Analysis

  • user interaction
    yes
  • max time kernel
    515s
  • max time network
    516s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/05/2026, 22:50

Errors

Reason
Machine shutdown

General

  • Target
    nstool.exe
  • Size 1.0MB
  • Sample260527-2sclxacy2v
  • SHA256 844648190dd8688098887a369da1126c1b3ab1c2a664fb603b01cb22e76b6ca9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 12 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
  • Modifies data under HKEY_USERS 17 IoCs
  • Modifies registry class 48 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 58 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\nstool.exe
    "C:\Users\Admin\AppData\Local\Temp\nstool.exe"
    1⤵
      PID:1432
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:3116
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc2e9ec728,0x7ffc2e9ec734,0x7ffc2e9ec740
        2⤵
          PID:4300
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1792,i,4304638762689773735,9674159269864551684,262144 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1976 /prefetch:2
          2⤵
            PID:4756
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2276,i,5796575816796169438,10770100413725199677,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2288 /prefetch:3
            2⤵
            • System Time Discovery
            PID:2420
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,7793177195712510101,2382309761783980525,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2616 /prefetch:8
            2⤵
              PID:5036
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3268,i,16024528776430607645,6398415645476857912,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
              2⤵
                PID:628
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3296,i,14155251694846956968,700083305607791322,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3324 /prefetch:1
                2⤵
                  PID:3776
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4448,i,17131906916069393401,7758458012436574483,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:2
                  2⤵
                    PID:3628
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4784,i,6197408827445757652,1735194207210120532,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
                    2⤵
                      PID:4316
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,18212092945823642207,7906313355487833131,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5516 /prefetch:8
                      2⤵
                        PID:1164
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6004,i,5503653940376373416,7229356598435832301,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6060 /prefetch:8
                        2⤵
                          PID:2596
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6052,i,9868214071246460621,16634793152991748626,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5928 /prefetch:8
                          2⤵
                            PID:1840
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6056,i,10842577981231757698,7943389697932047623,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:8
                            2⤵
                              PID:4268
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5928,i,13948116306560975027,16409840185762699174,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5888 /prefetch:1
                              2⤵
                                PID:4388
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4684,i,14103276655791460540,7828131747027349877,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:1
                                2⤵
                                  PID:3344
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3468,i,13921804067034053376,5403706279389081830,262144 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4392 /prefetch:8
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:2396
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4392,i,2838462390664839532,12726575853889172811,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3344 /prefetch:8
                                  2⤵
                                    PID:2560
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3488,i,1987305723857328949,12173713695558773250,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4648 /prefetch:8
                                    2⤵
                                      PID:3424
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4860,i,13077136593925104847,9223768701388668129,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4856 /prefetch:8
                                      2⤵
                                        PID:3952
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6236,i,1415331914540279843,9197323977731409039,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1196 /prefetch:1
                                        2⤵
                                          PID:4148
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6280,i,10696673874823157460,14885717812864096595,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6248 /prefetch:1
                                          2⤵
                                            PID:4588
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6636,i,18098677393083571326,3686407964967177471,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6628 /prefetch:1
                                            2⤵
                                              PID:2884
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6320,i,3567623983043194799,8800468712095065511,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6668 /prefetch:1
                                              2⤵
                                                PID:4716
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5768,i,18138579929239168512,14195356217129081801,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:1
                                                2⤵
                                                  PID:4024
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6444,i,10156906820177205080,2931580264445892020,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6556 /prefetch:1
                                                  2⤵
                                                    PID:3860
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5892,i,57186507691472749,11033108930254826635,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6324 /prefetch:1
                                                    2⤵
                                                      PID:452
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6580,i,8014134817073491877,13471900471643032466,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6256 /prefetch:1
                                                      2⤵
                                                        PID:3884
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6276,i,17353486964350320501,2271151870305051560,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:1
                                                        2⤵
                                                          PID:1040
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6748,i,15552202013816254849,14202843378364767406,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6724 /prefetch:1
                                                          2⤵
                                                            PID:3564
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6736,i,14721824022176566182,3407560695412055351,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7088 /prefetch:1
                                                            2⤵
                                                              PID:1816
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7228,i,3578262697349330461,16971051970027757342,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7200 /prefetch:1
                                                              2⤵
                                                                PID:3232
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7364,i,4127709749383777645,9286228953715997732,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7368 /prefetch:1
                                                                2⤵
                                                                  PID:2860
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7508,i,9279723432564456015,7835265827608386312,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7512 /prefetch:1
                                                                  2⤵
                                                                    PID:4432
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7660,i,7349377862023694660,1033810796817621135,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7664 /prefetch:1
                                                                    2⤵
                                                                      PID:3368
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7804,i,16661604159459328477,6920077987252125346,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7812 /prefetch:1
                                                                      2⤵
                                                                        PID:4188
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7960,i,17726499536637986534,7526964365867617554,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7964 /prefetch:1
                                                                        2⤵
                                                                          PID:1544
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8112,i,14417597982008621989,405951722919843021,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8116 /prefetch:1
                                                                          2⤵
                                                                            PID:3288
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8140,i,13212094933484215098,11411255533394001379,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8272 /prefetch:1
                                                                            2⤵
                                                                              PID:4744
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8400,i,6148381950101977575,8031968449839263518,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8416 /prefetch:1
                                                                              2⤵
                                                                                PID:1564
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8580,i,18436024502207648168,5025568887284272197,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8608 /prefetch:1
                                                                                2⤵
                                                                                  PID:4716
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8576,i,7026702683403935046,1731028295506602022,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8748 /prefetch:1
                                                                                  2⤵
                                                                                    PID:4720
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8912,i,16287826895140945307,3017132353661854003,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8916 /prefetch:1
                                                                                    2⤵
                                                                                      PID:2584
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9024,i,8608641803982806717,8894809354031239569,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7068 /prefetch:1
                                                                                      2⤵
                                                                                        PID:3220
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9212,i,3454912935283376800,5359226893523522174,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9176 /prefetch:1
                                                                                        2⤵
                                                                                          PID:1084
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9356,i,1207975230356722327,11253534404299537263,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9368 /prefetch:1
                                                                                          2⤵
                                                                                            PID:4504
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9392,i,8370645092634125103,61341772011565639,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9520 /prefetch:1
                                                                                            2⤵
                                                                                              PID:2020
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9680,i,5935114824173836294,4629711321185217929,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9668 /prefetch:1
                                                                                              2⤵
                                                                                                PID:5136
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7248,i,11031803995710023347,3228270593569481218,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9076 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:5312
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9152,i,8152414021313670705,13498627047976942395,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7180 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5320
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7216,i,7075788824605315660,7407375027922783543,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7296 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5328
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=7992,i,5534157151141480096,4536161310547446897,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8004 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:5336
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=9908,i,10294465853017276366,12944528983561727652,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9916 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:5344
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=10064,i,15666454139107327840,14836070707454231565,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10060 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5352
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10204,i,3073944466901203699,6192806424129716796,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10216 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5360
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10352,i,10157465762882992238,551620924188174040,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10364 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5368
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10500,i,9917882221486333155,17661162525757787684,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10504 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:5376
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=10660,i,7953781084784397462,6932303898910469664,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10656 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:5384
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=10796,i,12098560061566053641,16467294681981147845,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10812 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:5392
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10944,i,11138149973022336721,1716734089095413918,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10952 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:5400
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11100,i,14367461736749490072,13132112564692837340,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11104 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:5408
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=11248,i,16870525355330378632,3414256481969981580,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11228 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:5416
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11380,i,16232934465695279331,17147668180721717183,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11376 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:5424
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11388,i,7956248558321745961,928674020377893804,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11532 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:5432
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=11652,i,15058336219792576515,6492527502542077587,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11664 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:5440
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=11688,i,5152058398159438690,1432336316190968157,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11824 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:5448
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=11964,i,17058304664586268255,16481140027111127931,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11832 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:5456
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=12080,i,3072376885626208672,7484464110617919636,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12148 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:5464
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=12280,i,16456765539496986139,806309389076870823,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11976 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:5472
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=12432,i,667798978222425817,9255504111797330196,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12444 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:5480
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=12596,i,11209340835367578173,7388206191231108856,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12456 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:5488
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=11792,i,8599201161909714537,8032610890261201967,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9892 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:1512
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=11236,i,11749935997164032678,17062314078886164700,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11340 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:3492
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=11348,i,16645703468734108058,5466289243885061392,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10204 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:3788
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=8008,i,7300827664092095769,15634887893342026718,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10756 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:1224
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=10244,i,6903319523291794912,7639112230909110453,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10852 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:4340
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=12464,i,12922493122598123086,9899002926847680641,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10912 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:4420
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=9884,i,13966850267680133680,14772154311644167928,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10656 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:1076
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=11048,i,1946338507838248069,2761583744465030552,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9880 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:1816
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=11024,i,10976668801298895754,4327323127670840551,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8016 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:3220
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=12304,i,6130996804805631480,10081707467822315135,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11020 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:5288
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=9804,i,5812363482777408280,13649787963216349749,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10488 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:5740
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=10080,i,6506816001747547514,12590558572982476665,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12304 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:5452
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=10580,i,15780518408001199242,6908638227538547636,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8636 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:5344
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=7988,i,14790716748206371756,13928474598428544590,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8840 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:5840
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=10644,i,14595127128786693846,16270090268792908440,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7512 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:2852
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=8820,i,16816843443947178821,18162109343889801604,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12652 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:2948
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=12664,i,5201623532769226054,1264256230043482371,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12684 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:4648
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=7456,i,11966484257589271560,7651803822808078347,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7468 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:436
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=7420,i,3251228597168549528,3893220969741543971,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7412 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:4532
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=9468,i,5313403897323997550,18421211307142745344,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9892 /prefetch:1
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:3184
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=7052,i,10474246937211545315,8974590283349831883,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7024 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:3676
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=7044,i,2484066001472414624,7982969705809419979,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9440 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:1884
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=8980,i,11282025093104951757,2966818242827435555,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8580 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:1716
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=10616,i,12169600553544692246,8907929269915970858,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10604 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:3564
                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=7844,i,2350789374473331563,1614893360889839245,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6444 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:5244
                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=6716,i,6042013417086561627,8270621936399054636,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9172 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:3232
                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=9636,i,5306214391890782351,7446307881857331748,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7072 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:5352
                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=6648,i,3499675717265789090,6307989626086301234,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10000 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:4732
                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=12348,i,10998059641069813575,2334355076495087415,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7148 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:3272
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=12504,i,2314810633731552762,7530632201948942497,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11796 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:408
                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=12540,i,15148368990061811575,12717840610678495658,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6800 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:1452
                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=6720,i,4209850885957406575,10204302582566119403,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12280 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:3788
                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=6888,i,212873214615735209,9521823821553721026,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6916 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:1784
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=9956,i,8422174329497497175,14973433153381124379,2097152 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10804 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:5520
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6844,i,10379270432526530968,10990041500839043126,524288 --field-trial-handle=1980,i,8435808232698143012,15993219119210634438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6920 /prefetch:8
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:5504
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                    PID:1524
                                                                                                                                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                      PID:1516
                                                                                                                                                                                                                    • C:\Windows\System32\rundll32.exe
                                                                                                                                                                                                                      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                        PID:1332
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\Temp1_nstool-v1.9.2-win_x64.zip\nstool.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\Temp1_nstool-v1.9.2-win_x64.zip\nstool.exe"
                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                          PID:3780
                                                                                                                                                                                                                        • C:\Program Files\7-Zip\7zG.exe
                                                                                                                                                                                                                          "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\" -ad -an -ai#7zMap1235:104:7zEvent15602
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                          PID:1016
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:4676
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:5032
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:212
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:4760
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:5236
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:6140
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:5140
                                                                                                                                                                                                                        • C:\Windows\system32\control.exe
                                                                                                                                                                                                                          "C:\Windows\system32\control.exe" /name Microsoft.AdministrativeTools
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Modifies registry class
                                                                                                                                                                                                                          PID:5544
                                                                                                                                                                                                                        • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                                                                                          C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                          PID:5480
                                                                                                                                                                                                                        • C:\Windows\explorer.exe
                                                                                                                                                                                                                          C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Modifies Internet Explorer settings
                                                                                                                                                                                                                          • Modifies registry class
                                                                                                                                                                                                                          • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                          PID:4360
                                                                                                                                                                                                                        • C:\Windows\system32\taskmgr.exe
                                                                                                                                                                                                                          "C:\Windows\system32\taskmgr.exe" /7
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Checks SCSI registry key(s)
                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                          • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                          PID:2924
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:4296
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:3144
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:2828
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:5472
                                                                                                                                                                                                                        • C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                          "C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                          PID:4304
                                                                                                                                                                                                                        • C:\Windows\system32\LogonUI.exe
                                                                                                                                                                                                                          "LogonUI.exe" /flags:0x4 /state0:0xa3853855 /state1:0x41c64e6d
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                          • Modifies data under HKEY_USERS
                                                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                          PID:1044

                                                                                                                                                                                                                        Network

                                                                                                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                              Replay Monitor

                                                                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                                                                              Downloads

                                                                                                                                                                                                                              112d913f-cbb6-403d-9d15-3dec619035a0.tmp

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\112d913f-cbb6-403d-9d15-3dec619035a0.tmp
                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                              • SHA256 bb491d4428ac13ee5246e1aabf64a127573df9f0df5e91ab464e3e82f8908d25
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                              • Size 6B
                                                                                                                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                              BrowsingTopicsState

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                                                                              • Size 649B
                                                                                                                                                                                                                              • SHA256 80c2d4d1ea0e0cbb8b1ec38dc706d51739ec8318567b56df5fbc3eddeafafba7
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                              f_000009

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
                                                                                                                                                                                                                              • Size 32KB
                                                                                                                                                                                                                              • SHA256 853ef05d985c695e579ca765ebe7d6ff3de4f731ed36089f5df236484af7b389
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              f_000011

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
                                                                                                                                                                                                                              • Size 66KB
                                                                                                                                                                                                                              • SHA256 c46316b754c4eee6fa7daccf7f36adb1fc55c2a9b4cab51261ccec993970b72c
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              f_000012

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
                                                                                                                                                                                                                              • Size 87KB
                                                                                                                                                                                                                              • SHA256 81f4c79c73887e3939a30e8deac19f23d5403e7a592545802c347233cef79c33
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              f_0000a3

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a3
                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                              • SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              f_0000a5

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a5
                                                                                                                                                                                                                              • Size 73KB
                                                                                                                                                                                                                              • SHA256 fb69de564c55a631541f30a26e52223a2b422597eefa5a9e4edf9bceb8231067
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              f_0000a8

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a8
                                                                                                                                                                                                                              • Size 271KB
                                                                                                                                                                                                                              • SHA256 92689b5bd3c71083df6b43728787e5550b742e7fb1590b999f0bf5e3a922779f
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              f_0000b0

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b0
                                                                                                                                                                                                                              • Size 158KB
                                                                                                                                                                                                                              • SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              f_0000bc

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bc
                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                              • SHA256 64dffe36b3f74b0eb4364261c78568b6fe79c9317469e82ed2a5529e79241f44
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              f_0000e5

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e5
                                                                                                                                                                                                                              • Size 35KB
                                                                                                                                                                                                                              • SHA256 8543c6b8820700a945e096494e4a10ddafa4e3a17e6cad85aa70d4499cdcbf71
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                              • SHA256 fa547dfea1447cd7ec720323b669d15a5fdb709ea45bf810be15bf87939db7ce
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                              • SHA256 0c73f8ac4eeb909ddb9d9e27329c56bdd0467590be9ebdb796ea7aa8647ff884
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                              • SHA256 1237c02ae31137746a27a108f236672f008b2c79e2b261e9c4d046a56eff2fa8
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                              • SHA256 df4de3fa5a377e492e416fd6c2ee8476423bd9d5a9aa03ee51de0e6c73c6e2c9
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              CURRENT

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_gamebanana.com_0.indexeddb.leveldb\CURRENT
                                                                                                                                                                                                                              • Size 16B
                                                                                                                                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                              LOG.old

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_gamebanana.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                                                                                                              • Size 347B
                                                                                                                                                                                                                              • SHA256 651bd4b15ae1073091680f92e9ee43dd1acf2c0b2ba6fd902fb31cd51a95aac0
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                              MANIFEST-000001

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_gamebanana.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                              • Size 23B
                                                                                                                                                                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                              • Size 61KB
                                                                                                                                                                                                                              • SHA256 6ab57928b4b265bade668e73a72feb9857e4e552358f8be6d944ae4755f59628
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                              • SHA256 b4f4642c1902ee3c8ba0710fa4845456590c655d094f516eb4c18c56d441a2c1
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                              • SHA256 35dd3bf5bddf705760948cdb2993c25e100202fe609f6b91907645a4b329859f
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                              • Size 61KB
                                                                                                                                                                                                                              • SHA256 1ef5b6b4778d07b1b01c7453ae18b454d59d5b78bc764986032c68f840d81a0b
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                              • SHA256 eeee92cd0d6ca18cd3d02baf996226187a958aa53aec8d413fd3510b0bac5321
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                              • Size 59KB
                                                                                                                                                                                                                              • SHA256 f74e07a1bb61a2504e74312c7d02f4a573333a80fad23177b4fa4ced3fc92523
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              SCT Auditing Pending Reports

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                              • Size 2B
                                                                                                                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                              • SHA256 7d969badbc870f634bcda2e902b98c8725a0575accbf715ae3e8508fa079eff3
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 4dfd2d4b92990a453c19e0ba9200c5c13a772b25a6ce8855c64aa856f78555f3
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 bbb5d8a956cd2d64d9cbd406e81f65051a5475a20a251feedb73e6cc138a5869
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 a10389b91da6c45b65133e09b9d13e2f21fc873850f4f62f8d774a49e02d70c3
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 a6e9fe9d6bb745aeb9ed5afec908f3ad037f966dfc9d89255875a152c16caa69
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 9c37a5c59f0b7ad48c9c1f7f77fa88419c27dd4ce7cd471bd06f3786c18bb66c
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 b0b399dd54397eb4787b6e61d61f5a090a057b27383799fb1e5d693b8f2d8e90
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                              • SHA256 2eea2251ef3befe076f102df766a9e1da0081bf440ba855d9ab13f5c6825d085
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 b225de5f50d479a289658908fa59289e7de41fc8222206e00223953e6ae13d76
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                              • SHA256 2d183a0afa98932e10224328f7d4ef7182c03cafee609602185c50152259ec12
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 5227332ed075f3d652f0acae14fbf144a59c54dac59bdba1861e501fb6d7908a
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 a052940934ecf73be59f05b2605d2cb059c656f4fcb2e325f497186e3df9a9a9
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                              • SHA256 956fa3ab6933b5bb4ff28d459c672c6ac776f556c0a6a3eba4e5716979d89607
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                              • SHA256 e9a921fbbd46540a00116ecf0325b5c704f00d9c183958273bb8ce64e8fee30e
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                              • SHA256 c6f7d29120f76436224a97ae0953a3f44361948cd6dcdd72183747b04330f0dc
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                              • SHA256 ec98f5bbc07df7a59bf7ba3fa5ff7b33df6a7bae65cf3405abc652d93cbb4160
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Secure Preferences

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                              • SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                              • Size 120B
                                                                                                                                                                                                                              • SHA256 ed0e5f7e15bcd7ae43f1f2da698cb5c14c789cc7c242fdc487e2dc293f4f270a
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                              the-real-index~RFe58bd02.TMP

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bd02.TMP
                                                                                                                                                                                                                              • Size 96B
                                                                                                                                                                                                                              • SHA256 586374eb539b77f3862bc3aa5effc27a45dc4b14c9014dff20bc067882a4f717
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                              49b56bd312c58e6e_0

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\49b56bd312c58e6e_0
                                                                                                                                                                                                                              • Size 63KB
                                                                                                                                                                                                                              • SHA256 bf1cdcd4d3769c02ab075bd5449594c64bca5c72ee4cc400c76b5b11d8ab806b
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                              • SHA256 5af67fa93f295602e9c3dc150de1888a71d89a0ad0fe711957f838118b54cf9e
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                              • Size 233KB
                                                                                                                                                                                                                              • SHA256 265c0c3d1c678c1ceb6582b69c0b26024795c2fd1c2f1b6af6d973be5a19d450
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                              • Size 233KB
                                                                                                                                                                                                                              • SHA256 09a8289e8188d9db74c0223d6bd4333a7e70c994a652dd21f2946338de6810ef
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                              • Size 233KB
                                                                                                                                                                                                                              • SHA256 0ae7d7cea6b3232a7a3c4620841463642139cda18faeefbb148c9124b1da246e
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                              • Size 233KB
                                                                                                                                                                                                                              • SHA256 2d65d8c1020f12736766f68fe8e0d1fa218ce05cb271e00cadc9f9afa4adde57
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                              • Size 232KB
                                                                                                                                                                                                                              • SHA256 b5a9e815f047d535ad576fc53ed699666745c2a5a708cb42db46e53513e60591
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                              • Size 115KB
                                                                                                                                                                                                                              • SHA256 096f8bb5952e6f770bb2e4541ee9079eaabfdcf223a4dfc0d24dd82bf32db2b3
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                              • Size 232KB
                                                                                                                                                                                                                              • SHA256 96b19377a62b130ba983333eb811a21de61ce50a259b35dd88e1862993136e48
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              nstool-v1.9.2-win_x64.zip.crdownload

                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64.zip.crdownload
                                                                                                                                                                                                                              • Size 475KB
                                                                                                                                                                                                                              • SHA256 34659dc47249a3c00f7fc88a11f4e5ba14dfbec0a6a96b4f3f71368a7e1c9374
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              nstool.exe

                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\nstool-v1.9.2-win_x64\nstool.exe
                                                                                                                                                                                                                              • Size 1.0MB
                                                                                                                                                                                                                              • SHA256 844648190dd8688098887a369da1126c1b3ab1c2a664fb603b01cb22e76b6ca9
                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                              memory/2924-2237-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp

                                                                                                                                                                                                                              memory/2924-2236-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp

                                                                                                                                                                                                                              memory/2924-2246-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp

                                                                                                                                                                                                                              memory/2924-2248-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp

                                                                                                                                                                                                                              memory/2924-2247-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp

                                                                                                                                                                                                                              memory/2924-2245-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp

                                                                                                                                                                                                                              memory/2924-2244-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp

                                                                                                                                                                                                                              memory/2924-2243-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp

                                                                                                                                                                                                                              memory/2924-2242-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp

                                                                                                                                                                                                                              memory/2924-2238-0x000001F0BFA00000-0x000001F0BFA01000-memory.dmp