Analysis
- user interaction
yes - max time kernel
515s - max time network
516s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/05/2026, 22:50
Static task
static1
1 signatures
Errors
Reason
Machine shutdown
General
- Target nstool.exe
- Size 1.0MB
- Sample260527-2sclxacy2v
- SHA256 844648190dd8688098887a369da1126c1b3ab1c2a664fb603b01cb22e76b6ca9
- MD5 cdde40d9d539198c4067a94bd68bd379
- SHA1 25cd40f005ad0bae49a713316567e13fa1acc3fe
- SHA512 532c3c3fea5c869d0abad69c1cdf6b75d6fb7d113b237c84376cbd1ec4855db8099cb8e3fea4a55c6404cd31c4a37100df6d3b8c302f959357e4830e3e06c86d
- SSDEEP 12288:SnMqHGbdysC4JKi83uiFPe91fxm3w+JxJXop+OOs+ctaNou0vIC:hqHUMsC4h1iFPebfxQfbloN/aN8vIC
- TLSH T129257B1AA2A511F8C4B6C07CCB93B813F672344543B18EFF26D15A661F67AE0DA7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 12 IoCs
pid Process 4676 nstool.exe 5032 nstool.exe 212 nstool.exe 4760 nstool.exe 5236 nstool.exe 6140 nstool.exe 5140 nstool.exe 4296 nstool.exe 3144 nstool.exe 2828 nstool.exe 5472 nstool.exe 4304 nstool.exe - Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 280 raw.githubusercontent.com 150 camo.githubusercontent.com 278 raw.githubusercontent.com - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DllHost.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2420 chrome.exe - Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName taskmgr.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\Locked = "1" explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\ITBar7Layout = 13000000000000000000000020000000100000000000000001000000010700005e01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\Toolbar explorer.exe - Modifies data under HKEY_USERS 17 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040" LogonUI.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "201" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271" LogonUI.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271" LogonUI.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134243958585409277" chrome.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent LogonUI.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00 LogonUI.exe - Modifies registry class 48 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Vid = "{137E7700-3573-11CF-AE69-08002B2E1262}" explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0 explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0\NodeSlot = "4" explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0\MRUListEx = ffffffff explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4 explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\ShowCmd = "1" explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428 chrome.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\WFlags = "0" explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\HotKey = "0" explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Rev = "0" explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox" chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings chrome.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\MRUListEx = 00000000ffffffff explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\SniffedFolderType = "Generic" explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616209" explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings control.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0 = 1e00718000000000000000000000e1a40ed25739d211a40b0c50205241530000 explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616193" explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104" chrome.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202 explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 14001f706806ee260aa0d7449371beb064c986830000 explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 00000000ffffffff explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0 explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel explorer.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0 = 0c0001008421de39050000000000 explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202 explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ explorer.exe - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4360 explorer.exe - Suspicious behavior: EnumeratesProcesses 58 IoCs
pid Process 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 2396 chrome.exe 2396 chrome.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
pid Process 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe Token: SeShutdownPrivilege 3116 chrome.exe Token: SeCreatePagefilePrivilege 3116 chrome.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 1016 7zG.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 4360 explorer.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 3116 chrome.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe 2924 taskmgr.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4360 explorer.exe 4360 explorer.exe 1044 LogonUI.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3116 wrote to memory of 4300 3116 chrome.exe 105 PID 3116 wrote to memory of 4756 3116 chrome.exe 106 PID 3116 wrote to memory of 4756 3116 chrome.exe 106 PID 3116 wrote to memory of 2420 3116 chrome.exe 107 PID 3116 wrote to memory of 5036 3116 chrome.exe 108 PID 3116 wrote to memory of 5036 3116 chrome.exe 108 PID 3116 wrote to memory of 628 3116 chrome.exe 110 PID 3116 wrote to memory of 3776 3116 chrome.exe 111 PID 3116 wrote to memory of 628 3116 chrome.exe 110 PID 3116 wrote to memory of 3776 3116 chrome.exe 111 PID 3116 wrote to memory of 3628 3116 chrome.exe 112 PID 3116 wrote to memory of 3628 3116 chrome.exe 112 PID 3116 wrote to memory of 4316 3116 chrome.exe 114 PID 3116 wrote to memory of 4316 3116 chrome.exe 114 PID 3116 wrote to memory of 1164 3116 chrome.exe 115 PID 3116 wrote to memory of 2596 3116 chrome.exe 119 PID 3116 wrote to memory of 1840 3116 chrome.exe 120 PID 3116 wrote to memory of 4268 3116 chrome.exe 121 PID 3116 wrote to memory of 4388 3116 chrome.exe 122 PID 3116 wrote to memory of 4388 3116 chrome.exe 122 PID 3116 wrote to memory of 3344 3116 chrome.exe 123 PID 3116 wrote to memory of 3344 3116 chrome.exe 123 PID 3116 wrote to memory of 2396 3116 chrome.exe 133 PID 3116 wrote to memory of 2560 3116 chrome.exe 135 PID 3116 wrote to memory of 2560 3116 chrome.exe 135 PID 3116 wrote to memory of 3424 3116 chrome.exe 136 PID 3116 wrote to memory of 3424 3116 chrome.exe 136 PID 3116 wrote to memory of 3952 3116 chrome.exe 137 PID 3116 wrote to memory of 4148 3116 chrome.exe 150 PID 3116 wrote to memory of 4148 3116 chrome.exe 150 PID 3116 wrote to memory of 4588 3116 chrome.exe 151 PID 3116 wrote to memory of 4588 3116 chrome.exe 151 PID 3116 wrote to memory of 2884 3116 chrome.exe 152 PID 3116 wrote to memory of 2884 3116 chrome.exe 152 PID 3116 wrote to memory of 4716 3116 chrome.exe 153 PID 3116 wrote to memory of 4716 3116 chrome.exe 153 PID 3116 wrote to memory of 4024 3116 chrome.exe 154 PID 3116 wrote to memory of 4024 3116 chrome.exe 154 PID 3116 wrote to memory of 3860 3116 chrome.exe 155 PID 3116 wrote to memory of 3860 3116 chrome.exe 155 PID 3116 wrote to memory of 452 3116 chrome.exe 156 PID 3116 wrote to memory of 452 3116 chrome.exe 156 PID 3116 wrote to memory of 3884 3116 chrome.exe 157 PID 3116 wrote to memory of 3884 3116 chrome.exe 157 PID 3116 wrote to memory of 1040 3116 chrome.exe 158 PID 3116 wrote to memory of 1040 3116 chrome.exe 158 PID 3116 wrote to memory of 3564 3116 chrome.exe 159 PID 3116 wrote to memory of 3564 3116 chrome.exe 159 PID 3116 wrote to memory of 1816 3116 chrome.exe 160 PID 3116 wrote to memory of 1816 3116 chrome.exe 160 PID 3116 wrote to memory of 3232 3116 chrome.exe 161 PID 3116 wrote to memory of 3232 3116 chrome.exe 161 PID 3116 wrote to memory of 2860 3116 chrome.exe 162 PID 3116 wrote to memory of 2860 3116 chrome.exe 162 PID 3116 wrote to memory of 4432 3116 chrome.exe 163 PID 3116 wrote to memory of 4432 3116 chrome.exe 163 PID 3116 wrote to memory of 3368 3116 chrome.exe 164 PID 3116 wrote to memory of 3368 3116 chrome.exe 164 PID 3116 wrote to memory of 4188 3116 chrome.exe 165 PID 3116 wrote to memory of 4188 3116 chrome.exe 165 PID 3116 wrote to memory of 1544 3116 chrome.exe 166 PID 3116 wrote to memory of 1544 3116 chrome.exe 166 PID 3116 wrote to memory of 3288 3116 chrome.exe 167 PID 3116 wrote to memory of 3288 3116 chrome.exe 167
Processes
-
C:\Users\Admin\AppData\Local\Temp\nstool.exe"C:\Users\Admin\AppData\Local\Temp\nstool.exe"1⤵PID:1432
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3116 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc2e9ec728,0x7ffc2e9ec734,0x7ffc2e9ec7402⤵PID:4300
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1792,i,4304638762689773735,9674159269864551684,262144 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1976 /prefetch:22⤵PID:4756
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2276,i,5796575816796169438,10770100413725199677,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2288 /prefetch:32⤵
- System Time Discovery
PID:2420
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,7793177195712510101,2382309761783980525,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2616 /prefetch:82⤵PID:5036
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3268,i,16024528776430607645,6398415645476857912,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:12⤵PID:628
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3296,i,14155251694846956968,700083305607791322,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3324 /prefetch:12⤵PID:3776
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4448,i,17131906916069393401,7758458012436574483,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:22⤵PID:3628
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4784,i,6197408827445757652,1735194207210120532,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:12⤵PID:4316
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,18212092945823642207,7906313355487833131,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5516 /prefetch:82⤵PID:1164
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6004,i,5503653940376373416,7229356598435832301,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6060 /prefetch:82⤵PID:2596
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6052,i,9868214071246460621,16634793152991748626,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5928 /prefetch:82⤵PID:1840
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6056,i,10842577981231757698,7943389697932047623,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:82⤵PID:4268
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5928,i,13948116306560975027,16409840185762699174,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5888 /prefetch:12⤵PID:4388
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4684,i,14103276655791460540,7828131747027349877,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:12⤵PID:3344
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3468,i,13921804067034053376,5403706279389081830,262144 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4392 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:2396
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4392,i,2838462390664839532,12726575853889172811,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3344 /prefetch:82⤵PID:2560
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3488,i,1987305723857328949,12173713695558773250,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4648 /prefetch:82⤵PID:3424
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4860,i,13077136593925104847,9223768701388668129,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4856 /prefetch:82⤵PID:3952
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6236,i,1415331914540279843,9197323977731409039,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1196 /prefetch:12⤵PID:4148
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6280,i,10696673874823157460,14885717812864096595,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6248 /prefetch:12⤵PID:4588
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6636,i,18098677393083571326,3686407964967177471,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6628 /prefetch:12⤵PID:2884
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6320,i,3567623983043194799,8800468712095065511,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6668 /prefetch:12⤵PID:4716
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5768,i,18138579929239168512,14195356217129081801,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:12⤵PID:4024
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6444,i,10156906820177205080,2931580264445892020,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6556 /prefetch:12⤵PID:3860
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5892,i,57186507691472749,11033108930254826635,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6324 /prefetch:12⤵PID:452
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6580,i,8014134817073491877,13471900471643032466,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6256 /prefetch:12⤵PID:3884
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6276,i,17353486964350320501,2271151870305051560,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:12⤵PID:1040
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6748,i,15552202013816254849,14202843378364767406,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6724 /prefetch:12⤵PID:3564
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6736,i,14721824022176566182,3407560695412055351,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7088 /prefetch:12⤵PID:1816
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7228,i,3578262697349330461,16971051970027757342,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7200 /prefetch:12⤵PID:3232
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7364,i,4127709749383777645,9286228953715997732,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7368 /prefetch:12⤵PID:2860
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7508,i,9279723432564456015,7835265827608386312,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7512 /prefetch:12⤵PID:4432
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7660,i,7349377862023694660,1033810796817621135,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7664 /prefetch:12⤵PID:3368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7804,i,16661604159459328477,6920077987252125346,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7812 /prefetch:12⤵PID:4188
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7960,i,17726499536637986534,7526964365867617554,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7964 /prefetch:12⤵PID:1544
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8112,i,14417597982008621989,405951722919843021,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8116 /prefetch:12⤵PID:3288
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8140,i,13212094933484215098,11411255533394001379,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8272 /prefetch:12⤵PID:4744
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8400,i,6148381950101977575,8031968449839263518,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8416 /prefetch:12⤵PID:1564
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8580,i,18436024502207648168,5025568887284272197,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8608 /prefetch:12⤵PID:4716
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8576,i,7026702683403935046,1731028295506602022,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8748 /prefetch:12⤵PID:4720
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8912,i,16287826895140945307,3017132353661854003,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8916 /prefetch:12⤵PID:2584
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9024,i,8608641803982806717,8894809354031239569,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7068 /prefetch:12⤵PID:3220
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9212,i,3454912935283376800,5359226893523522174,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9176 /prefetch:12⤵PID:1084
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9356,i,1207975230356722327,11253534404299537263,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9368 /prefetch:12⤵PID:4504
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9392,i,8370645092634125103,61341772011565639,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9520 /prefetch:12⤵PID:2020
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9680,i,5935114824173836294,4629711321185217929,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9668 /prefetch:12⤵PID:5136
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7248,i,11031803995710023347,3228270593569481218,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9076 /prefetch:12⤵PID:5312
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9152,i,8152414021313670705,13498627047976942395,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7180 /prefetch:12⤵PID:5320
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7216,i,7075788824605315660,7407375027922783543,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7296 /prefetch:12⤵PID:5328
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=7992,i,5534157151141480096,4536161310547446897,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8004 /prefetch:12⤵PID:5336
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=9908,i,10294465853017276366,12944528983561727652,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9916 /prefetch:12⤵PID:5344
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=10064,i,15666454139107327840,14836070707454231565,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10060 /prefetch:12⤵PID:5352
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10204,i,3073944466901203699,6192806424129716796,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10216 /prefetch:12⤵PID:5360
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10352,i,10157465762882992238,551620924188174040,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10364 /prefetch:12⤵PID:5368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10500,i,9917882221486333155,17661162525757787684,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10504 /prefetch:12⤵PID:5376
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=10660,i,7953781084784397462,6932303898910469664,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10656 /prefetch:12⤵PID:5384
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=10796,i,12098560061566053641,16467294681981147845,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10812 /prefetch:12⤵PID:5392
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10944,i,11138149973022336721,1716734089095413918,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10952 /prefetch:12⤵PID:5400
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11100,i,14367461736749490072,13132112564692837340,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11104 /prefetch:12⤵PID:5408
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=11248,i,16870525355330378632,3414256481969981580,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11228 /prefetch:12⤵PID:5416
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11380,i,16232934465695279331,17147668180721717183,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11376 /prefetch:12⤵PID:5424
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11388,i,7956248558321745961,928674020377893804,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11532 /prefetch:12⤵PID:5432
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=11652,i,15058336219792576515,6492527502542077587,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11664 /prefetch:12⤵PID:5440
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=11688,i,5152058398159438690,1432336316190968157,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11824 /prefetch:12⤵PID:5448
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=11964,i,17058304664586268255,16481140027111127931,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11832 /prefetch:12⤵PID:5456
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=12080,i,3072376885626208672,7484464110617919636,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12148 /prefetch:12⤵PID:5464
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=12280,i,16456765539496986139,806309389076870823,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11976 /prefetch:12⤵PID:5472
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=12432,i,667798978222425817,9255504111797330196,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12444 /prefetch:12⤵PID:5480
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=12596,i,11209340835367578173,7388206191231108856,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12456 /prefetch:12⤵PID:5488
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=11792,i,8599201161909714537,8032610890261201967,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9892 /prefetch:12⤵PID:1512
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=11236,i,11749935997164032678,17062314078886164700,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11340 /prefetch:12⤵PID:3492
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=11348,i,16645703468734108058,5466289243885061392,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10204 /prefetch:12⤵PID:3788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=8008,i,7300827664092095769,15634887893342026718,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10756 /prefetch:12⤵PID:1224
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=10244,i,6903319523291794912,7639112230909110453,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10852 /prefetch:12⤵PID:4340
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=12464,i,12922493122598123086,9899002926847680641,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10912 /prefetch:12⤵PID:4420
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=9884,i,13966850267680133680,14772154311644167928,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10656 /prefetch:12⤵PID:1076
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=11048,i,1946338507838248069,2761583744465030552,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9880 /prefetch:12⤵PID:1816
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=11024,i,10976668801298895754,4327323127670840551,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8016 /prefetch:12⤵PID:3220
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=12304,i,6130996804805631480,10081707467822315135,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11020 /prefetch:12⤵PID:5288
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=9804,i,5812363482777408280,13649787963216349749,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10488 /prefetch:12⤵PID:5740
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=10080,i,6506816001747547514,12590558572982476665,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12304 /prefetch:12⤵PID:5452
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=10580,i,15780518408001199242,6908638227538547636,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8636 /prefetch:12⤵PID:5344
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=7988,i,14790716748206371756,13928474598428544590,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8840 /prefetch:12⤵PID:5840
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=10644,i,14595127128786693846,16270090268792908440,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7512 /prefetch:12⤵PID:2852
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=8820,i,16816843443947178821,18162109343889801604,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12652 /prefetch:12⤵PID:2948
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=12664,i,5201623532769226054,1264256230043482371,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12684 /prefetch:12⤵PID:4648
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=7456,i,11966484257589271560,7651803822808078347,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7468 /prefetch:12⤵PID:436
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=7420,i,3251228597168549528,3893220969741543971,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7412 /prefetch:12⤵PID:4532
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=9468,i,5313403897323997550,18421211307142745344,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9892 /prefetch:12⤵PID:3184
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=7052,i,10474246937211545315,8974590283349831883,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7024 /prefetch:12⤵PID:3676
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=7044,i,2484066001472414624,7982969705809419979,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9440 /prefetch:12⤵PID:1884
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=8980,i,11282025093104951757,2966818242827435555,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8580 /prefetch:12⤵PID:1716
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=10616,i,12169600553544692246,8907929269915970858,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10604 /prefetch:12⤵PID:3564
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=7844,i,2350789374473331563,1614893360889839245,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6444 /prefetch:12⤵PID:5244
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=6716,i,6042013417086561627,8270621936399054636,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9172 /prefetch:12⤵PID:3232
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=9636,i,5306214391890782351,7446307881857331748,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7072 /prefetch:12⤵PID:5352
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=6648,i,3499675717265789090,6307989626086301234,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10000 /prefetch:12⤵PID:4732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=12348,i,10998059641069813575,2334355076495087415,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7148 /prefetch:12⤵PID:3272
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=12504,i,2314810633731552762,7530632201948942497,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11796 /prefetch:12⤵PID:408
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=12540,i,15148368990061811575,12717840610678495658,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6800 /prefetch:12⤵PID:1452
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=6720,i,4209850885957406575,10204302582566119403,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12280 /prefetch:12⤵PID:3788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=6888,i,212873214615735209,9521823821553721026,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6916 /prefetch:12⤵PID:1784
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=9956,i,8422174329497497175,14973433153381124379,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10804 /prefetch:12⤵PID:5520
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6844,i,10379270432526530968,10990041500839043126,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6920 /prefetch:82⤵PID:5504
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:1524
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:1516
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1332
-
C:\Users\Admin\AppData\Local\Temp\Temp1_nstool-v1.9.2-win_x64.zip\nstool.exe"C:\Users\Admin\AppData\Local\Temp\Temp1_nstool-v1.9.2-win_x64.zip\nstool.exe"1⤵PID:3780
-
C:\Program Files\7-Zip\7zG.exe"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\" -ad -an -ai#7zMap1235:104:7zEvent156021⤵
- Suspicious use of FindShellTrayWindow
PID:1016
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:4676
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:5032
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:212
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:4760
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:5236
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:6140
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:5140
-
C:\Windows\system32\control.exe"C:\Windows\system32\control.exe" /name Microsoft.AdministrativeTools1⤵
- Modifies registry class
PID:5544
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}1⤵
- System Location Discovery: System Language Discovery
PID:5480
-
C:\Windows\explorer.exeC:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4360
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /71⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2924
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:4296
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:3144
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:2828
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:5472
-
C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"1⤵
- Executes dropped EXE
PID:4304
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x4 /state0:0xa3853855 /state1:0x41c64e6d1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:1044
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\112d913f-cbb6-403d-9d15-3dec619035a0.tmp
- Size 12KB
- SHA256 bb491d4428ac13ee5246e1aabf64a127573df9f0df5e91ab464e3e82f8908d25
- MD5 63233c38b6c9fe3f2aeec9380f64b91e
- SHA1 833b01dda8601c13ea81f76646d145e168065a04
- SHA512 1f85076446b465c1bbad6a7d12612bae443cd4828909912bb7111b22c6cf96dbc320a712f0b90c6756c7ea4f24037a7a8b36628ae41d831af1e483731e484bda
- SSDEEP 192:IRVpiZBCOv7spAPRp22F9wHsb+WNnnd0PX0kwqVyIsnAUgraJ:IRVprqYUX/FKwd0MKe
- TLSH T1EA42D62FB954693B5DDAD229FA227B53D7F4212122C42E84E6F8CA1C14DB5CC232741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 649B
- SHA256 80c2d4d1ea0e0cbb8b1ec38dc706d51739ec8318567b56df5fbc3eddeafafba7
- MD5 09b44c1f850cf3f08b8cf9a45cab4764
- SHA1 2e23815e277ab8e067b0be7dfb2755abb67052c7
- SHA512 5fad5fbe54493e336a53af5d0f1ee274382235eca438f16649a3c41e55321b12c4c76fcc0f979d20d4f29855480bbe0cc1fab311ccfec8173190e623f9ffb26b
- TLSH T1DAF028BAC831AC3718FD4B1964A44B4BF761135B2B81595F3A3D930C8FB0A3B4596C6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
- Size 32KB
- SHA256 853ef05d985c695e579ca765ebe7d6ff3de4f731ed36089f5df236484af7b389
- MD5 1bb5abc182a47c122ebd0403b725ae2a
- SHA1 de8634ec4b9f8cd19862999167d42dbcaa41157d
- SHA512 839b873f0b5f7b5f8ff7d02d238912a5a151587de777f95cd99837ebc81da190d27e94ed74eb8c738d7e09f0a525303b92adca6321ab1e548cf258b64d79bc33
- SSDEEP 768:OiS8rRzUNBJ3IEh8Hg7UKVVTpAxhBgzVtL+:OiS8lzYL3I8BDVTpAxwznq
- TLSH T120E2F1BA703AD0B72F2EAA4485D9DEDCBBCE664D85160543A153D1E342E04D3BA1E34C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
- Size 66KB
- SHA256 c46316b754c4eee6fa7daccf7f36adb1fc55c2a9b4cab51261ccec993970b72c
- MD5 13a828efbecd301904600b6ae9e5b8f2
- SHA1 cbbbd42e22a63da8d5901d51dd60359f0b84a503
- SHA512 acd520904c58680d5a2a26a8af7c4b0ac641943b4515c8f6ccdafbf76091359a7800eac33349c9ae1c92c2c295b63564da70b7ec424629b4430d58ce228f9b4f
- SSDEEP 1536:2I6xY2WviGc+Hx1ldcQQiSUT7fn9q1TmZ8YRz:dBlVHfsXMT7lq4hd
- TLSH T1C26312385E9195007B94F9CEAE2C7B19DFD7C029D2BC2DD531939DAB4AE00136636BC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
- Size 87KB
- SHA256 81f4c79c73887e3939a30e8deac19f23d5403e7a592545802c347233cef79c33
- MD5 625bfc88e024d6a1a8716dfc92e08ec6
- SHA1 d524fbffb22a349d3a1e8785f8f9a8f4510ab938
- SHA512 90390b7f97e890de06b1bf5623d2c41bdc226bb6a62e235d0eb704aadff00c724a7a9769b73059b3043d798d7601c617974e3ae8da8f428528304d47fad7ff07
- SSDEEP 1536:VVUeKXprd0SsIHai/ikbDUHJEYTlygx6/T/coqpcuiQEaWbnhXcloW2ivmMY/w/v:zsZrRd/DUaYTEgQ7/5qCXBbhUoyOT/w3
- TLSH T19A931253CEC1164D75C1FA8E78DA078DFA92F4127B2A5848DE14C2E8FA0D5F168EA13C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a3
- Size 16KB
- SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
- MD5 9c6b5ce6b3452e98573e6409c34dd73c
- SHA1 de607fadef62e36945a409a838eb8fc36d819b42
- SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7
- SSDEEP 384:XQrDFyKFRXQQ5pGG913BahobGGOal+0HuXpAWBY:grxyUKQ53pdbGg47PY
- TLSH T11D72D0D62F2702F608F294202ECD392C679D7A25F77E6625F0659C860D58EB0D8F4F52
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a5
- Size 73KB
- SHA256 fb69de564c55a631541f30a26e52223a2b422597eefa5a9e4edf9bceb8231067
- MD5 8822fe579701e42c5e040b1744724840
- SHA1 0c416166b448914abe086a784c24a83078a1b499
- SHA512 016813d4e5539b4e3d6cb4ec59c91afe114a9e530115727c49a21f98b9624bae968083443a1c554716fd6a19da056d9c1d57206484c1f8db58e28ecea3804927
- SSDEEP 1536:yfMXjpph2FzFBd9el1ehoPgjakxvP8Cmm4gTkQ7yo3DR24fxvyyEX2v9iFJ:+MXjpphqzF7ElfgBvPlmKTNyoPfxvykc
- TLSH T10C73025D799F1FDB1D648642F0ECB084892E687229317AB8D5C89000BF3F625EB1F579
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a8
- Size 271KB
- SHA256 92689b5bd3c71083df6b43728787e5550b742e7fb1590b999f0bf5e3a922779f
- MD5 a81dc1d3d3efe6161265c68dad1b0ca2
- SHA1 f0aaddc44ca82887f2239f771f57ab82962ee529
- SHA512 63d4a667cc9f3c51db5381e0757250f786f4af6c5ee141b49bf3c6256574419793595fc98e584617db8fdf1f9a034e19739d74b726739837198af4d87881a212
- SSDEEP 6144:xaWI0kBvvox5nxrcVVQ3aeqUcxpjN6WyFVCdObvHBvf:Nu3or2VVQ3PqHjlToh
- TLSH T1C04423B6BC4C6069BF1799EA8DA75F3D9038E678E750E1D3886271408363254335E2EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b0
- Size 158KB
- SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
- MD5 83266658f29f5cb762001d5d9f6985a7
- SHA1 9ff52157193e1e798944e6a3172d938183f5e550
- SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
- SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
- TLSH T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bc
- Size 21KB
- SHA256 64dffe36b3f74b0eb4364261c78568b6fe79c9317469e82ed2a5529e79241f44
- MD5 7d86312d3147d1cfce62975efadfc067
- SHA1 fea5270287330285c68d357a7686e6e11779b5b1
- SHA512 14416ce9a505d86e4d9c7143cda541a75a5c0ff15801819da7855db7633452b3f8a2df6d9cc7cf088c542cb06bdf2817c3e7f2aec6cd052a1480e0851a1d196d
- SSDEEP 384:mhsinpfFSQcv7TmNJZ8Dbz0uiCMHZULI/iquwAAlylI+FvV00oCVTumX4SjXR+Tg:es8pf/cPmNX8Hz0rCMSs7gZkCtNX4Sjh
- TLSH T1FCA2DF6A74CA675A938352B62B7262FC315AB2FC7803E44A7B62B30317AF5403D5E854
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e5
- Size 35KB
- SHA256 8543c6b8820700a945e096494e4a10ddafa4e3a17e6cad85aa70d4499cdcbf71
- MD5 6a77b6f91ee7066142263466277703e6
- SHA1 afb916d73ac3b85d20e672e2e43637fc05f3167f
- SHA512 8cdebe4f6dc111fecf5bc470bf258395207ccfeb936ab305a0147647227d7565b295df70b2e34ad0a97e823fcba82dd87ffeba4d7c93af111e0be3903cac19ae
- SSDEEP 768:SyD31g1qVeO/3I1FaS80lKlngxQG5lOx46EzuKI6iZkTOEZt:SyD3EweO/3GaSBl4gr5Y4PuKI6CwZt
- TLSH T1EBF2F12663081046F986748598EF3DB2153384F71DCC99ECA6CCE3FB4A1BB2525DA4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 2KB
- SHA256 fa547dfea1447cd7ec720323b669d15a5fdb709ea45bf810be15bf87939db7ce
- MD5 66794a73e8011a953b0445c0ea5d5802
- SHA1 2655d621cbc6c424db367a831e3d850320a3b6dc
- SHA512 6b71f2f84db731a78f76e922d1fc504ff74abbe3f58d8a785ae430a567a5efc8b8d9c38af59c12287112cb75059d3c5fd7f2f36aed3a7a29776a451d3a3e1927
- TLSH T1295109F70D49CA1AFB6108F7079A1A82E2F29C7E7B327A1513D568709D13E536E31829
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 6KB
- SHA256 0c73f8ac4eeb909ddb9d9e27329c56bdd0467590be9ebdb796ea7aa8647ff884
- MD5 b3f48e00f50d88f49f0d6f51824ea047
- SHA1 e22c918f5561594350d1fc791131e5145e4f491c
- SHA512 76b4a3564b459f97a41122b8f4bd150012f25a02e816571637a8bcf04f665c9855d3f032e5d8dfe1c7991ef9253ceabe33eb0ab8048a83ab0875eb252ab0b222
- SSDEEP 192:MNJlMu+kNZCsfx5ibEthZBoeaAdlUr00WWWKMPDmd/WJzumIwQgehL7p:uwwCnKWWXDI+Imsp
- TLSH T14DD1CBA20C96BD10D72405BA5BE95D4AB9F1DD3D36A37D7557B03E362803B4338A1C16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 2KB
- SHA256 1237c02ae31137746a27a108f236672f008b2c79e2b261e9c4d046a56eff2fa8
- MD5 cdaca6101e9a3e5a25545cef6aa7f5d4
- SHA1 4c150db881c28a3f1637bca9c827bbcd75f09d2b
- SHA512 9750c10f46135cb1d2a9338bc264ccc774ca1cfde7596e4f2f5779eef8fcc456fb1cb31985ca61fb7124fe2405c87a38eff262b793917f6023d671deebb58d29
- TLSH T1F251F8F70D44CA1AFB6109F3079A1A82E2F25C7E3B327A1513D528708D13F535E31829
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 12KB
- SHA256 df4de3fa5a377e492e416fd6c2ee8476423bd9d5a9aa03ee51de0e6c73c6e2c9
- MD5 4637f98732da2bbf2fbcd965cd69924a
- SHA1 2ebefb90d296fbd0cdac6ed4c53322421cbc6755
- SHA512 ad89cca2466a710375f37b806f2b764d67a8e7dcd0b0f1c35a283ab2ef40d88697ae9388a4107f43c683ab0d74e18a4f23e6dd3963d7380cfd3b883c9cc0cce7
- SSDEEP 192:HmlCASaMiFkdeJ89i38Q/mxHfb7G3sHPthBBFZZJjtd+34IthrZ2TyS4f9++YfpV:93aDIrnQWlV9ZA/tLQ4EHpuNnoBpj
- TLSH T10C422E625EC7AC00EF160CB61FE5AE6679F5CC297A976F6713A03D359903B8364A0C07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_gamebanana.com_0.indexeddb.leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_gamebanana.com_0.indexeddb.leveldb\LOG.old
- Size 347B
- SHA256 651bd4b15ae1073091680f92e9ee43dd1acf2c0b2ba6fd902fb31cd51a95aac0
- MD5 adc080579cdcaf590192f322fe4e1fea
- SHA1 8898f88072134a0531b1398822fb12a07499a808
- SHA512 54df93c2736aa48580d30ffbe6550b87b885f2217c399c5fc2359043c9bd77832c98a59c4d03d5d00acacd737e73cb945cb344f7880525f3e5d647f0cee6fe42
- TLSH T15DE0DF6C98DAC26F216480BB2734B70ECAFB250E97DDAC8A4F05E80479C640894E92A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_gamebanana.com_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 61KB
- SHA256 6ab57928b4b265bade668e73a72feb9857e4e552358f8be6d944ae4755f59628
- MD5 df01273187578b6573eba01366e9d468
- SHA1 4ddee5292553ac751658f77f2db456f95f0f1bd8
- SHA512 b28558a1f44d01887c5cf20212d479605fd33821862636c1eff495bca972b0cdd6a8c32273a5f67ff41ad5cf61024f3551d77a581aa18a7d807c9dea9471dc28
- SSDEEP 768:rnHs7CEhSqXiXVTQ9OKoKBDuYS/mp+iUgV5RIP:fKoKBTRIP
- TLSH T1A6536DB397E4CF2DD81166F05B142E2ACE2D0D25177838A785E9DF8793E28A3D24174E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 4KB
- SHA256 b4f4642c1902ee3c8ba0710fa4845456590c655d094f516eb4c18c56d441a2c1
- MD5 c6a582cd9255efb5223015b7332ec985
- SHA1 648d1d06c95f06310b04f9a6869be50dac2a8da5
- SHA512 b4f5a4c3eb54133c709af597ae7d3aa1064e9132c8eabe65729ec6b3c1946a5c6ce8d55d1e40d2831f00a4cb3e47ab1cf83eb9456bd54acb12cd16114c9cf4ca
- SSDEEP 48:YALlhokqAqXqKhSkms+JCsARsafoKsDXLs4gmzsf4s0fsWoscKsLHmO+m37mgmY3:DWkB0D1meBE9U0rMhHmO+mrmgm/m4mR
- TLSH T15F918DF7C7E4866DC91156F4AB14AE1FCE2D0A24531C3C66C8E4AF4B93E2872D20175E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 4KB
- SHA256 35dd3bf5bddf705760948cdb2993c25e100202fe609f6b91907645a4b329859f
- MD5 958d6bbce80de9e3c55fb3f38621ff09
- SHA1 c8109846364f4bef8951bbac8b8340b573071995
- SHA512 30111d31bea1f9e5fe398c91d9f866eb20447c20e2ee4d51b44bfdc93223e024dc0de7e9c92014c30ee5620de0a85d74531462cb16da5cb4795f8f891a5e78ef
- SSDEEP 96:DWkB0D1mfmwBE9U0rMrIlmmmrmemDmO+mH:DjB0D1mfmwBE9U0rMrIlmmmrmemDmzmH
- TLSH T16CA18BF3C7E4866DC91156F4AA14AE1FCE2D0A24531C3C66C8E4AF4B93E2872D20174E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 61KB
- SHA256 1ef5b6b4778d07b1b01c7453ae18b454d59d5b78bc764986032c68f840d81a0b
- MD5 98ee1f04af9fae49655190a3e5becc15
- SHA1 ce5b7e3220dd8db9bddbb62b73ad6bb5a94adb99
- SHA512 eff7e1b7344bdee40473dd88cada6393eb53e0fca632bd6eebd0253b8cd419182dd07be2d30f6c1e981b69d520dc98dfb1ef41c632d90a0f2c263c419ae0822e
- SSDEEP 768:rncs7CEESqLiXVTQ9OKoKBDuYS/mp+iUgV5RU:hKoKBTRU
- TLSH T13D536DB397E4CF2DD81166F05B142E2ACE2D0D25177838A785E9DF8793E28A3D24174E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 5KB
- SHA256 eeee92cd0d6ca18cd3d02baf996226187a958aa53aec8d413fd3510b0bac5321
- MD5 c847661e206f07cb45eacc95230a8db4
- SHA1 664da33982ba9cabdc69801ef53f35730f4444e8
- SHA512 a89ded89a58bff407f7739c0c6014bd2cc82aab323c000e33582694434f50a3176001e9bc870255900b6f69fa9e93954023fad1127395846c64abe3040d570a2
- SSDEEP 96:DWkB0D1mfmFrBE9U0rMuwmO+mrmAmUEmDmtj:DjB0D1mfmFrBE9U0rMuwmzmrmAmUEmDy
- TLSH T161B18CF7C7E5866DC91156F1AA24BE1FCE2D0A24531C3C66C8E4AF4B93E2872D20175E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 59KB
- SHA256 f74e07a1bb61a2504e74312c7d02f4a573333a80fad23177b4fa4ced3fc92523
- MD5 2213d789981f1d4095d120efdd6b71c1
- SHA1 effb3ef70b2f62a173f9255647b316eae20d7bab
- SHA512 75da5b6cc0fc2e1bab36d73a78c4d60267bf0d596a83d73d6dcc0812df411d7f516d950cccd8eae4b9d35083066b8fabcd46223ae10f091c38efed4749e6b64d
- SSDEEP 768:reOs7CEHSeMiXVTQ9OKoKBDuYS/mp+iUgV5Rh:0KoKBTRh
- TLSH T1AE536CB397E4CF2DD81166F05B182E2ACE1D0D25177838A785E9DF8793E28A3D24174E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 7d969badbc870f634bcda2e902b98c8725a0575accbf715ae3e8508fa079eff3
- MD5 e6ae4ce0e0637f4d4cf34db63669b686
- SHA1 650567c37f6830472bee31348142292ca2ddc9b0
- SHA512 95965a0986c93f6956321b5998b06f93a98fa81a83c56eddf7ea3a9099908faed462732cdb38dd76d6a22c2efabf07c4a8f568035c83ff4357b64ea9e3745ea1
- SSDEEP 192:IRVpiZB5Wv7spAPRp22F9wHsb+WNnnd069X0kwhVyIsnAUgtaJ:IRVpYiYUX/FKwd06an8
- TLSH T13342C52FBD54693B5CDAD22AFA227B53D7F5212122D42E84E6F88A1C14DB5CC232741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 4dfd2d4b92990a453c19e0ba9200c5c13a772b25a6ce8855c64aa856f78555f3
- MD5 59ce0c4a0598da35372e6a9b1c2a0c27
- SHA1 5a76ee5092d5e99b3f44786b7e55044cc121f430
- SHA512 39bb414c6c918669355beed866c638966856edb63d200e178737c20ef3da2f05368ca5b40740889522d561fa3d7889e3239005c407bc41ac8c470112518b637f
- SSDEEP 192:IRVpiZBCAv7spAPRp226R39wHsb+WNnndvDZ2TX0kwqVyIsnAUgraJ:IRVprcYUX/+KwdF2QKe
- TLSH T16B52C63FB954693B5DDAD229FA227B63D7F5102122C42E84E6F88A1C15D76CC332741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 bbb5d8a956cd2d64d9cbd406e81f65051a5475a20a251feedb73e6cc138a5869
- MD5 44d0ad803b8d736e07124c5db288b621
- SHA1 94c774523c659a24c2dcd02a18fa51cbe6005956
- SHA512 41f1321bc498220c8301470fe2b3231efe8b502fa77180a6f2110386098e56fb079afdc5c3a4b21c2656fcc682f155e076a2ea2e648b2a230ba88cda86a7d395
- SSDEEP 192:IRVpiZBA3Qv7splPRpB26RM9wHsb+WNnndvIm2JX0kwgVyIsnAUgraJ:IRVpV3MY3XcNKwdt2WEe
- TLSH T10952B62FB954693B6DDAD229F9227B63D7F4202122D42E84E6FC8A1C15D76CC232741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 a10389b91da6c45b65133e09b9d13e2f21fc873850f4f62f8d774a49e02d70c3
- MD5 6020f27a8898a8b64493310f0f56b2bf
- SHA1 c267867e4082c3c2368ada7922fc8f730379fcb0
- SHA512 0ec41c200646b015c3b339f00a230a89425ab7b03fba545fc8fd8d286ed6169bb04338fa1e9702fb58ef275ed4f4acaf7ddadf5262a867d8d652987894979083
- SSDEEP 192:IRVpiZBWchv7splPRpB26RN9wHsb+WNnndvhHk8X0kwgVyIsnAUgraJ:IRVpXgY3XckKwdlkFEe
- TLSH T1F852B62FB954693B5DDAD229FA227B63D7F4202122D42E84E6FC8E1C15D76CC232741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 a6e9fe9d6bb745aeb9ed5afec908f3ad037f966dfc9d89255875a152c16caa69
- MD5 9942a9fe41237c0006f19c2c1abc31fa
- SHA1 4aaf6a0a8ef8ebbd811caba81409e2184875b5d6
- SHA512 820291ceb70688fdd14c9f9638987fd0c5d51a34d1451d5512c50941f98fd7d9c0bd113ac5b53ad16290c7cd93e8c2ea86ef21ed1bbbc8e17baf058e85b56c5e
- SSDEEP 192:IRVViZBfchv7splPRpB26Rc9wHsb+WNnndvCHE/X0kwgVyIsnAUgraJ:IRVVOgY3XcVKwdcE8Ee
- TLSH T17652C63FB854693B5DD6D229F9227B63D7F5202122D42E84E6FC8A1C15E76CC232741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 9c37a5c59f0b7ad48c9c1f7f77fa88419c27dd4ce7cd471bd06f3786c18bb66c
- MD5 87140d5803b064e8823ba5168a4c5477
- SHA1 609d669c4c2178a521a784dbf0dbdf0dd1af22b4
- SHA512 7515ecb84eb596d611565e66b5dac4260a66d2038d9609c64ef3f2ed0a0684e1edd6dccde5342961ced36bdb81307b4e69d6ee4fb67b0f8b587721d9dd28124b
- SSDEEP 192:hRVViZBaav7salPRpB26Rc9wHsb+WNnyh+CHEnX0kwgVyIsnAUgraJ:hRVVr2YYXcVKwcbEkEe
- TLSH T14A52C63FB854693B5DD6D229F9227B67D7F5202122D42E84E6FC8A1C14EB5CC231741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 b0b399dd54397eb4787b6e61d61f5a090a057b27383799fb1e5d693b8f2d8e90
- MD5 6c0a08adb2a82e7be0a771f0fc4e0977
- SHA1 debdc21a0125cd69d905953a7a5ac4c8cb6c5443
- SHA512 96951955cab9de8e2bcfd7b1c3d4a97dee45887ab1878805fca3d52c00fc922d4f5b13063eb52e58ef7b8836ef6a09d447a0e2603390e0c5f79f7f4e8962bfa1
- SSDEEP 192:hRVViZBaXv7salPRpB265oc9wHsb+WNnyhmUjdCHENX0kwgVyIsnAUgraJ:hRVVr/YYXccKwcBuEqEe
- TLSH T13F52C52FB864693B5DD6D269F922BB67D7F4202122D42E84E6FCCE1C14DB5CC221741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 2eea2251ef3befe076f102df766a9e1da0081bf440ba855d9ab13f5c6825d085
- MD5 6f305d1559b0cef0d192c4f8cc8f0ba2
- SHA1 73d595cc718d0a729272db639ee33015f7aa6090
- SHA512 bb5f4a2be954ac6ea031615bf461a309ec0189bd96ae58a490fdfdc70fc1b56fdb90dae87fff90481ee320741a2021e43a6de8fa88aa683bc2646731a6715e0c
- SSDEEP 192:hRVViZB1jv7salPRpB265Cc9wHsb+WNnyhmLQI/CHEGX0kwgVyIsnAUgray:hRVVcbYYXcmKwcXIsEHE5
- TLSH T12352D53FB854693B5DD6D22AFA227B57D7F5202162C42E84E6FC8A1C14D76CC231741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 b225de5f50d479a289658908fa59289e7de41fc8222206e00223953e6ae13d76
- MD5 cec0e76a3c3d0965a91e0c2128976e2d
- SHA1 490338d640a71263348b74e2a5ce14217112ad74
- SHA512 9bfabe210efe7a04428e789060a0a5b1fb7e431703f1cbe9989cab25fd9929b6ed998f23abead63ab210250a03618a71e55ac4462034f35f0ceae3aa499e5298
- SSDEEP 192:IRVpiZBnHv7splPRpB26R39wHsb+WNnndviQeDX0kwgVyIsnAUgraJ:IRVpePY3Xc+KwdVeAEe
- TLSH T10C52B52FB854693B6DD6D229F9227B63D7F4202122D42E84E6FC8A1C15E76CC332741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 2d183a0afa98932e10224328f7d4ef7182c03cafee609602185c50152259ec12
- MD5 2bed5875ae55cca18c4f6dc1cb88d319
- SHA1 210cd45d29e796d1c4bc7c3819d654fde6fda76f
- SHA512 5249778497cc6c81bcab6d2a22b79113bb3719c6420dfa4db4ae4a7afbbfa9e2ec41f7762b1e7c1eb685991270e813fda1c7c8f138534e73f82595e2265daac8
- SSDEEP 192:IRVpiZBNOv7spAPRp22F9wHsb+WNnnd069X0kwhVyIsnAUgtaJ:IRVpwqYUX/FKwd06an8
- TLSH T1AC42D62FB954693B5CDAD22AFA227B53D7F4103122D42E84E6F88A1C14DB5CC332741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 5227332ed075f3d652f0acae14fbf144a59c54dac59bdba1861e501fb6d7908a
- MD5 e875c9a9c61ce0f560f6f2c983d0f7f9
- SHA1 84b1963813956af77d978e36620b8fdbd33fd38f
- SHA512 3587177f9f38b5dc28f9a25dae5377a7ead264c35e89f9a45bf899d1d2da3df27c0a52c933dccdd4036965fc33cafeb1b7ff9543323c234a1e5d3de8056c732e
- SSDEEP 192:IRVpiZBAkv7splPRpB26Rky9wHsb+WNnndvkIkemzX0kwgVyIsnAUgraJ:IRVpVAY3XciKwd0ePEe
- TLSH T17352C62FB854693B5DD6D629F922BB57D7F4202122D42E84E6FC8E1C14D76CC232741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 a052940934ecf73be59f05b2605d2cb059c656f4fcb2e325f497186e3df9a9a9
- MD5 b454c4e3625e9f6c627474af6a547e88
- SHA1 1842cde35d5aa1acbb7573587c3ce80f52574ed5
- SHA512 2a16c1a10a5965592249c5398d22d73f72a6a114794e63fdb1374636a80e590f58744d0701c761645d4e9d7913661089fdfb43971343961f3eef0dc86307d742
- SSDEEP 192:IRVpiZBAsv7splPRpB26RE9wHsb+WNnndvzy38eRdX0kwgVyIsnAUgraJ:IRVpV4Y3Xc1Kwdre8eR6Ee
- TLSH T14652B52FB954693B6DD6D229F9227B63D7F4203122D42E84E6FC8A1C15DB6CC232741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 956fa3ab6933b5bb4ff28d459c672c6ac776f556c0a6a3eba4e5716979d89607
- MD5 e0a497d8763fa51e0c4b4d94da1685e3
- SHA1 62c394f5f50d7b51e44a131b76a100ff6a9cc3bf
- SHA512 4d3a913f7b757d0c6eb586f5780414ca753fd0cc562bf149022c3deb4b06eb0b357f3db847524fc36a87902cff4e3df7000003bd75cf92b30ea085205a9939b7
- SSDEEP 192:hRVViZB1jv7s0lPRpB265CbG9wHsb+WNeOyhmFjlCHEEX0kwgVyIsnAUgvQay:hRVVcbYiXcUKwCEGEtEvu
- TLSH T11462B42BB864693B5DD6D22EF922BB57D3F5202162D42E84E6FC8E1C14D76CC221741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 e9a921fbbd46540a00116ecf0325b5c704f00d9c183958273bb8ce64e8fee30e
- MD5 04aae0368d77915f6d38eae2fb57ab4f
- SHA1 913a963d0b75ffde1cf24d8f6008341fcf8c6c2c
- SHA512 2a13f6359babb799f583bde0013f776f8d9dfb9320e1de7457015eef50881685bbb339fd83e65e6e2377d40a937b18546a338a955dcf57621f6d5b87d289a238
- SSDEEP 192:hRYMiZB1jv7s0lPRpB265CbG9wHsb+WNeOyhmFjlCHEEX0kwgVyIsnAUgvQay:hRYMcbYiXcUKwCEGEtEvu
- TLSH T13962C42FB864693B5DDAD22EF922BB57D3F5202162D42E84E6FC8E1C14D76CC221741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 c6f7d29120f76436224a97ae0953a3f44361948cd6dcdd72183747b04330f0dc
- MD5 82de9e09e8993be29e93da1e769a700b
- SHA1 b0f175171145a28bae256811c5258ba869cddaad
- SHA512 26e674e03a47ae29246d3f83ddad193cec576629bc92058e686e12e7e06e6cc047ba4f5b98cb9c350b49b1cd9b8ac969d0dd364d9800c03b8065301b536ecec0
- SSDEEP 192:hRVMiZB1jv7s0lPRpB265CbG9wHsb+WNeOyhmFjlCHEEX0kwgVyIsnAUgvQay:hRVMcbYiXcUKwCEGEtEvu
- TLSH T1B162C42BB864693B5DDAD22EF922BB57D3F5202162D42E84E6FC8E1C14D76CC221741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 ec98f5bbc07df7a59bf7ba3fa5ff7b33df6a7bae65cf3405abc652d93cbb4160
- MD5 07754efc0cd6b77d9b7bcde9f7a539d6
- SHA1 db6401fd50584b5de2c80c358a65cb01f772ccc5
- SHA512 ea2dfc65d9e893edf2db5a20671aff8eab45678abb3f07ce055cd859e586583a58e25af503721128d683746b3158404d04730649cb3dcca99fcf1ace0ab8306c
- SSDEEP 192:hRVViZBUjv7salPRpB265oc9wHsb+WNnyhmCZVCHEjX0kwgVyIsnAUgraJ:hRVVtbYYXccKwc92EgEe
- TLSH T14D52C53FB864693B5DD6D269F922BB67D7F4202122D42E84E6FC8E1C14D75CC221741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
- MD5 d066f854d368cbebca026e5da297c2c3
- SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
- SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
- SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
- TLSH T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 ed0e5f7e15bcd7ae43f1f2da698cb5c14c789cc7c242fdc487e2dc293f4f270a
- MD5 c6ad21821d29557df5f9435f6e02af59
- SHA1 18c36a2fea7f9db70aedf7a1a5b50d5a304b7ea7
- SHA512 7585f073699e848f4bc3c968ec76059c462eb278ebc087919324a2b34fc206b7df6dfb7131fa00113e93c63dad308cccb418da94adb5cee8cef5266667df4841
- TLSH T19FB0124088015141C00707F4116354AB7198AF11960E1B0153F06923C8251508014460
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bd02.TMP
- Size 96B
- SHA256 586374eb539b77f3862bc3aa5effc27a45dc4b14c9014dff20bc067882a4f717
- MD5 2eb6d5644b0edfaef92d32013edb6603
- SHA1 766e7c33f9f95b1008db527945891511b02a2087
- SHA512 f0e11105f1981adf9ff40ff337151aa89212e0cf324616a926555c6b1ca0699d1152571ec75ec26806d35f921ff663e9f6602678e2c2238e7dbeb52d327f6413
- TLSH T10FB02230C0022202C00303B02880CAE830ACCF20C203020BA2E00B23EC32A302828820
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\49b56bd312c58e6e_0
- Size 63KB
- SHA256 bf1cdcd4d3769c02ab075bd5449594c64bca5c72ee4cc400c76b5b11d8ab806b
- MD5 5e721a1d9e1d8d7845e820594d5dfafc
- SHA1 3912c6a1be637f655ae25446ae7fd861d7db65f4
- SHA512 e6ccc87d9c0c21cb4019e7f53e3436168d8cdd617b8b065f4bfe5ae8278ab1b5e75bfe58717444f71188154cd3d8a520a5be749a9628c2b7c2fea6e9a8b0b770
- SSDEEP 768:GDmTwDcwZTouHLhGTeEFfgoAaWhrJTt9/XoZ+UyxI1AxwoG974X8uEVEZo6VhWvp:mmedymtRXyy61Ax9O4suEVh6o30F
- TLSH T1F5536DA6337178B7827BA1F1909F130B713AE167E40489F8B194EDE44A44B9A0277F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 72B
- SHA256 5af67fa93f295602e9c3dc150de1888a71d89a0ad0fe711957f838118b54cf9e
- MD5 93ef6ed19436f50dd8c1a55db0aafef4
- SHA1 27eabac58ca6631760d3904d9b526533410643d8
- SHA512 2431d0ed2f4354f3d3c5a8eb34e525514e81825a31c955b54bde194689420def45277fe216ac06b262ca436b86b38fb8aa36d8d16eed8c1bc6a237cf816c80f7
- TLSH T1C0A002A907C9290DC0004275109653742360EC601201030350A051988C532505965459
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 233KB
- SHA256 265c0c3d1c678c1ceb6582b69c0b26024795c2fd1c2f1b6af6d973be5a19d450
- MD5 e34723f90c5b83decd33d8187c0eb6e7
- SHA1 9cf0b9231e9ed489ac081ee854e9921ccb178d26
- SHA512 ac3ac546edf07908eb9491985489d696595ac76b712417ce35cad5244e3d581454924c83c094ceb9345300d7b20c2bbf823420335561cbc375de3f3bab61af27
- SSDEEP 3072:SvnHVUJVjOYhk6o7zyZ5MGss7dpzCbzjyzqfHsCGm7D5Lk17ox1tIpud63U8BehA:SP2JNllk3Wz31m7Rkm1tYpBeh2BAo9
- TLSH T15C3412326C9226755DB8EA8EA44E391F1EF28A76CA30DE8BC4C96F0473BD1C51F45C64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 233KB
- SHA256 09a8289e8188d9db74c0223d6bd4333a7e70c994a652dd21f2946338de6810ef
- MD5 357d45bc5dd089e9509b7c264c243690
- SHA1 4adf94516973df7d3362c9e33c066e0d8c7c10fe
- SHA512 4e9a4b6294c5e32a01696a3aa0ea9837e5d40e089e7c143277069801659e7c356e2a2eaa213a81d09da349f8b5bffbc6a6f08becef0856d1264d908e0a81f1c4
- SSDEEP 3072:uvnHVUJVjOYhk6o7zyZ5MGss7dpzCbzjyzqfHsCGm7D5Lk17ox1tIpud63U8BehA:uP2JNllk3Wz31m7Rkm1tYpBeh2BAo9
- TLSH T1F33413326C9226755DB8EA8EA44E391F1EF28A76CA30DE8BC4C96F0473BD1C51F45C64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 233KB
- SHA256 0ae7d7cea6b3232a7a3c4620841463642139cda18faeefbb148c9124b1da246e
- MD5 4fb25ab715a40a7256776e3917753966
- SHA1 5ffc4c0598b6ebc4e1fd282f897e3f0a665c1958
- SHA512 6623203504aef34e023f9e427a41c19bef604c3acebd291f91dd1a941aacc6d4e83e76ddac38a6e3903880557333c294416e2ee4dcae0252c43b30f0687325db
- SSDEEP 3072:jvnHVUJVjOYhk6o7zyZ5MGss7dpzCbzjyzqfHsCGm7D5Lk17ox1tIpud63U8BehA:jP2JNllk3Wz31m7Rkm1tYpBeh2BAo9
- TLSH T16F3413326C9226755DB8EA8EA44E391F1EF28A76CA30DE8BC4C96F0473BD1C51F45C64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 233KB
- SHA256 2d65d8c1020f12736766f68fe8e0d1fa218ce05cb271e00cadc9f9afa4adde57
- MD5 f03dc9557f5bd31c1bf25c9091b57dbc
- SHA1 add0955fea1a62dd93443045dabd532b11ce1028
- SHA512 9d49385d7533dd8d0ce2322001c93f26ab97a930d68282a2aecd5666cea0ca599dbcbda972a8f68dc49d066bda7d9c238e167019d4379e25f3570b9c4da65cad
- SSDEEP 3072:bvnHVUJVjOYhk6o7zyZ5MGss7dpzCbzjyzqfHsCGm7D5Lk17ox1tIpud63U8BehA:bP2JNllk3Wz31m7Rkm1tYpBeh2BAo9
- TLSH T1DF3413326C9226755DB8EA8EA44E391F1EF28A76CA30DE8BC4C96F0473BD1C51F45C64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 232KB
- SHA256 b5a9e815f047d535ad576fc53ed699666745c2a5a708cb42db46e53513e60591
- MD5 e871719286dd1574ab8b0d9aa480abc7
- SHA1 f6a9d5a76250a36bbb00702eb1c31ca17a1d0ebe
- SHA512 2ae9d092c9e5f9cd895034af67d54dd8b30354be701a251e9245e8a93c894678c168c52b2c082c2bb15490d708023a26c53ad5cb77ff5b1e1a0fd57776f229f7
- SSDEEP 3072:FnHVUJVjOYhk6o7zyZ5MGss7dpzCbzjyzqfHsCGm7D5Lk17ox1tIpud63U8Behbk:h2JNllk3Wz31m7Rkm1tYpBeh2BAo9
- TLSH T1EA3412326D9266795DB8EACFB44E2A1F2AF24976CA309E87C4CA5F0473F91C51F41D20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 115KB
- SHA256 096f8bb5952e6f770bb2e4541ee9079eaabfdcf223a4dfc0d24dd82bf32db2b3
- MD5 e110cc811c279cef1265ad098d91f7c1
- SHA1 b37ca17df971f4d8881badcc19abb7d09898bdee
- SHA512 817ac45bd358f5baad56a50804d04c6aa40a86bd1a4bd93d1ce8cffe71f1eed439cf9941f7f91e3599cc87bc592f7a029ee8448caed5ef5ab162d15afff59104
- SSDEEP 3072:bGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Cm7Rkm1tYpBeh2BAoK
- TLSH T1E6C3123B5D65E9779979AB0EB08E0B1F1EF149A2D920DE92C8D86B0437E97C90A04D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 232KB
- SHA256 96b19377a62b130ba983333eb811a21de61ce50a259b35dd88e1862993136e48
- MD5 2c33c55ce7f7d915eeecbc9f8c94d1bb
- SHA1 468dcef408a83c493a590e0c4e79279c1848dc34
- SHA512 ea27c2952b984d3ed04dadb4788385951d9b3b65fd8ee83625efb992f372a9c938a2965d2a0ad42ce8928db8465188546593bbfac66113bedb0d2760020ac04c
- SSDEEP 3072:+nHVUJVjOYhk6o7zyZ5MGss7dpzCbzjyzqfHsCGm7D5Lk17ox1tIpud63U8Behbk:a2JNllk3Wz31m7Rkm1tYpBeh2BAo9
- TLSH T1133423326D9266795DB8EACFB44E2A1F2AF24976CA309E87C4CA5F0473F91C51F41D20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64.zip.crdownload
- Size 475KB
- SHA256 34659dc47249a3c00f7fc88a11f4e5ba14dfbec0a6a96b4f3f71368a7e1c9374
- MD5 4a0e2ba1233d25671b60f26d7ada8cc8
- SHA1 00b1e845d02f60dbd2106e5f57dada7d300d642a
- SHA512 e607d1cbda51760dffd2980db0c8844046494cc071a6047b47e2b8d09738346079d9c4005c836fb24d8345a8eb14625cbf82678aadc4686ae19132803bc0497d
- SSDEEP 12288:2k9QeK5xb9PmnlmJQk0HtJpx86/GYcabAzPRZ3tdkOY5:2G1K5xvQ3pU3rY5
- TLSH T17BA423A85E21C6C42FBCF12DFBBF7CE625A1667D04C71EAD1004C93169A01B1D968F9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
- Size 1.0MB
- SHA256 844648190dd8688098887a369da1126c1b3ab1c2a664fb603b01cb22e76b6ca9
- MD5 cdde40d9d539198c4067a94bd68bd379
- SHA1 25cd40f005ad0bae49a713316567e13fa1acc3fe
- SHA512 532c3c3fea5c869d0abad69c1cdf6b75d6fb7d113b237c84376cbd1ec4855db8099cb8e3fea4a55c6404cd31c4a37100df6d3b8c302f959357e4830e3e06c86d
- SSDEEP 12288:SnMqHGbdysC4JKi83uiFPe91fxm3w+JxJXop+OOs+ctaNou0vIC:hqHUMsC4h1iFPebfxQfbloN/aN8vIC
- TLSH T129257B1AA2A511F8C4B6C07CCB93B813F672344543B18EFF26D15A661F67AE0DA7E710
- MD5 SHA1 SHA512 SSDEEP TLSH