hxxps://simplaza[.]org/rkapps-fsrealistic-pro-v2-2-3/

Resubmissions

16/05/2026, 23:19

260516-3a7j1ady5k4

16/05/2026, 23:16

260516-29dkjady3l6

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
16/05/2026, 23:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://simplaza.org/rkapps-fsrealistic-pro-v2-2-3/
Sample260516-29dkjady3l

Score

6^/10

discovery motw persistence phishing ransomware

Malware Config

Signatures

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
612	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	4472	chrome.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4472	chrome.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134234470179045243"	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-101591186-421676486-4137282292-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-101591186-421676486-4137282292-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-101591186-421676486-4137282292-1000_Classes\Local Settings	OpenWith.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
448	chrome.exe
448	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1836	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 56 IoCs

pid	Process
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe
Token: SeShutdownPrivilege	4816	chrome.exe
Token: SeCreatePagefilePrivilege	4816	chrome.exe

Suspicious use of FindShellTrayWindow 55 IoCs

pid	Process
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
5572	7zG.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe

Suspicious use of SendNotifyMessage 36 IoCs

pid	Process
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe
4816	chrome.exe

Suspicious use of SetWindowsHookEx 30 IoCs

pid	Process
4576	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe
1836	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4816 wrote to memory of 4612	4816	chrome.exe	82
PID 4816 wrote to memory of 4472	4816	chrome.exe	83
PID 4816 wrote to memory of 4488	4816	chrome.exe	84
PID 4816 wrote to memory of 4488	4816	chrome.exe	84
PID 4816 wrote to memory of 3896	4816	chrome.exe	85
PID 4816 wrote to memory of 3896	4816	chrome.exe	85
PID 4816 wrote to memory of 4576	4816	chrome.exe	86
PID 4816 wrote to memory of 5564	4816	chrome.exe	87
PID 4816 wrote to memory of 4576	4816	chrome.exe	86
PID 4816 wrote to memory of 5564	4816	chrome.exe	87
PID 4816 wrote to memory of 2352	4816	chrome.exe	89
PID 4816 wrote to memory of 2352	4816	chrome.exe	89
PID 4816 wrote to memory of 2088	4816	chrome.exe	90
PID 4816 wrote to memory of 2088	4816	chrome.exe	90
PID 4816 wrote to memory of 3500	4816	chrome.exe	91
PID 4816 wrote to memory of 3500	4816	chrome.exe	91
PID 4816 wrote to memory of 5128	4816	chrome.exe	92
PID 4816 wrote to memory of 5128	4816	chrome.exe	92
PID 4816 wrote to memory of 992	4816	chrome.exe	93
PID 4816 wrote to memory of 992	4816	chrome.exe	93
PID 4816 wrote to memory of 3940	4816	chrome.exe	94
PID 4816 wrote to memory of 3940	4816	chrome.exe	94
PID 4816 wrote to memory of 1768	4816	chrome.exe	95
PID 4816 wrote to memory of 2532	4816	chrome.exe	97
PID 4816 wrote to memory of 2532	4816	chrome.exe	97
PID 4816 wrote to memory of 3808	4816	chrome.exe	98
PID 4816 wrote to memory of 3808	4816	chrome.exe	98
PID 4816 wrote to memory of 2484	4816	chrome.exe	99
PID 4816 wrote to memory of 2484	4816	chrome.exe	99
PID 4816 wrote to memory of 3640	4816	chrome.exe	100
PID 4816 wrote to memory of 3640	4816	chrome.exe	100
PID 4816 wrote to memory of 3520	4816	chrome.exe	101
PID 4816 wrote to memory of 3520	4816	chrome.exe	101
PID 4816 wrote to memory of 2600	4816	chrome.exe	102
PID 4816 wrote to memory of 2600	4816	chrome.exe	102
PID 4816 wrote to memory of 5696	4816	chrome.exe	103
PID 4816 wrote to memory of 5696	4816	chrome.exe	103
PID 4816 wrote to memory of 4100	4816	chrome.exe	104
PID 4816 wrote to memory of 4100	4816	chrome.exe	104
PID 4816 wrote to memory of 5844	4816	chrome.exe	105
PID 4816 wrote to memory of 5844	4816	chrome.exe	105
PID 4816 wrote to memory of 3472	4816	chrome.exe	107
PID 4816 wrote to memory of 3472	4816	chrome.exe	107
PID 4816 wrote to memory of 4824	4816	chrome.exe	108
PID 4816 wrote to memory of 4824	4816	chrome.exe	108
PID 4816 wrote to memory of 4200	4816	chrome.exe	109
PID 4816 wrote to memory of 4200	4816	chrome.exe	109
PID 4816 wrote to memory of 2336	4816	chrome.exe	110
PID 4816 wrote to memory of 2336	4816	chrome.exe	110
PID 4816 wrote to memory of 5628	4816	chrome.exe	111
PID 4816 wrote to memory of 5628	4816	chrome.exe	111
PID 4816 wrote to memory of 2896	4816	chrome.exe	112
PID 4816 wrote to memory of 2896	4816	chrome.exe	112
PID 4816 wrote to memory of 3360	4816	chrome.exe	113
PID 4816 wrote to memory of 3360	4816	chrome.exe	113
PID 4816 wrote to memory of 3128	4816	chrome.exe	114
PID 4816 wrote to memory of 3128	4816	chrome.exe	114
PID 4816 wrote to memory of 4856	4816	chrome.exe	115
PID 4816 wrote to memory of 4856	4816	chrome.exe	115
PID 4816 wrote to memory of 5944	4816	chrome.exe	116
PID 4816 wrote to memory of 5944	4816	chrome.exe	116
PID 4816 wrote to memory of 5176	4816	chrome.exe	117
PID 4816 wrote to memory of 5176	4816	chrome.exe	117
PID 4816 wrote to memory of 740	4816	chrome.exe	118

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://simplaza.org/rkapps-fsrealistic-pro-v2-2-3/
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffd140ec728,0x7ffd140ec734,0x7ffd140ec740
  2⤵
  PID:4612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2000,i,3144914553290059826,13872774634988010238,524288 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  - System Time Discovery
  PID:4472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1732,i,7674070342185866763,7089460227166602098,262144 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,2884191398320685234,3752313725632147399,524288 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3180,i,12789988703685338365,10819463477856567646,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3184,i,6507675605619125075,13659498355781176593,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:5564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4324,i,3175538539172337771,6076707351074083902,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:2352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4716,i,2206691174013656294,16988075474095669151,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5228,i,9276196782158210944,13322640215646843891,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4880,i,5202214432928684660,4272233601129548871,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5356,i,17288932214832688287,13870150039468232524,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6328,i,12241008087329008846,4120864920229398631,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6476,i,4241334273105705548,3921520238365759069,524288 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:1768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5656,i,15138459593703133566,18331460382547298047,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5544,i,2559678574001812649,4685088822236977199,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6716,i,12577960492090520440,989212336489499074,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6844,i,1950109550532870111,2720010082768669989,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6860 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=7004,i,13452922583807631682,5427998215837803844,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7012 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4880,i,14234121021236886991,16989084522730627915,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7188 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=7328,i,8541990718929750586,4081543503817247683,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7332 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=7464,i,2441489447607094107,8781876742253726640,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7480 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6624,i,9149089076748798002,8498852345032145687,524288 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7620 /prefetch:8
  2⤵
  PID:5844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5824,i,18211301944047499138,13025126244358217386,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5768,i,6166516868160159505,5059933894802964441,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=8200,i,7861472280991210055,14426075835101905325,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8132 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=8604,i,6103753402791226747,12657127817692678072,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8576 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5184,i,4465653215660648540,16848250080200448489,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5092,i,8153270270563730096,16806681315516899195,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:2896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=8792,i,5810975879679656919,14207476973307542955,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=4944,i,6784257362996927987,16882246281670957734,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8784 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7236,i,14200102401595929760,4660553760070380803,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8808 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=8972,i,9035734171234170182,7554673507189687485,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8984 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=8452,i,3708045377971596305,14792644529408391120,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9100 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=5276,i,10999974731348427992,4537181127291243334,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8728,i,1321327820454821457,4925574475597107456,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9224 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=9252,i,11341584395458555437,7434873918774620582,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9388 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9516,i,11362066664907875981,3576058502433238626,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9528 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9676,i,354390661434315060,3381957614728615216,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9680 /prefetch:1
  2⤵
  PID:644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9832,i,8230474363770897935,651448075826311941,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9828 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9972,i,8995655829925274084,7918068978570145156,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9976 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=10128,i,3642105730540362460,2163738978592929864,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10148 /prefetch:1
  2⤵
  PID:5964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=10280,i,9253050397194460404,13008420679442015299,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10300 /prefetch:1
  2⤵
  PID:6080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8604,i,7774327633836817806,2536858157345041668,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10420 /prefetch:1
  2⤵
  PID:724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9356,i,4569044213328053878,15681080357379298503,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10160 /prefetch:1
  2⤵
  PID:5452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=8928,i,436369363339625085,12744487738552237141,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10568 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9980,i,16988916529787212052,969379371237641421,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10104 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9988,i,7650403918021768014,7064845321990824776,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9616 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=10016,i,8690222484899149396,2902121018764743724,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9636 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=9612,i,9768921430768925611,7684855132810477052,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=4916,i,4787672171134677115,9409950101435568097,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8636 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=9916,i,8126039259196073809,4604141030227258866,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9280 /prefetch:1
  2⤵
  PID:1292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=9016,i,526382306602034679,1907382609745707046,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9052 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=9100,i,18386101826935082087,11801748797949152131,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9716 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=8580,i,9388169735166045346,1342648524039715184,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10184 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10664,i,4176682983700135797,7008996551230374993,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10680 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=9064,i,11579416362208345005,5361041643144351114,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10796 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=10652,i,15644078746643630170,13781236603527137255,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7148 /prefetch:1
  2⤵
  PID:5368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=9396,i,9178281348322127871,15393911356356483689,524288 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9420 /prefetch:8
  2⤵
  PID:5364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=9400,i,14929046864736491413,17025142182671949568,524288 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9448 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=9392,i,13960230108447650929,10781493482913173367,524288 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9440 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=6352,i,3671235060352333594,707793897600094645,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6444 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=6872,i,1081842495810630929,2898639723865972897,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6644 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=840,i,14492060846818812618,9683243697526601522,524288 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3404 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3052,i,15098931581580449903,1093600493986322912,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8580 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=6428,i,18261166765866323750,6198662801980491213,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9092,i,1243249839184400287,3841857261359474709,2097152 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=9040 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6416,i,6724113585628044206,1519125775531498549,524288 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10720 /prefetch:8
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=9912,i,6478041842763882648,11026163984720218276,262144 --field-trial-handle=2084,i,18030199426044837755,15622960084873359140,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=10744 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:448

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5016

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5852

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4052

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4576

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1836

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap15489:120:7zEvent3137
1⤵
- Suspicious use of FindShellTrayWindow
PID:5572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 878188969669ab2c97b8533389e0ef76861cf6d8c5c20185ba3bc82d723ec2ef
MD5 a1554f420002cac77acef37221f1fc37
SHA1 d326349446cf95692d435301823531b3e5275caa
SHA512 b88599d438c19d32628d129d0764b6f9a80dee80bb50ebcabe8440a646c0c098bdb2efc70c27cfed00dcae1e83d8d266c1c08b20a0bec754be6fe4dcc62f153e
TLSH
T1A8E02BBDC925983718FC0B2C65544746FB0017A72A90491F363D810D8FB573E41D992C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 17KB
SHA256 03b97709ac40f6fb7cb6997d96ace22fce4fb94e7c4d6d384b640c9d139f6cea
MD5 433ae49b6af437db7daf66dc1b120774
SHA1 975554a2a876b0a659b9e5c464ec672e7c750b04
SHA512 f0e113115fdb62e6cb9e10caf8799af0bb0ad50a2f32f8a9ce605c44098135c35e79c21ed03eae22b97021f15ee609040f7eb7c0ff3deb08e4ea383a64d7fa6e
SSDEEP 384:J4rTulD2R4GC9KlbQSWSGr5yZNcxksrHBetMZ:ATuKDC9KpQS0iNJmhetO
TLSH
T17182C0CA9D06E4C7DBD60FFF326D8B0247D162120A16E705B538E0385DA17E6ADA74B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 413KB
SHA256 438c16a2c164602993843f69a9c2021a9694b5a01c66ec48afac0a63a8858a8e
MD5 5be6c3740660714b68ba11709c575ad0
SHA1 ce2a1a6980920a6e054e63f69c14f4552c8ccb27
SHA512 40f5a610e8b85693ab5839e851a47ff39f7e70c286745c57acb0639b84cc89da4e70cdb46b334d71964b7461032b34b56d5f50ef779da460d2bf081e7b884b6a
SSDEEP 6144:1Jp+q9zKnhd+n+0qz6wRvVgs6bstJRcOtWCniHLMgy1yoGA3nx+Vjb4Ewbs+y:znzKnhdAqz6w9aqt/cOtWCniglABYs+y
TLSH
T15694124A1B8848F681470C6BA36863F7F325DC105DC84F5724FCBB69F6BA6BADC15028
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000037

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037
Size 340KB
SHA256 90ebbfdb10998967bdc13e0358563c2999cb28831a88a01da38117acfe1a5841
MD5 635622f7ad6880909104ad84c780942d
SHA1 62f8bb07954d87d70ba053c1375e3fd1234f09eb
SHA512 181006aa47144d2664f314e0fde1ab9c230602d23afed0caa45b1de562eae535ffebddc4bd7d70ab2d953d3c511461d571b8ab45cdd88f8a3ead9233c8a2f24b
SSDEEP 6144:A1TTwF1mA2oXmVRptFJY0F1q5rJYltY7j80GIP4Fkcoya9wKLM2HFx/xZ+7:8TTwXNbXgtFmSq5rJPjBRPWkdya9w32o
TLSH
T1927412462F8A9EE6C85759C78255927735298C704F403F63313CBF5ABEF46C9E81A138
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000038

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038
Size 320KB
SHA256 40c0784a7261c50030ef6c5e33e0a19342c086940d177031596008577c3d6395
MD5 e710bcc6d8a0a9fa58548add622b2d4c
SHA1 5b34eb358a7a9b98efbacc79b255f0daafe18f78
SHA512 549003d845eef9bda1d3407d0a93bff09507aad765bff277f3bb86135297a910bcc47272ba717da12ee8cc289ef071c5f82f7e329d81a5910e621a4d206221e4
SSDEEP 6144:g7mbkeh/Qg8pvtaPQ5GFZPlvQZ47tEjkgJ3mf5oia8qr0dEq2d:g7m4ZF0PQgFfgtkgJ3I5ja8qrxq2
TLSH
T1606412091FC9865DC54728DA038C8AF573B65C210C087FAFA4B0BFAABDF55AE841E425
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000039

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
Size 318KB
SHA256 1f244d4a6891d2f9a449d7b7a31d38d8787d543cb0b042463a0f892d7d3936ad
MD5 4268983999d59b031c4b176279ef501e
SHA1 a57835b4e6696b5566cecd6dc3cec4c389cde10f
SHA512 0220f01c9da2a0446065fd3808fd462ecd19724d0a3a25585d2544f8c2fff4b89a343460c69f12f109f55b65fc61912ba08c4a1a78da943321951d00f1140637
SSDEEP 6144:SKI7Eh30/gXIMbcUvTJFR1dcW2dYUL+mkcCWiHBVDxEH2:GEhE/YIM3TJF3dKL+YlSHDxD
TLSH
T16664121EDBCF85D6400B64B7421DA3F2A3A9EE201C443FA75FB53E49B6702E1E839464
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003a
Size 422KB
SHA256 a9b5e5cd8c79558890164cb090100c7a24edcea07abf501ca188264c0bc1ff7e
MD5 4b4f739390577bf2d2e6558eef8ad3ea
SHA1 3e1f4273a3dc9752d2c18844f7c700fb93730fda
SHA512 7ff8c23153e178451905638071262148713db184a63e6ecdfb939b8089d6bc4a3450ff5c5379729d71a714f8823ffef5991f471f1bb98b05002304dbe10122f4
SSDEEP 6144:h+Ax9+wZB2utYPFtXmFkIDy3arirVzFDp1hzEoA9BrmlKCgxpM3nQ9X+snZFe4j:oU+wyNHykh5zE7lmlMp4Dsnp
TLSH
T1189412162B098D95E97B7BEB6A0DC3F323642C20694C6F5B1774BD4EF9F1288E864434
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b
Size 437KB
SHA256 67334668c81c6da53454491dd612f3ac46cf1a09375e55a11501f435252afaa0
MD5 aa21422cfec9e2377efaff112ebd74e9
SHA1 1c743a5174d735c902c3164d1b8c827659013ae6
SHA512 2fcd8bffe6792359ce841e062b259e9f991afc494da4add2155fcc50d5561c79e16f7b3f1c27f870851ab36c228cdfa21dc5658e6b9e06a97224dc4f45cb7124
SSDEEP 12288:5jcI5n4iViP/OHsP9jVT6Qxui5DhAUKvc+wy:Vwnos1jEQxueDrAb
TLSH
T13C9423841F4CEE95C8833DE18508B7B7A2614D130E092F7B28957A1EBDF86D6FC251B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000070
Size 363KB
SHA256 987520c161d9a0a6b78a6a2e9ac48fff7df21258a76f765ec62e3d7d872330bd
MD5 b889c4491374b48bd54967089c47b24f
SHA1 a4a0dc062539561c1cf4db1f4eeead5182d86e6b
SHA512 daaf9a7078b7ee13a69823aac7ad50c7dc417d5287bd53b838b11ee99c290a9d8f7cad868703041478e1acd000c7a2e2a97b8d742acce7ba3d933cfae4fba1ab
SSDEEP 6144:Md5+VYpEzQqG1X55Ay0K4P1ucWp6qD//wwgVfDhyeGHBdmtPWVkjOQV3u3:c+VfQq8DITWpNwxdhjGHBUZWCjOQto
TLSH
T1FF84233119E1CC63AC01838B0E0DB54FDA677D697BAC153E1042A8E7D1726BE5CB25B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072
Size 50KB
SHA256 7c25771c42a66c407ad82dc1fd036606c3dede6f50574899ca2488f3a1b0b49c
MD5 a58187db8cc363139f3b2bda1a5e77a0
SHA1 8851b35b4f67e81635c2b8e8c4c129e166446271
SHA512 a6003af060f6bc739ebd11126392abd60972f058d808f4f570d07b8559c34759740259c7525743af6d960efe61e872333deb4162ffa64f2d15e4e1406ba21a06
SSDEEP 1536:I16rMFSw5qvSmkUXnSaW2MDaEEUDOcstYgl:Q6ru7StXSd2V17tl
TLSH
T1173302FAA9C14641606B0560DBF11FFB1200B950D46C23A69D32E6DE5BEAC48BCF39D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 e9f23970b70847790182b331ba8b44fb1a150ee5a85230c9b50265f85ca902a4
MD5 3d36755efe750d31da762f4d4e823bd9
SHA1 2aa10502b502ce29418d674d3368ab9f10d4ca5e
SHA512 68318fa371385e5e156ce8a2fa4d83f5115a1e75eecd787feeb3f7b255ec27ce95f1e1a9757b308bdea4ee91d9cfff31cd4eef3048f5707f066d4e74e54c1838
SSDEEP 96:6Mrtjc4OhqcQc/dHuTCgCgOlAurcg0cRcNC6J/NOml93bcDkbPMLicp0+oUimQa7:6MBc4OhqZc/dHuTCgNOlA0cg0cRcz/An
TLSH
T18291E97D07D0C960DB40C8B817D64D43B73AA9EB35873F3B906AA436A373BE02229C44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 c3237cd8c3689f84eaeb92088908ac2d29ab6ace9281f2306a632ee93768ffb9
MD5 384298935625389df68782d893268f98
SHA1 03a53b3566b627a8eb55a4f506051fc0548582cc
SHA512 cde5ed02e0920947e5676a987b53946561a53231a55f19cbbf3fe898f0a1870339b62f74c5bd888de35c0685441d7df8ba307e51e13a754708d9d18b9324345c
SSDEEP 96:+elXtCcJOhqUQc/d1lqTCgCgOlAunWg0cZcNCyhJ/N93Dl93bctFbPALncK80+oM:F+cJOhqhc/dLqTCgNOlAMWg0cZcp/D38
TLSH
T16EB1FA790ED1C451DFE888B423C21907B63A65E735473F3B8869AC36A37BBE01269C0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9ef8e6e59f7d78b8ed5e689b2934fcda6ff1af02e8467bea1cfae566b793d8c7
MD5 585055e3abb9e653dcf50e5cd4b72194
SHA1 0a884479f693ff4127cb42c2b3f6c650ad4ab0c1
SHA512 be8ff58b68fa2968b70015d99d5040b3ad75c46f9a9d16b8864d69823872e46aeaa7e804d1f25ecd47e3fee114f1ca2199c489333600a7796ecb9c3ced8a65a4
TLSH
T12871FB7C0BD1C8A4EB0088B426D25947B73499FB3A033F7B905EA03BA773BD06665C45
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 56KB
SHA256 38b5a9bb4ffd9dbe5058454e08c01d7393cbd50ad360129bd974407792009321
MD5 58536ef6fbc88bf7cc25acb9db69ebc0
SHA1 04c8ec94890e2dac37191cd3b74ab8c25d8f7d0f
SHA512 c94f0d6387187c842831aede02d136f65c9fa27f4db2bd6d193a485d60f6552c4be17e5ddb4c0816d06e12391997ee6447dc86d5f90c7377f0759a83a38bf471
SSDEEP 384:Do7lWEMbPaedzeS4dBesmsTE3e3diBeAVmGhJJOJPTGPoiLFOeBJxCNfmJzoxHm7:OoY8Lv5jTIevbTC5OgCxSZ02lTTd0
TLSH
T17D43AEF7C3F85A6D8D3151F1AA163E2FCE5D0825636C782A89E4DF5693E1470E202A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9f95735e8f71f8669c71bc2f82f7b03cbd55b5d061d36bd5c6b7d59a8b6a5bb9
MD5 96460ef7584b379112ddaec925744367
SHA1 ec1ce2f39e25fea2bea2c7b907dcc47cbe15d3e1
SHA512 67dd1bac8671beb0ae943da2b24e8b9b8ffc7254f57b1c54a6623b77957aeebcc216d7e30948d8cce6926c1c07ed89aa6bdaa30091564fd629deda658ee99e07
SSDEEP 192:9RfTgKCul8v7dpUPRpFEP8ycXi97Hsb+WNDgQ5yg1MUQNq2DFe4VyIsnAUgE:9RfTRHo5QXcdw3J2/E
TLSH
T1BC52B55FAA30257B8DEAD22AF925BB57D3F5202166D01E48EAFC8E1C15D76CC3223417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 f9d06c4ca8d837ced22be906c5a80dffba89df3f8e05ad53dd3784d668b85688
MD5 41b819ee394cbfe902f3a8d5c967f153
SHA1 36cba0d1e38ca64489420ca54cc314ed731745b1
SHA512 c720442dad134c1aeda32e1d9b9a6022a5a152fc56d8f33758cf11429f5aab905f0f846913a3b484c3505a3c3c43eb271aaca5f11df9270753880a43c491e004
SSDEEP 192:9RfTgKCulxv7dpAPRp2Uw597Hsb+WNnSHRNq2YFesVyIsnAUge:9RfTRHh5UXYdwMC26e
TLSH
T1ED42B62FAE24653B5DDFD22AFA25BB53D3F6102175941E48EAFC8A2C14D75CC222341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c1bedd98679330faf551c6870e819ffec0e3ead81744975468aa8f49f8deb8b5
MD5 9620639993a3a9f96f84fff3d43cc5ff
SHA1 daf87ef4530372db4c62fb137871fe82db8189d3
SHA512 1e66775313f0db9bdcfe216bb8440ab37153032066088887f07b48fc260e8b131b02f88aa1d7b5d78276ebfa8b35668c622e0954d44099e98bb4eee6aa9f1baa
SSDEEP 192:9RjcBzTgKCuU8v7dIUPRpFEsP98ycXqW97Hsb+WNDgQ5X9g1MUQNq+9x2pFe4Vyu:9RjmzTRmo5BXMdwIJi2Rvb
TLSH
T13562B75BA930197B8DEBD22AF921BB57D3F5202166D01E89EAFC8E1C14D76CC3123417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 2d416206038f27cc9b8c0aa9c04337cc913022e24dfb166b1db75dc81a65dfec
MD5 457eaa0f7d87c9abf88767748024ba10
SHA1 1962d0f1e7e492eb023f572cdea5551f3f665be4
SHA512 7c22e7153d94a6f39d8d00a5226234a37663ee970e8593b5c8b752aad0b9b3278966063e2bfda5aa9bc72a4506903435ac9217f17b5c65f6f5cb37a4bfac4dd8
SSDEEP 192:9RjcBzTgKCuUAv7dIUPRpF6TsP98ycXqW97Hsb+WNDgQ5X9g1MUQNq+9x2pFe4V/:9RjmzTRmc5BXmdwIJi2Rvb
TLSH
T1D362A65BA930297B8DEAD229F921FB56D3F5202165D41E89EAFC8E1C14D76CC3123417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 672019882e002e1c74a34f2f16715a7616af8372098f2f47a238cad4ee6244d3
MD5 ca781bbd5aded40027c079ceffea05d9
SHA1 b847d8b685754ddfe5518f27448e6fffd8bae7ed
SHA512 c4b80e957cc6022f10a66289e159c30e7f66343c79cd2e0cf41f2bbbc39af193d9721b28d2590da23b7b2c6303387cafd9a7ecba053ad0279cbb0bdfe8455439
SSDEEP 192:9RfTgKCulwv7dpAPRp2EP8ycXi97Hsb+WNDgryg1MUQNq2DFeMVyIsnAUgE:9RfTRHs5UXJdwGJ2BE
TLSH
T18E52C65FAA20657B9DDBD22AF925B757D3F5202165C01E48EAFC8E1C10D76CC322341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 130ac3d5078ba715b1d87d1a8dce5e8b9bde7a77f38070dce8de8a353c086928
MD5 03448b68c1aead7c84263bfcdee2c8d6
SHA1 4549849658d7ec1171fbfadcd861981c27723458
SHA512 65af65dd7350804f4dc4d98e41153025ead9ffe10e648b3556a527e9e4d06577a776b472ed4a8cdb77c42bd3752cc9d784074874f02bf33a0d39438d7b73e080
SSDEEP 192:9RfTgKCulhv7dpAPRp2EP8ycXi97Hsb+WNsyg1SHRNq2YFesVyIsnAUge:9RfTRHx5UXJdwxC26e
TLSH
T16642B65FAA20657B8DDBD22AFA25B757D3F6102165841E88EAFC8E1C14D76CC322341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 6646989bfcb5c97513acdde7bf1e6a934ad9e4a758723746e8ad756689192b52
MD5 a53b398127eef947fb45f97818cbc504
SHA1 feb83c16e01a91151075652e72c375abfdb60d64
SHA512 7d4597211aa3b5d84a9750798703e7119d689c2b5783eba16dc6b3a7fad248d1392de105073b4174c487374230945692a752279764d5846cd7995ff455d202cc
SSDEEP 384:UOjwL7KxkXqKf/pUZNCgVLH2Hfgsl5T7pLuLcSjGHXODwn+ErU3uZHG29t8OPHu:U+wL7KxkXqKf/pUZNCgVLH2Hfgs3T7pe
TLSH
T16772F8A76C4C9E370FD8C5CCD82A7B4FADB5024B65E9886482FA581903D5BDB11062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 168KB
SHA256 c97043fa69ee1e1a02ebc7e8db422a7a2e24b73e9ac86a65510ae8bce692ec51
MD5 0d6865c7779eb7809f81775cdb51545c
SHA1 3c98c351626111a237dd2dc9fdaa6c1b766dda75
SHA512 c1ac9c8f3f435f825cf299528207d93f4d83d385d18fb13b92998431fd2e9e66a5837ff290bd13024220589be01f4652c69174f9426e2b8bc8517204effa991f
SSDEEP 3072:+Qe+sswSjnxPCA1jDNh5NvawiHvwRUt7f1KULC1eTa:+csswK5MwCvwRU2Tma
TLSH
T19FF37346D1F8D863AF7B0053E8967E82F32C3147E619DAA0F587BFE1501E62A70B5835
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 a54053bee8e27e8ad9d1c19acf56770b6feb2a35987c709aa86234d3fd7efb0a
MD5 d33dfaec14ab81917822e8f6123bbf09
SHA1 3d59a1865360fdb5f9ed63d5d85678251e6fb045
SHA512 c48ebd10c45db5152b4b4942214f1e746f0e44a65af5b4ca0a8d191a73386f53a70ab67a95408ac9c294a6da1267ee0a4a194117fcee88d7f83f4f3b46e10f25
TLSH
T1C7C01213C00FA122C09703B4245BE99C71187F68DA0A1B585BF0A937EC385619825299
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 9f029478cf1375368761bb1c52451f44daac91ee7e63085b19137d04a5fcb818
MD5 c7568b304a280e59a8b27e8468f801fe
SHA1 80c6011d2456c14b4264123083e74a118cdbe932
SHA512 0258398a415be8c4f1b08fe62761fd13407b7b9e6e5a8aade9bbe2ab104a8df7cbfd93c8e1994360e64e9bb81e75cb1e67800c46e9fe8353c8f68ec7d2f3ebc5
TLSH
T1B8B0121080855112C04202F01182348C73549F109A0A2B05A3F0A922C825171C914050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58391c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58391c.TMP
Size 96B
SHA256 a20d2fb65949af060e97b00a9056a69b04b5176bda046ae1d1ed54d583e34950
MD5 aa9dfb93aa9e888dcd892e2480feddd4
SHA1 b1fe5b760c9b4a31cfc474df89d9d8bd2e6e545f
SHA512 fc4a7f778d9f46a6d94eacded9ebf8bee909051635e379a1151f1b2a6e25e97cd9f59e8ae5fc2ca8628f653a16dcbfed51005ca1cc2fe092d515251fc0a739a1
TLSH
T1D1B02223C2033322C0020BB220B0AAC8B320EF20C203220283F00B23CC2C3300020020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 50a9942ee62373434586981e21334944073c74b0c8bfda44571a3409aa4d2366
MD5 29e19852438f151f27ef7c0a585cdba5
SHA1 974a93c96132c5267fbed0ffb40d3c1cea0dc99e
SHA512 83a749520533da42e71590ce221034233c961f7fe446f39433b2cc6da13ba9190ab7249650e9bd27a96020817040ce926688baa761ec795223a3deac9defb1f3
TLSH
T1ADA002600350408DD01157701483039CA310DE503502170341E609998C711944D11052
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 fd45ea9ba703abf37e952bb10f4c5093386e970920b1ba215452f3f955cae908
MD5 62d5750351b9892c387b7c5d3ef321de
SHA1 febd9ec5b3958040245eab1e9697ffdc5e7fe2db
SHA512 ab54a04ab00122067b9ab90cc2a6f77073df1b4c0df88b1ead768a2ffd8a0ef6f7685f17662879a9acd1a5377b39c755e78ce73a3d2335ee9b33fa9eaea4cf1d
TLSH
T12FB00225A194D897D8811BB056C3D69873307E715A07430378F50EA5A8933454F52095
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 c2f6d0a934a0d424ac229574086b47f2a75e083023db7070d7bb636bae17b927
MD5 be09ef1b975a2849ae16dde9d2667111
SHA1 490218516d3442ad870a43ee23cd4050212da0a7
SHA512 e3d876f0d50503e441780a98231d9fc222dc0a6bbe685d9c0cf14dd63f1bb443cf3fbe5b42de50e72eb48b3cab2b9a394995702e122cea0b5a2ee7018597f938
SSDEEP 192:eNtRxSRHCw95SiU2bxK6n+NSxM5AAFkN1s:CtRxGHCUS+F+NP5AzN1s
TLSH
T1EBE1FA72D8795C734AFBE686F5063B078EB8619BDA60694CDDEA4F0811DB1EC2303521
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 0173e396b5e8077dd4656b3fe5707e76ea59aff0a655b5c1521577cdee31b23b
MD5 75119e8f44e4c5f4ab8b34e012d2ced0
SHA1 a3feafb538fca3f19c5dfb9b0361986cf264e20d
SHA512 0e8ee6fafe039a4b521d2d9fbc3ece29fa14f6e5ae1988733300f24e490cde6f8a72f2517c06bf0623f2541fe4bb2d4ac703267361ad87ee042d19525a4cff5f
SSDEEP 96:eNC68xSd++nHQU0Ttfy95z4CRDotok590D3B6PJGyvyL9QN5HBC1Zwh11a:eNCRxSRHCw955DUDkxo0N9QN5HBC1q1s
TLSH
T188B1E976D8698C77167B85C9F5066F06CFB8B0EBE6609A9C99DD4F0D11DB0EC1302532
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 e27e546fab33d3d257c587e68ddcf9c3ec280a32702894b5157d2f282ba7c4a3
MD5 d6f4229df38a7a229fb7bbb935fb34ef
SHA1 e25ac29e0f5380431ba5870876164b8be6789ba9
SHA512 d0b1039913379e6d1f4b9ba953e299603844ae33ee763cb9bfb10c3bc0fcb5c663cb610ca93617ceec7712db82c20ce0e788f08b03f8a11194ca22d3fbe012c0
SSDEEP 192:eNCRxSRHCw95SiU2BxKrvI++80SrM5wDsC1s:CCRxGHCUSoMw+h015hC1s
TLSH
T122D10A76A86A9C335AB7C5C9F4036B47CFB4A09BAA505A98D9EA4F0D51D70DC2303532
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 b2930e64a10e4853de6827adf198f70ad4a814c79976ce92f92919c86bccbf40
MD5 e40c94a6c01132507ef134424cff6c2a
SHA1 d22fb8f7ef07fcb4884771e15a612fd592ac5ad1
SHA512 75f413132416f20f33884d4dfc0aa6ee785b6d2fcce6d5982c18d2a8999c1dfa2ecfbbf59f8fe12906f3b0fd2a5b52f71c74a86e5fbaa3ae00a7afcfe8c0479c
SSDEEP 192:eNtRxSRHCw95SiU2wxK6n++80SrM5wDsC1s:CtRxGHCUSVF+h015hC1s
TLSH
T10AD10B76A86A9C3359BBC5C9F4076B07CFB4A09FAA505A98D9EA4F0D11D70DC1303532
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 d2d26938fc04c86ed9c2699bfb132762b2d23d485d6b95e943cf413ab86f9aaa
MD5 95144c9b37cd55c47db6c5c335d2a276
SHA1 a12ae997f455017a50d6c8a80b07009846669487
SHA512 71ab324527a42e6f6050fe0e3e2a043a54d5ff6d9bdf3ca3061ffe5a60679b61dee35a80fd3cfdc04855195dfbffeb4984d621eb2022abbc0c6ee4494d552bb9
SSDEEP 192:eNtRxSRHCw95SiU2bxK6n++80SrM5wDsC1s:CtRxGHCUS+F+h015hC1s
TLSH
T120D10B76A86A9C3359BBC5C9F4036B07CFB4A09FAA505A98D9EA4F0D11D70DC1303532
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 d0a15796af7ce0c24098a5646dea8d6bd8069aa42fc80e6e312f00592fadf63e
MD5 11fe56039b8ed35f7aafbebc5f873bd8
SHA1 2c199266f0af1cbab77f4d1f37fe8e2527d1494b
SHA512 0336f572e6f37f2bcca428cd70d608f9637142abc7f0e21590f555aca93321b9b4ff5bd7d35904faed90477f0be97fedad7c251dfbbdf44646091cf3fc951225
SSDEEP 192:eNCRxSRHCw95SiU2PxK6n++80SrM5wDsC1s:CCRxGHCUSiF+h015hC1s
TLSH
T19CD10A76E86A9C335ABBC5C9F4036B47CFB4A0DBAA505A98D9EA4F0D51DB0DC1303532
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_idx.db

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
Size 28KB
SHA256 c7ebd38567f391c91655fcd0cedaf8f95f211d223f14f575cb61698b7fb8d43d
MD5 e5946e60e8826332019211369fd1c8fb
SHA1 dcb03e9a37de74fb906a1284a12420e994a4587e
SHA512 46c4c5daf81b849f41331abcb8f6636b6a061471aec8c634959d4765215cb382cba5f9d53e03951ea72511da4ca4b506575ce3e8a8c5b87549d0567f32f27af7
SSDEEP 96:ISmH6pZn/wddzM4EX/G1aGbOvrJzNSQLUDh1S5GN:ISV7nIddz7EAERNS6ABN
TLSH
T1D7D28492B849E602DE492C32AFEBE2DD36313D16DD2B021335D1B77F49BB8C10D69499
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 7KB
SHA256 b89c7e3d07c5813f75a708d2b2f74ade944156d1f7810329e47b51805fc50de5
MD5 b27215f9199859229489078533b21946
SHA1 fb33567e27071e5ec058b3ef926de38dd75a21d4
SHA512 8a08dba537a78619acf768201d0414bfc0848bf17244a0ea5a67713690461df1c11605d948908d5dfde9eafc9e76d2dc9c75cce62e3f7c32f4c4bd12fe624bc8
SSDEEP 48:wUdof7IcHPRMaJrreV5/nrZUkUEcKqeV5/nvDrPD4Udof7+HPRMaJKY0uk/iwU0N:OHCQFEcqZPzHqjqrgocHUwHgWL
TLSH
T15AF1E21437FB1A5EF1F38E7AAA7237104F77FC128A15D90E62C143080CA2A505DA9B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 9KB
SHA256 7a17d3810bb368f2e8f08e4cb259ae22da1433dbc0068d124950d95172902529
MD5 8bdd307930addd25de5cd7bce4a7eb05
SHA1 4abd1c8baadefe3195f548fa41c01949c80c4095
SHA512 0a395146549429afbeff2c1815dce5a89e442771576192e2ef06bae3e1c3a9823d2cf15c1825cc8272cad8e39a062c87217c7e0833b7bb6ce45733eff551d99f
SSDEEP 96:uHhTLVFYqTLj/KHCQFEcqZPNHqjqrgoaHUKHgWL:uHJpjyH9YlH4xrHpHb
TLSH
T1D422C1143BFB1A5AF1F38E76AA7637104F77FC128A15D90E66C183090CA2A505D99F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download