                                                                                                                                                                                                                                • SHA256 51500283f69e97f5beddb073ba2a9017de3d30379c0dcc4d11dd2236ce07b317
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_XAudio_x86.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_XAudio_x86.cab
                                                                                                                                                                                                                                                                                                                                • Size 271KB
                                                                                                                                                                                                                                                                                                                                • SHA256 7b4332207563beba1103744b6db5399ad150e9e6838f9d5a71497e7eb3645ebf
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_d3dcsx_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_d3dcsx_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Size 735KB
                                                                                                                                                                                                                                                                                                                                • SHA256 cdbec7e3a5a0fef016eb294b036f93c75e45c6ead8d99397f859a32d23fe20cc
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_d3dcsx_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_d3dcsx_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Size 744KB
                                                                                                                                                                                                                                                                                                                                • SHA256 e2c5a2cbba7f211b6ca72ff8e5f69cba1f83be06357311b19e64f582fd3d14e4
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_d3dx10_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_d3dx10_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Size 230KB
                                                                                                                                                                                                                                                                                                                                • SHA256 efce48d425c07f1faad4a55d7061a01ed6245aac17f43163cf2a23cbc9a3054b
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_d3dx10_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_d3dx10_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Size 192KB
                                                                                                                                                                                                                                                                                                                                • SHA256 a8cf71ffb80b683616d0621be96d3795b0ffda3877ed2d80cd958bfa393ddcfc
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_d3dx11_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_d3dx11_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Size 134KB
                                                                                                                                                                                                                                                                                                                                • SHA256 c1d0d56b83bfb09a5e1a89e1898bb74446a847b30a968f3664ec2d87368eb63e
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_d3dx11_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_d3dx11_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Size 106KB
                                                                                                                                                                                                                                                                                                                                • SHA256 a58cefe822e371d078eaf89319f832693352ba7d62079320074397f0f3425961
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_d3dx9_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_d3dx9_43_x64.cab
                                                                                                                                                                                                                                                                                                                                • Size 915KB
                                                                                                                                                                                                                                                                                                                                • SHA256 9b98a1269af7f3a0007bfdc73206a47a6ee158d34ba8a87009396c18186bb06a
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Jun2010_d3dx9_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\Jun2010_d3dx9_43_x86.cab
                                                                                                                                                                                                                                                                                                                                • Size 750KB
                                                                                                                                                                                                                                                                                                                                • SHA256 fcc6cf0966b4853d6fa3d32ab299cde5a9824feaecb0d4f34ea452fb9fd1c867
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                dxdllreg_x86.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\dxdllreg_x86.cab
                                                                                                                                                                                                                                                                                                                                • Size 43KB
                                                                                                                                                                                                                                                                                                                                • SHA256 4afe0249a13868b7c4a92b4d53c998adf6053eb5e2c47fd81020fd8d4bb11150
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                dxupdate.cab
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\GPUUNR~1\prereq\dx\dxupdate.cab
                                                                                                                                                                                                                                                                                                                                • Size 94KB
                                                                                                                                                                                                                                                                                                                                • SHA256 e18a5404b612e88fa8b403c9b33f064c0a89528db7ef9a79aa116908d0e6afed
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                HWiNFO64.dll
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OCCT\HWiNFO64.dll
                                                                                                                                                                                                                                                                                                                                • Size 2.4MB
                                                                                                                                                                                                                                                                                                                                • SHA256 0ef6848ea5c87c856c3f7a952ace9cfe7d24a4cab354319bc6272092f6ad4cb5
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Tmp1C06.tmp
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\Tmp1C06.tmp
                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                • SHA256 5d71563b534defdc6e7e044b6016990020719f37805e0d347d72f017f5a53468
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Tmp1C17.tmp
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\Tmp1C17.tmp
                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                • SHA256 09a7ce8ba23daf7b5c692dbb0134fb8d70f603ec2b822d69f01ac9b01ccc653a
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Tmp1C18.tmp
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\Tmp1C18.tmp
                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                • SHA256 d46d93bc7dd365bd7349472d5be4ee885efa726fcc3f8f8e6309470ca0e10a6e
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                __PSScriptPolicyTest_gc33esar.rzu.ps1
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_gc33esar.rzu.ps1
                                                                                                                                                                                                                                                                                                                                • Size 60B
                                                                                                                                                                                                                                                                                                                                • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Nitro-Generator-discord-nitro.zip.crdownload
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\Downloads\Nitro-Generator-discord-nitro.zip.crdownload
                                                                                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                                                                                • SHA256 8a02c7a3a7b7bc12df0f144d7f19e4234cfb668f0363ae840c8bc5aefdb3fe61
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                Nitro-Generator-discord-nitro.zip:Zone.Identifier
                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\Downloads\Nitro-Generator-discord-nitro.zip:Zone.Identifier
                                                                                                                                                                                                                                                                                                                                • Size 202B
                                                                                                                                                                                                                                                                                                                                • SHA256 edf9118be8438fe7e0db67a82094e0aa94b5128f26baf3ec5b670d8ccbe913d1
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                DirectX.log
                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\Logs\DirectX.log
                                                                                                                                                                                                                                                                                                                                • Size 474B
                                                                                                                                                                                                                                                                                                                                • SHA256 30393780d45e4f4df41d399be251abe51b58629c907f2d41bb4dc03b22306082
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                DirectX.log
                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\Logs\DirectX.log
                                                                                                                                                                                                                                                                                                                                • Size 50KB
                                                                                                                                                                                                                                                                                                                                • SHA256 93312ce83050062e2f332eca6ac31fa37675d0eab5a23493a53e5b15b1a54a4b
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                DirectX.log
                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\Logs\DirectX.log
                                                                                                                                                                                                                                                                                                                                • Size 90KB
                                                                                                                                                                                                                                                                                                                                • SHA256 aaed80ceb0b6cc0ef5c9ba06b4ef0bb96719ed82a5b5fa2f19161a777c1ed979
                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                memory/1000-19134-0x000002C0D5CB0000-0x000002C0D5CBA000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-19133-0x000002C0D5C60000-0x000002C0D5C66000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-19117-0x000002C0D5C50000-0x000002C0D5C58000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-18814-0x000002C0D5C90000-0x000002C0D5CAA000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-18783-0x000002C0D5A30000-0x000002C0D5A3A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-18608-0x000002C0D5C70000-0x000002C0D5C8C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-18472-0x000002C0D5A00000-0x000002C0D5A0A000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-18410-0x000002C0D5A10000-0x000002C0D5A2C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-18411-0x000002C0D5B90000-0x000002C0D5C43000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-16733-0x000002C0D5A40000-0x000002C0D5A86000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/1000-16424-0x000002C0D55D0000-0x000002C0D55F2000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-49-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-40-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-20231-0x0000000180000000-0x0000000180694000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-54-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-57-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-52-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-22071-0x0000000180000000-0x0000000180694000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-61-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-53-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-55-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-56-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-59-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-60-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-62-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-67-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-66-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-68-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-63-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-65-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-64-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-58-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-38-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-42-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-41-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-43-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-44-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-20330-0x0000000180000000-0x0000000180694000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-45-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-47-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-50-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-51-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-48-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-46-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-3-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-39-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-18-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-19-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-16-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-17-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-20-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-30-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-25-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-26-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-31-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-32-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-33-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-34-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-35-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-37-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-36-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-29-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-28-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-21-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-23-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-27-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-22-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-24-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-14-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-15-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-7-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-8-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-9-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-12-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-13-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-11-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-10-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                memory/3120-6-0x0000017882620000-0x00000178829F0000-memory.dmp
                                                                                                                                                                                                                                                                                                                                Download