Analysis

  • user interaction
    yes
  • max time kernel
    1228s
  • max time network
    1230s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/07/2026, 15:23

General

  • Target
    Туториал по Asleep_Scanner.pdf
  • Size 4.1MB
  • Sample260711-sspf2aft8x
  • SHA256 954e2fdcfe94da222d297a36786a129d2fb5af66a5a331141fe140c29f7a9653
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Drops file in Drivers directory 1 IoCs
  • Executes dropped EXE 31 IoCs
  • Loads dropped DLL 64 IoCs
  • Unexpected DNS network traffic destination 64 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 5 IoCs

    Using powershell.exe command.

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 32 IoCs
  • Launches sc.exe 3 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

  • System Location Discovery: System Language Discovery 1 TTPs 24 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

  • Checks SCSI registry key(s) 3 TTPs 53 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 4 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 51 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Туториал по Asleep_Scanner.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3584
    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
      "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5000
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=E182527DE6721EB78A207863C2D7A393 --mojo-platform-channel-handle=1804 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4844
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=77B2EFF658FB7B6EC0B276B2E9BBC9F0 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=77B2EFF658FB7B6EC0B276B2E9BBC9F0 --renderer-client-id=2 --mojo-platform-channel-handle=1796 --allow-no-sandbox-job /prefetch:1
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2920
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=E7B450F572E39E8976FC31933F3A4FE4 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=E7B450F572E39E8976FC31933F3A4FE4 --renderer-client-id=4 --mojo-platform-channel-handle=2396 --allow-no-sandbox-job /prefetch:1
        3⤵
        • System Location Discovery: System Language Discovery
        PID:3148
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=C769EE3A3F31B30730EE36C63CA663A9 --mojo-platform-channel-handle=2764 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:5752
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=BD843AC30EF9C101BFD05F7EF8AA5B3A --mojo-platform-channel-handle=1920 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:5452
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=11A183C667492299CC1A8308C26FC43D --mojo-platform-channel-handle=2104 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1220
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:3900
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:2348
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffb2cb6c728,0x7ffb2cb6c734,0x7ffb2cb6c740
        2⤵
          PID:4704
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1492,i,8522514464640808008,6936510395517780012,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=1948 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:620
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1628,i,13743602650908845993,6362643307952954106,262144 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=1704 /prefetch:2
          2⤵
            PID:1096
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2316,i,15098957497611672915,5882113311124066206,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:13
            2⤵
              PID:1432
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,11160554534789945261,4597464118048706186,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
              2⤵
                PID:3044
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3324,i,3624351517870471567,14325866763159809492,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
                2⤵
                  PID:3676
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4708,i,12794679352459089562,14844095398738914166,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
                  2⤵
                    PID:6132
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4728,i,3802189322606075798,12129997721971841214,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:1
                    2⤵
                      PID:2224
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4796,i,7166476176059114604,9573017021740529490,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
                      2⤵
                        PID:1404
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5196,i,8484712909857210622,3617989793843537775,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=3228 /prefetch:14
                        2⤵
                          PID:4384
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,14963532065799940686,7092318390774711095,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
                          2⤵
                            PID:4116
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5472,i,15485900384485354768,2684050441653450553,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:1
                            2⤵
                              PID:5312
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5512,i,7361917606357888627,10653490747418523572,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
                              2⤵
                                PID:2644
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5760,i,1103257051586056507,4047716000773776675,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:1
                                2⤵
                                  PID:2368
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5808,i,13074608004157285281,15524674079386576122,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
                                  2⤵
                                    PID:5760
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5960,i,720108172532907876,2774070724697523390,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:1
                                    2⤵
                                      PID:4100
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6232,i,6113034094242317931,3815266955503589817,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
                                      2⤵
                                        PID:3432
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5544,i,4118098684966284763,5848706088600421573,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
                                        2⤵
                                          PID:4576
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5404,i,5433852512759396588,2858191842443435616,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:1
                                          2⤵
                                            PID:5664
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,11345158847717924146,10815472290168374049,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
                                            2⤵
                                              PID:1568
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6240,i,17184315710155740522,9228435135800549200,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
                                              2⤵
                                                PID:5492
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5716,i,5648020646253960755,2889729551017299096,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
                                                2⤵
                                                  PID:5656
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4576,i,6699702190275353454,1559174512766577485,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:1
                                                  2⤵
                                                    PID:5296
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5420,i,9182520856346180069,11683127655916573962,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:9
                                                    2⤵
                                                      PID:2140
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4968,i,12663322979742684096,1213957986700652304,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
                                                      2⤵
                                                        PID:2388
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=256,i,5938058212099749454,3693040864914773868,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
                                                        2⤵
                                                          PID:4408
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3340,i,17216529408325565940,16078691241004004800,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:14
                                                          2⤵
                                                            PID:4324
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5184,i,12293021995636423383,3626489995009032481,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
                                                            2⤵
                                                              PID:4484
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3552,i,2350452154968030150,5872464795204961601,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
                                                              2⤵
                                                                PID:2320
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3712,i,1017161853156203367,10265598036725880407,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:14
                                                                2⤵
                                                                  PID:3796
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=3472,i,11735117915037815588,3549169962499360638,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:1
                                                                  2⤵
                                                                    PID:5884
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5724,i,17442175790595800757,8854944970659672739,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
                                                                    2⤵
                                                                      PID:1736
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=5576,i,5290155090244227216,14803223129336453145,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:1
                                                                      2⤵
                                                                        PID:6000
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=3644,i,7108123556473790878,10450050109872946403,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:1
                                                                        2⤵
                                                                          PID:1540
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=5376,i,13175580686178607447,17384029270118288489,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:1
                                                                          2⤵
                                                                            PID:2260
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6544,i,14750815956553604825,6320133465079856630,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:1
                                                                            2⤵
                                                                              PID:4720
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=3340,i,13126196443037059443,3284662742321904694,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:1
                                                                              2⤵
                                                                                PID:556
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=6232,i,6427649397284450162,14140994160656435258,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
                                                                                2⤵
                                                                                  PID:5756
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=6528,i,15451355745630559431,6868172677690546540,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
                                                                                  2⤵
                                                                                    PID:4108
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6712,i,3242506892068904362,6894590909394588515,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:1
                                                                                    2⤵
                                                                                      PID:4784
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=6836,i,14357009814018905786,15812164817408474169,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:1
                                                                                      2⤵
                                                                                        PID:4552
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=5676,i,1317864033839859512,12333287256653472960,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:1
                                                                                        2⤵
                                                                                          PID:464
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=5464,i,408951961442820010,2538864081377625191,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:1
                                                                                          2⤵
                                                                                            PID:1196
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=6904,i,2562680077953132459,1990804797245324592,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:1
                                                                                            2⤵
                                                                                              PID:3024
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=7164,i,10710408078302385459,16982454273701386764,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:1
                                                                                              2⤵
                                                                                                PID:2488
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=7196,i,4994025608973153865,2869857994227449263,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:1256
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7348,i,10667320606019981702,1106252670418520828,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7316 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5656
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=7196,i,15765155585396564528,6450769964077260192,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:4836
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7648,i,13489452484696791576,1988955039738128808,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7632 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:5092
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=7768,i,7358055090991713035,3159100470545863861,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7656 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:5744
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=7948,i,4745333975614975453,5127153210308902435,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5784
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=8084,i,20991366363299339,12381704653361458842,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8104 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:2496
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=8248,i,17408651414920737962,16124583743859492955,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5808
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=8304,i,11824571974300671645,5123201897008905315,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8332 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:4896
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=8596,i,4916243818470655660,5980832730104911978,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8572 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:2120
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=8764,i,8226807312196792075,8133100934428207474,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8740 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:5184
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=8924,i,6522869088879140839,7046591781236883706,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8936 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:3248
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=9044,i,8469743844184517634,10545670538920268476,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8776 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:2384
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=9236,i,5593333074382560161,14238688963265592424,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9240 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:4936
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=9360,i,5975517342658881528,93677484802875281,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9388 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:2388
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=9504,i,11129463670747494437,8129093747575881081,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9528 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:4876
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=9332,i,7658867829716840243,2562777710268061628,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9676 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:5932
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=9820,i,1907219727106615648,18180729905065368337,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9816 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:1460
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=6108,i,6924172009648708410,16797463999864802452,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9808 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:4628
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=6136,i,15322527796749714856,15264469483321810799,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:1752
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=10124,i,13240949227650979612,6659001461584247408,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10108 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:5836
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=6136,i,11015588809475545868,1052408190104265952,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10256 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:3436
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10408,i,4903780425953659642,8720212658138700357,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10388 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:5852
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=10552,i,3930164732152759537,5482405576209086395,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10560 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:1556
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=10992,i,1251102066608308850,14148529939543399941,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11048 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:3536
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=11120,i,12788981716368255123,14054423483817072149,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11408 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:2936
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=11016,i,339899184810432222,17028329899266729691,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11088 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:4884
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=11100,i,14504037563830222009,7006670625915630137,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11196 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:4768
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=11080,i,7865579005684305123,13785336881395500707,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11176 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:5148
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=11260,i,17248774905960710518,11131096833996327268,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11920 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:124
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=11236,i,3397271719457475642,8488520439668389279,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11892 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:6148
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=11368,i,9867247183272876511,11594820549022065383,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12028 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:5524
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=11316,i,5486082051613316518,18002777608694680696,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11980 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:6156
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=11384,i,6205492758191670362,14187291556825421791,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12056 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:4348
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=11348,i,11723335673563417141,7584901674033622175,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12020 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:6164
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=11172,i,13620729743105173481,10615432900777277778,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11736 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:6172
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=11152,i,15412992841981323137,17896955475727022717,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11600 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:3892
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=11216,i,9020920293448322683,7330584418419376152,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11884 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:6180
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=11288,i,11276924697527227528,1150926251651508193,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11940 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:6188
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=11292,i,13197361402440681247,16059905266489067236,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11960 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:6196
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=11136,i,3545966227312491046,1676293963100217600,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11428 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:6204
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=11332,i,15216934899199590612,556614959800619083,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12000 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:6212
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=12448,i,4194549355248697003,3814939373674539536,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14312 /prefetch:1
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:6992
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=11384,i,13730855058363904068,18144093802062016975,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12820 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:7000
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=14056,i,383374967178089815,17848287790426051128,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14040 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:7052
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=12440,i,1201373756718868914,9538956585212901969,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12584 /prefetch:14
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:4936
                                                                                                                                                                                          • C:\Users\Admin\Downloads\v2RayTun_Setup.exe
                                                                                                                                                                                            "C:\Users\Admin\Downloads\v2RayTun_Setup.exe"
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                            PID:2708
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\is-5TQQA.tmp\v2RayTun_Setup.tmp
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\is-5TQQA.tmp\v2RayTun_Setup.tmp" /SL5="$B0272,56428907,726528,C:\Users\Admin\Downloads\v2RayTun_Setup.exe"
                                                                                                                                                                                              3⤵
                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                              • Drops file in Program Files directory
                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                              • Modifies registry class
                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                              PID:6824
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\is-K2CJG.tmp\VC_redist.x64.exe
                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\is-K2CJG.tmp\VC_redist.x64.exe" /install /quiet /norestart
                                                                                                                                                                                                4⤵
                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                PID:8312
                                                                                                                                                                                                • C:\Windows\Temp\{7C76BCCB-8F08-4C51-93A1-82BD1E879A4C}\.cr\VC_redist.x64.exe
                                                                                                                                                                                                  "C:\Windows\Temp\{7C76BCCB-8F08-4C51-93A1-82BD1E879A4C}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-K2CJG.tmp\VC_redist.x64.exe" -burn.filehandle.attached=760 -burn.filehandle.self=764 /install /quiet /norestart
                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                  PID:8400
                                                                                                                                                                                                  • C:\Windows\Temp\{32ED2991-5E56-428B-A03D-646098639C7B}\.be\VC_redist.x64.exe
                                                                                                                                                                                                    "C:\Windows\Temp\{32ED2991-5E56-428B-A03D-646098639C7B}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{11ADB7D1-24A3-4CD9-8DBD-72E4F34D5F59} {8706BCB5-D3EE-4EFB-A08B-81141F99E26C} 8400
                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                    • Adds Run key to start application
                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                                    PID:8780
                                                                                                                                                                                                    • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                                                                                                                                                                      "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={804e7d66-ccc2-4c12-84ba-476da31d103d} -burn.filehandle.self=1084 -burn.embedded BurnPipe.{8F997C27-F96E-4977-B24A-3BB699A56B33} {5B0862D8-8EE4-4519-932B-CA69F239BB96} 8780
                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                      PID:7516
                                                                                                                                                                                                      • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                                                                                                                                                                        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=564 -burn.filehandle.self=584 -uninstall -quiet -burn.related.upgrade -burn.ancestors={804e7d66-ccc2-4c12-84ba-476da31d103d} -burn.filehandle.self=1084 -burn.embedded BurnPipe.{8F997C27-F96E-4977-B24A-3BB699A56B33} {5B0862D8-8EE4-4519-932B-CA69F239BB96} 8780
                                                                                                                                                                                                        8⤵
                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                        PID:7544
                                                                                                                                                                                                        • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                                                                                                                                                                          "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{861830A7-0324-4714-B4AF-72565BF6C86A} {7E63C9F9-8C07-4E6F-ABBE-442500137BAC} 7544
                                                                                                                                                                                                          9⤵
                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                          • Modifies registry class
                                                                                                                                                                                                          PID:7868
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=10476,i,15134551896113758750,5553329780647205587,262144 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10452 /prefetch:10
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                            PID:6492
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=14024,i,4369449451810776159,15398327703218658423,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11376 /prefetch:14
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:1212
                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=13724,i,7070082847728206496,16013714365210990287,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10768 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:6448
                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=12260,i,4904404192943333350,13307053750209358320,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11988 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:6096
                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=9092,i,6759647883264763883,7125261684170614028,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11224 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:3008
                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=9548,i,17154525465176005678,16607879167444955828,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7312 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:7416
                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=9648,i,13372048419007916717,18154936868272553656,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9492 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:7748
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=9592,i,6927160350940703905,8026929554688546836,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9088 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:7760
                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=13860,i,5988366005635654341,8621502954816028296,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8032 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:7768
                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=8872,i,2435382987057798477,17049191508089999779,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8908 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:7780
                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=12432,i,12123201073504795744,4351837937176252925,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12228 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:7816
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=11928,i,17353498350750382230,18083965144779269678,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:7848
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=10572,i,17783064237113170301,12997991226815226602,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10668 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:7512
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=8324,i,2773777753973444533,12421580046774543505,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11040 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:7888
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=9136,i,4592464215946501640,6634119635952629315,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13272 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:7896
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=7068,i,10653087807109510022,13077568556158581143,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13200 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:7912
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=10308,i,13095546624267384672,3295324737881692334,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:7956
                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=10224,i,3598441374791979419,11314576442328225671,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:7952
                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=8584,i,5636640794370739373,3648030640887137639,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8116 /prefetch:1
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:7880
                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=8164,i,13015353962852167729,14390584969549604560,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8136 /prefetch:1
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:7872
                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=7584,i,13967154145977573240,12967251722321266148,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7500 /prefetch:1
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:8472
                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=7568,i,8307864838742340308,191810211298795114,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9460 /prefetch:1
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:8364
                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=7324,i,6978411489962561783,17170267184178795515,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7980 /prefetch:1
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:8520
                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=12060,i,8829924889472824658,7760226955147522942,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10960 /prefetch:1
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:8528
                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=8188,i,8374344652851654914,2170573868113535926,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10516 /prefetch:1
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:8340
                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=7328,i,15267527347951829160,7649726729444974559,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12664 /prefetch:1
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:6828
                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=8176,i,8555582142016864875,6568996965673711797,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:1
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:6504
                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=6956,i,6829551375472007520,8177063497518480115,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9864 /prefetch:1
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:8636
                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=6524,i,8812886621158135935,18396830934416260906,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9332 /prefetch:1
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:6836
                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=7864,i,15907762974017356636,5877465862581194328,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:1
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:8640
                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --metrics-shmem-handle=6228,i,12592082043754650211,12175567349096262335,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:1
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:8696
                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --metrics-shmem-handle=7244,i,10955643367413269594,12047889234002353489,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:1
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                          PID:8744
                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=4440,i,6780743458968542819,14706658345300510300,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9208 /prefetch:1
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:8764
                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=5660,i,10235007007531533088,13329059983020713308,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8676 /prefetch:1
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:8476
                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --metrics-shmem-handle=8672,i,13755066301155083869,1417280347452038548,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8684 /prefetch:1
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:8768
                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --metrics-shmem-handle=7612,i,1832930727968961117,9788283781082648022,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:1
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:8448
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --metrics-shmem-handle=8716,i,7107939955920201551,9359059931476175950,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8604 /prefetch:1
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:2216
                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --metrics-shmem-handle=7092,i,555314130456548910,10031102913801453370,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12124 /prefetch:1
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:6620
                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --metrics-shmem-handle=13356,i,11284974196828110130,2758699100619337996,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11592 /prefetch:1
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                        PID:7392
                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --metrics-shmem-handle=12604,i,2366397982700595806,16498595873451683497,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12512 /prefetch:1
                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                          PID:3556
                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --metrics-shmem-handle=9696,i,12768636099419940302,492977858542465895,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9752 /prefetch:1
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                            PID:7700
                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=13020,i,4684331674188744263,2192769642470883320,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12256 /prefetch:1
                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                              PID:8180
                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=13040,i,6908275636784575955,8376162167089976907,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11980 /prefetch:1
                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                PID:8884
                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --metrics-shmem-handle=13472,i,7487622543592681919,14999351181490033602,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12328 /prefetch:1
                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                  PID:4752
                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --metrics-shmem-handle=3660,i,14418984978857793999,4832050042378838866,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14256 /prefetch:1
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                    PID:5840
                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --metrics-shmem-handle=12552,i,893203348702390301,6120511343152078094,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:1
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                      PID:6628
                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --metrics-shmem-handle=6504,i,9975234284836776701,2010833278354946205,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11516 /prefetch:1
                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                        PID:2520
                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --metrics-shmem-handle=12744,i,15815449636333496883,16781126498469837402,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13372 /prefetch:1
                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                          PID:4060
                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --metrics-shmem-handle=7092,i,6128593416092751822,7813984954437013635,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7332 /prefetch:1
                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                            PID:6500
                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --metrics-shmem-handle=12912,i,979670388414278375,3868755287115778942,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12888 /prefetch:1
                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                              PID:2056
                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --metrics-shmem-handle=13520,i,7312635843322571888,10290898908483303183,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12908 /prefetch:1
                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                PID:7008
                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --metrics-shmem-handle=13052,i,9938363940323230990,3290405636938652157,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12876 /prefetch:1
                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                  PID:7208
                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --metrics-shmem-handle=7160,i,1420996363964208204,15097485073323218430,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:1
                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                    PID:7680
                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --metrics-shmem-handle=13664,i,2337161807905635327,4817857322760895811,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:1
                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                      PID:3816
                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --metrics-shmem-handle=3228,i,5716059017434444513,2377437183599505233,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11060 /prefetch:1
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                        PID:2964
                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --metrics-shmem-handle=10032,i,6419372403330945094,1198406391606223141,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10252 /prefetch:1
                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                          PID:5348
                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --metrics-shmem-handle=8116,i,15351137192127017699,9029359841439600045,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9132 /prefetch:1
                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                            PID:600
                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --metrics-shmem-handle=12108,i,10707996309577827574,10938398703566643007,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11524 /prefetch:1
                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                              PID:3040
                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --metrics-shmem-handle=10236,i,11822429658211471989,11966684862461519039,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14284 /prefetch:1
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:3032
                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --metrics-shmem-handle=14048,i,5521885015768137123,985494458019078152,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8764 /prefetch:1
                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                  PID:5092
                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --metrics-shmem-handle=9980,i,6134273552041906919,17077844703752355696,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                    PID:2480
                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --metrics-shmem-handle=11780,i,12360536455841153919,14273776433328824747,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11832 /prefetch:1
                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                      PID:5172
                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --metrics-shmem-handle=14368,i,4460693789526480697,3781049572610553757,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14380 /prefetch:1
                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                        PID:2140
                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --metrics-shmem-handle=14520,i,12714747807688247792,9163305452018209921,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14536 /prefetch:1
                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                          PID:4256
                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --metrics-shmem-handle=14676,i,9865431489732205644,3929120186783859517,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14692 /prefetch:1
                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                            PID:4172
                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --metrics-shmem-handle=14808,i,1970747764304450444,14005640490231479157,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14836 /prefetch:1
                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                              PID:1036
                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --metrics-shmem-handle=14856,i,15222855157300706465,13923069991514529772,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14992 /prefetch:1
                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                PID:1864
                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --metrics-shmem-handle=15024,i,14361388535692174279,626617901789048693,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=15032 /prefetch:1
                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                  PID:2464
                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --metrics-shmem-handle=13520,i,16199958706215602387,12223565017295729882,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=15280 /prefetch:1
                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                    PID:2832
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --metrics-shmem-handle=7104,i,3071793245460707686,6773250856459316510,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10264 /prefetch:1
                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                      PID:5060
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6836,i,681953875790740233,15428202038783550165,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9152 /prefetch:14
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                        PID:5156
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --metrics-shmem-handle=11776,i,1623184905504322166,7391107593872100299,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:1
                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                          PID:3428
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6568,i,9560685525389545556,2005452838359910837,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7492 /prefetch:14
                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                            PID:4748
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --metrics-shmem-handle=11744,i,9614846704087213355,3728616852041656891,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7564 /prefetch:1
                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                              PID:5032
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --metrics-shmem-handle=9432,i,15833269666187595745,18370658401472762665,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11528 /prefetch:1
                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                PID:7736
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --metrics-shmem-handle=13928,i,3002206241350999550,2617639962001559279,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=15340 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                  PID:6220
                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --metrics-shmem-handle=9444,i,13216103760628717670,9077039516668118920,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10192 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                    PID:7452
                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --metrics-shmem-handle=12028,i,13721163798892160285,8226496139907208107,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13244 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                      PID:6764
                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --metrics-shmem-handle=6516,i,6597512269176438261,18007962370039438220,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                        PID:5056
                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --metrics-shmem-handle=3612,i,9751374519602986517,14264142187494436491,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12332 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                          PID:5072
                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --metrics-shmem-handle=8868,i,8366231928032146323,12463322726353561263,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11564 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                            PID:6992
                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --metrics-shmem-handle=7548,i,5482069944569014011,2974155784779588005,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13232 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                              PID:8776
                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --metrics-shmem-handle=11088,i,16181078235055670153,5358606805228611625,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13760 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                PID:7688
                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --metrics-shmem-handle=8124,i,8200973616950760882,16553536370271177921,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11260 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:7584
                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --metrics-shmem-handle=8944,i,3619526084812001534,1337753206770226552,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8816 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:7704
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --metrics-shmem-handle=11044,i,13846705680038032229,13839156051842259466,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8956 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:7668
                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=178 --metrics-shmem-handle=14412,i,11984441557504830885,11040544497541174988,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=15396 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:7728
                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=179 --metrics-shmem-handle=11132,i,9749705512151583585,14835154954923899941,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7328 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:7752
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=180 --metrics-shmem-handle=15092,i,836148077268435658,2976426452516086137,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=15068 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:8796
                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=181 --metrics-shmem-handle=8752,i,16453544981353015585,11256294807519365687,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9364 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:2324
                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --metrics-shmem-handle=8488,i,1997342646013417642,1964786470240050875,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14516 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:9052
                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=183 --metrics-shmem-handle=14604,i,15831808492776251513,11392448873625174255,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14344 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:9072
                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=184 --metrics-shmem-handle=11860,i,2484096860973349339,1368982087015789624,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14648 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:2108
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=185 --metrics-shmem-handle=13924,i,9443254492936463733,634772051855193436,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9212 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:8872
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=186 --metrics-shmem-handle=12336,i,1131417548642608569,12931409029585842999,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7812 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:7416
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=187 --metrics-shmem-handle=13344,i,17992273252563120658,11229016163359305236,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14572 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:7152
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=188 --metrics-shmem-handle=8344,i,10596759286259446549,16578446977546454351,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9360 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:5184
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=189 --metrics-shmem-handle=8508,i,11610104240033407194,12043069289994906082,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10052 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:7144
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=190 --metrics-shmem-handle=7864,i,7321381928812570745,10782555842761213614,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:7092
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=191 --metrics-shmem-handle=6580,i,7047689800695217885,1692853074618096660,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9804 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:8008
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=192 --metrics-shmem-handle=8628,i,5155592498768707873,2247676877251958773,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10044 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:7832
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=193 --metrics-shmem-handle=7756,i,12421160775969761988,5807373446545952334,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8588 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:7536
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=194 --metrics-shmem-handle=9868,i,9680890219584673226,9015883000770353177,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:8172
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=195 --metrics-shmem-handle=9780,i,14604023791365183796,12236568601418660506,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:8252
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=196 --metrics-shmem-handle=11220,i,10741232584651918726,5485985820906947431,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12940 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:8024
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=197 --metrics-shmem-handle=11976,i,13742469131362195549,5101817132340780429,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8136 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:2596
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=198 --metrics-shmem-handle=12836,i,3591152945568043254,16012977858248329330,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14536 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:8448
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=199 --metrics-shmem-handle=12504,i,12119501306598787684,17372505387889236320,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12856 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7440
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=200 --metrics-shmem-handle=13548,i,12848741491526996647,14925067463852541592,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11372 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7472
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=201 --metrics-shmem-handle=8604,i,3300521944775581287,14854588214094442005,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14184 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1820
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=202 --metrics-shmem-handle=8040,i,6918619170069702252,11187676436923103921,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11616 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6664
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=203 --metrics-shmem-handle=14168,i,10863185106717742756,3035667394405028510,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10324 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6404
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=204 --metrics-shmem-handle=14040,i,13948513341425575954,11532665927921293113,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7524
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=205 --metrics-shmem-handle=14904,i,9843731510616461472,16770292338869982887,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9080 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7540
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=206 --metrics-shmem-handle=14880,i,8093994118085226424,11895234266795845947,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14428 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:8824
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=207 --metrics-shmem-handle=9064,i,1642776271129340259,10008609831264287822,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8688
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=208 --metrics-shmem-handle=10676,i,5169309626227492790,14386259304200691658,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10612 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7200
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=209 --metrics-shmem-handle=10220,i,3990871825587806931,987803812351971972,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12284 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2640
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=210 --metrics-shmem-handle=12964,i,2351925031719156601,17091261359416355280,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13648 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3388
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=211 --metrics-shmem-handle=11084,i,5764722236870651711,7896046360804545976,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1944
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=212 --metrics-shmem-handle=13496,i,15957955393459925259,5807431517769206895,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12732 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8332
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=213 --metrics-shmem-handle=4760,i,2532193633773227740,10519668781825258570,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:9076
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=214 --metrics-shmem-handle=13708,i,6470025354020652413,10168021812969038927,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14708 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3944
                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=215 --metrics-shmem-handle=7364,i,3402986136677507926,8287911446716194670,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12092 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5252
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=216 --metrics-shmem-handle=10396,i,12675281588369499372,13872787500393034161,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13496 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7120
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=217 --metrics-shmem-handle=10784,i,3960491016632440700,17112819904567772717,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13624 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3100
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=218 --metrics-shmem-handle=14836,i,7133977748422093319,7404798190695072694,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10544 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:556
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=219 --metrics-shmem-handle=12152,i,3836465372304839242,936154774156710144,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11856 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3796
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=220 --metrics-shmem-handle=11816,i,13193886746197859462,3988014641628932973,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14720 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4440
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=221 --metrics-shmem-handle=11096,i,2171189985407048989,15316740052230305903,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11820 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1436
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=222 --metrics-shmem-handle=8164,i,3329111838257897654,1619692044701833794,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7908 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2592
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=223 --metrics-shmem-handle=5844,i,984312725115095014,4515843252041069385,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14228 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8320
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=224 --metrics-shmem-handle=15444,i,6390972491675123581,7276907873327817752,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12836 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1560
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=225 --metrics-shmem-handle=9720,i,12493894864696235357,3322434299377377227,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3564
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=226 --metrics-shmem-handle=12872,i,12472260637027170082,5530307757543683467,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12780 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5280
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=227 --metrics-shmem-handle=14580,i,7604581526636916753,6216072190714835730,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1804
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=228 --metrics-shmem-handle=7096,i,17043402049091866260,8628967160236861655,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8048 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1416
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=229 --metrics-shmem-handle=14032,i,9021153421939281456,9411131774313783156,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9572 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4040
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=230 --metrics-shmem-handle=9584,i,15180592679585860615,4698620064424590060,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8016 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4876
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=231 --metrics-shmem-handle=14884,i,2145847495794596809,380873896934464617,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5784
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=232 --metrics-shmem-handle=9280,i,1118204929808592228,13479336420937553610,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13360 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5624
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=233 --metrics-shmem-handle=7732,i,9127616986764812183,13020528819929363865,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11584 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:8588
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=234 --metrics-shmem-handle=11828,i,9550354612072648470,18326521176245658855,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9340 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8384
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=235 --metrics-shmem-handle=10032,i,12331874278521811777,2562789615119386301,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14444 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4868
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=236 --metrics-shmem-handle=14628,i,12862823121170243778,12571577970814705593,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14908 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3920
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=237 --metrics-shmem-handle=8524,i,12841916975519607674,7241679092226403772,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=7196 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1404
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=238 --metrics-shmem-handle=15376,i,14534436612608061633,17097353787136273883,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=15388 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:8548
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=239 --metrics-shmem-handle=14284,i,7394612538819062816,9078490933383514575,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8988 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8372
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=240 --metrics-shmem-handle=10388,i,8296331347859370208,2810659251936140848,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8524 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7136
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=241 --metrics-shmem-handle=7664,i,11289689758900349816,11819379239719603549,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14500 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6880
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=242 --metrics-shmem-handle=6496,i,5597057253168772343,5874102947860628261,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=11280 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4288
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=243 --metrics-shmem-handle=8404,i,11523387520361725390,17173390326184988251,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=12084 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6980
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=244 --metrics-shmem-handle=12088,i,2285962166278736471,15921337849590879207,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=14684 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2472
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=245 --metrics-shmem-handle=14716,i,14786420186475850136,5705985620165662557,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10076 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8808
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=246 --metrics-shmem-handle=12440,i,943053132295311399,12356982834393255014,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13744 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:6716
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=252 --metrics-shmem-handle=10324,i,2198980885177058209,9355499303181027635,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13316 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2984
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=248 --metrics-shmem-handle=14752,i,589826588853590282,8142667706245090727,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13060 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4520
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=249 --metrics-shmem-handle=14800,i,1619844421024744351,14201183468183255246,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10252 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2976
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=253 --metrics-shmem-handle=13364,i,1188520285416343789,4188630962734706778,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=13624 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8760
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=251 --metrics-shmem-handle=14544,i,2116950684067711463,10780054387509070838,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=900 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:8060
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=247 --metrics-shmem-handle=14732,i,2380964684296564009,85092990874845413,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=8404 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4752
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=254 --metrics-shmem-handle=9232,i,2363742711631955967,16227167240590427621,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=10164 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3176
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=250 --metrics-shmem-handle=14760,i,12904225421250179650,6804410715654131359,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9204 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:8884
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=255 --metrics-shmem-handle=6244,i,13973220155475842892,16208421735029122320,2097152 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=9164 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8040
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3952,i,18269443070531909666,6586881773356645879,524288 --field-trial-handle=1676,i,4279302939681634095,12061942337915271012,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5268
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\Downloads\setup-Happ.x64.v2.18.3(573).exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\Downloads\setup-Happ.x64.v2.18.3(573).exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2824
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\is-SAJ0RXT5II.tmp\setup-Happ.x64.v2.18.3(573).tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\is-SAJ0RXT5II.tmp\setup-Happ.x64.v2.18.3(573).tmp" /SL5="$F026A,116381118,893440,C:\Users\Admin\Downloads\setup-Happ.x64.v2.18.3(573).exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "cmd.exe" /c sc query HappService | find "RUNNING"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:8736
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\System32\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sc query HappService
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3020
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\System32\find.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            find "RUNNING"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6456
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\FlyFrogLLC\Happ\happd.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\FlyFrogLLC\Happ\happd.exe" --register
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6976
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "sc.exe" config HappService start= auto
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9020
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "sc.exe" start HappService
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7064
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2972
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6004
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5924
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3912
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Windows\system32\vssvc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Windows\system32\vssvc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8876
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Windows\system32\srtasks.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7488
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\msiexec.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Windows\system32\msiexec.exe /V
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4588
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exe" /burn.runonce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7576
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260711163535.log" /install
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7720
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exe" -burn.filehandle.attached=564 -burn.filehandle.self=584 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260711163535.log" /install
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7800
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{6D79A069-6BAC-4A70-9000-2C757F416006} {C29F69DD-4EBB-4F60-8BD1-245CE672A7CC} 7800
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Adds Run key to start application
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={804e7d66-ccc2-4c12-84ba-476da31d103d} -burn.filehandle.self=1124 -burn.embedded BurnPipe.{7D76C54E-953C-4023-B4FF-9C1F0CB900EE} {4E65BA69-ECE7-4770-813F-2218E0CB90A3} 7248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7916
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=560 -burn.filehandle.self=580 -uninstall -quiet -burn.related.upgrade -burn.ancestors={804e7d66-ccc2-4c12-84ba-476da31d103d} -burn.filehandle.self=1124 -burn.embedded BurnPipe.{7D76C54E-953C-4023-B4FF-9C1F0CB900EE} {4E65BA69-ECE7-4770-813F-2218E0CB90A3} 7248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7944
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\v2RayTun\v2RayTun.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\v2RayTun\v2RayTun.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:9200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe version
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  powershell -NoProfile -Command "Add-Type -Namespace WinINet -Name NativeMethods -MemberDefinition @\" [System.Runtime.InteropServices.DllImport(\"wininet.dll\", SetLastError=true)] public static extern bool InternetSetOption(System.IntPtr hInternet, int dwOption, System.IntPtr lpBuffer, int dwBufferLength); \"@; [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 39, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_SETTINGS_CHANGED [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 37, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_REFRESH "
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Command and Scripting Interpreter: PowerShell
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8404
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\i2hiwq0s\i2hiwq0s.cmdline"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES7E3A.tmp" "c:\Users\Admin\AppData\Local\Temp\i2hiwq0s\CSCCB8FCFC6E9434BE1BF332596993A2496.TMP"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6712
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe run --path C:\Users\Admin\AppData\Local\Temp\v2RayTun\connection.json --port 10809 --asset-dir C:\Users\Admin\AppData\Local\Temp\v2RayTun
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2120
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      powershell -NoProfile -Command "Add-Type -Namespace WinINet -Name NativeMethods -MemberDefinition @\" [System.Runtime.InteropServices.DllImport(\"wininet.dll\", SetLastError=true)] public static extern bool InternetSetOption(System.IntPtr hInternet, int dwOption, System.IntPtr lpBuffer, int dwBufferLength); \"@; [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 39, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_SETTINGS_CHANGED [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 37, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_REFRESH "
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command and Scripting Interpreter: PowerShell
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4496
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\qy4u1in5\qy4u1in5.cmdline"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7620
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES8AEC.tmp" "c:\Users\Admin\AppData\Local\Temp\qy4u1in5\CSC40B70D7613624736B17F233CD4237CF6.TMP"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7624
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe run --path C:\Users\Admin\AppData\Local\Temp\v2RayTun\connection.json --port 10809 --asset-dir C:\Users\Admin\AppData\Local\Temp\v2RayTun
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6676
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          powershell -NoProfile -Command "Add-Type -Namespace WinINet -Name NativeMethods -MemberDefinition @\" [System.Runtime.InteropServices.DllImport(\"wininet.dll\", SetLastError=true)] public static extern bool InternetSetOption(System.IntPtr hInternet, int dwOption, System.IntPtr lpBuffer, int dwBufferLength); \"@; [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 39, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_SETTINGS_CHANGED [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 37, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_REFRESH "
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command and Scripting Interpreter: PowerShell
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7496
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\0minz5t3\0minz5t3.cmdline"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES8601.tmp" "c:\Users\Admin\AppData\Local\Temp\0minz5t3\CSCA2017A3E12154497A76F96C487A2F67F.TMP"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe run --path C:\Users\Admin\AppData\Local\Temp\v2RayTun\connection.json --port 10809 --asset-dir C:\Users\Admin\AppData\Local\Temp\v2RayTun
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe run --path C:\Users\Admin\AppData\Local\Temp\v2RayTun\connection.json --port 10809 --socks --udp --asset-dir C:\Users\Admin\AppData\Local\Temp\v2RayTun
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5840
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe run --path C:\Users\Admin\AppData\Local\Temp\v2RayTun\connection.json --port 10809 --socks --udp --asset-dir C:\Users\Admin\AppData\Local\Temp\v2RayTun
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4412
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              powershell -NoProfile -Command "Add-Type -Namespace WinINet -Name NativeMethods -MemberDefinition @\" [System.Runtime.InteropServices.DllImport(\"wininet.dll\", SetLastError=true)] public static extern bool InternetSetOption(System.IntPtr hInternet, int dwOption, System.IntPtr lpBuffer, int dwBufferLength); \"@; [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 39, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_SETTINGS_CHANGED [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 37, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_REFRESH "
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command and Scripting Interpreter: PowerShell
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7996
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\quduzfwk\quduzfwk.cmdline"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6384
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESB6E5.tmp" "c:\Users\Admin\AppData\Local\Temp\quduzfwk\CSCBCE52BF91142492FB23DF5A6E5A8B6E3.TMP"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1800
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe run --path C:\Users\Admin\AppData\Local\Temp\v2RayTun\connection.json --port 10809 --asset-dir C:\Users\Admin\AppData\Local\Temp\v2RayTun
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7416
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  powershell -NoProfile -Command "Add-Type -Namespace WinINet -Name NativeMethods -MemberDefinition @\" [System.Runtime.InteropServices.DllImport(\"wininet.dll\", SetLastError=true)] public static extern bool InternetSetOption(System.IntPtr hInternet, int dwOption, System.IntPtr lpBuffer, int dwBufferLength); \"@; [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 39, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_SETTINGS_CHANGED [WinINet.NativeMethods]::InternetSetOption([IntPtr]::Zero, 37, [IntPtr]::Zero, 0) | Out-Null; # INTERNET_OPTION_REFRESH "
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Command and Scripting Interpreter: PowerShell
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8932
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\mzivubkk\mzivubkk.cmdline"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6444
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESBB3A.tmp" "c:\Users\Admin\AppData\Local\Temp\mzivubkk\CSC45BE437EE54C4094B71751A29A9E9830.TMP"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5660
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\v2RayTun\xraycore.exe run --path C:\Users\Admin\AppData\Local\Temp\v2RayTun\connection.json --port 10809 --asset-dir C:\Users\Admin\AppData\Local\Temp\v2RayTun
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3700
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\FlyFrogLLC\Happ\happd.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\FlyFrogLLC\Happ\happd.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:8020
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\FlyFrogLLC\Happ\tun\sing-box.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\FlyFrogLLC\Happ\tun\sing-box.exe" "run" "-c" "C:\Users\Admin\AppData\Local\Happ\config.json" "--disable-color"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3076
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\FlyFrogLLC\Happ\Happ.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\FlyFrogLLC\Happ\Happ.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Unexpected DNS network traffic destination
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4092
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\FlyFrogLLC\Happ\core\xray.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\FlyFrogLLC\Happ\core\xray.exe" --version
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7328
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\FlyFrogLLC\Happ\tun\sing-box.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\FlyFrogLLC\Happ\tun\sing-box.exe" version
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7948
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\FlyFrogLLC\Happ\tun2\tun2proxy-bin.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\FlyFrogLLC\Happ\tun2\tun2proxy-bin.exe" --version
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5084
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\FlyFrogLLC\Happ\core\xray.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\FlyFrogLLC\Happ\core\xray.exe" --version
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7412
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\FlyFrogLLC\Happ\core\xray.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\FlyFrogLLC\Happ\core\xray.exe" -test
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\FlyFrogLLC\Happ\core\xray.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\FlyFrogLLC\Happ\core\xray.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Modifies trusted root certificate store through registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Modifies system certificate store
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7552
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\FlyFrogLLC\Happ\tun\sing-box.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\FlyFrogLLC\Happ\tun\sing-box.exe" version
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5428
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\DrvInst.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    DrvInst.exe "4" "9" "C:\Windows\Temp\e5d9e5032deb50af48de9e1da456e6db166a9b5889ba237f276f872530a0b798\wintun.inf" "9" "45ca79627" "0000000000000178" "Service-0x0-3e7$\Default" "000000000000018C" "208" "C:\Windows\Temp\e5d9e5032deb50af48de9e1da456e6db166a9b5889ba237f276f872530a0b798"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7964
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\DrvInst.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    DrvInst.exe "1" "0" "SWD\Wintun\{3B253A93-D5B0-AA01-E5EA-7BE7744FEEEF}" "" "" "46cb3c78b" "0000000000000000" "34b0"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5560

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        e6448f5.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e6448f5.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6a451847926bf093ae2ceadcc405e516dce7db6c1fb77c76706747b19415c123
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        e644901.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e644901.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fd25202df40e863964317dcb94349ee59d48385a5d511d888bb22bfcbb337f61
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        e644908.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e644908.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 20434f5492bafa8e5e46f4a796a216e34c4d78d60e118435c0581d726e0df762
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        e644917.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e644917.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6023566b7d8e65c22fe6092f5c12b9887400594cfa3eb7bd720a9a1c74f5230c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        e64491b.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e64491b.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cd6e7b829bde20ff9ebe87fc1f4fed1f19ba6be5527fe45675b42be665f8b4f6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-79TAA.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files (x86)\v2RayTun\data\flutter_assets\packages\country_flags\res\si\is-79TAA.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 173B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 50bdf1f79d20003d6fd36715918d340384e19aea4d79240980dfc21875419eb3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-FC4C4.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files (x86)\v2RayTun\data\flutter_assets\packages\country_flags\res\si\is-FC4C4.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bc0ae11b614339ce70976762c29059fe8b9bbf3ef810f05fe2862ab6d787b3dd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-QK6R3.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files (x86)\v2RayTun\data\flutter_assets\packages\country_flags\res\si\is-QK6R3.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 173B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5448eb004a2d751685a6e2157fad9bc3fdd6fb7a603703201f4dbcd550fb9186
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        v2RayTun.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files (x86)\v2RayTun\v2RayTun.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 281KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 da99bf96af348a46978f9fd8042cbb60615e77a06234edfcd4b4058d2595045c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Happ.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\Happ.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10.3MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0ab4ae5c45e0541c957d2a7c0e576381553a1c70e6b069743dd23e33f2898b30
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        happd.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\happd.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3.4MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 99dce22eadac55c5dfbb3bfd92820026951cc0f724403113bdc8577e593fdfda
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9bde42438a2f0178ba8c90156c738a4a5fb80578ca70ff6e82810d57d74e7a3e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-1YN16RXC12.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-1YN16RXC12.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 83B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8285acc7fe450d3a72eed1432566f7aa90af7ee33a154aa7402dc707018979b7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-4EQJ5H048R.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-4EQJ5H048R.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 101B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 02530ad19a6a050f2813c5d801a9fe75c9b0fbf4508491c6abb1bbdb72b28734
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-4LDO3BZT59.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-4LDO3BZT59.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 698B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 caf54e636473e19db45d86b01fb79142bf28e916030ec3b60272a14643313460
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-4WKL1AU8Z4.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-4WKL1AU8Z4.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 184B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b74cf0894a7b42aae0630586e321e3cea282724a16e1ed40322cb39014c0041f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-55U1O71T4G.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-55U1O71T4G.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 92B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4a812392a115a37694707507b84dc3c789fb3880c298cce2a7d31f1d837f601f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-6MOGMP1P85.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-6MOGMP1P85.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 337B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dbbd1cfbfd6b58d2f6e3b91d388844599b003198cb064d17c00f5ba321dffb75
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-8XSUUIAM93.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-8XSUUIAM93.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6c6b7c12d0a9080109e8cf1e5ba23a535cf195a85a01fe9bb4a1f66cdda9657c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-9EOS5BF2UH.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-9EOS5BF2UH.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 164B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e2ee0ed4ccf6d0e468b02b83598f0487cc3167d508c6e08e6490b925d8305474
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-9HJHN2RBC6.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-9HJHN2RBC6.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 211B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d712f165711bf5e0f265607705a4e83452c8fcbc59e106238663664f791f28e5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-9U1OX4GE7P.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-9U1OX4GE7P.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4c9186092eabc6788e704b074423e009cd3b80a8d5de0bb1ada6f7599f91bb9c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-9VSGHHSYAW.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-9VSGHHSYAW.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 166B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7b24c72a494b81a4e61be17014a8c5bfa2dfd457fbff4cbec0845793d3fca0b4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-AM2RE2WYA0.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-AM2RE2WYA0.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 04ef55069cbc71bcafcf10807da3e0fbf7db7c205bd6dd88156b30ee0c6f1af1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-AWCQMR8B7E.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-AWCQMR8B7E.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 233B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 96248a359822f167a7195dd2e4c93099701c65c93d470157d1ebab9164b086f3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-AY84VDUCA3.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-AY84VDUCA3.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 129B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8fb94be57391e3b4247b3ea1fa38be1a36adb36b3ae4d056f84c441afd801968
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-B51SXZPGDM.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-B51SXZPGDM.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 257B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 507fd11cc0ef9c76294413ec13a078a70771235a6379a8e285a8b27b7a7776d7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-BUOIIMNL27.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-BUOIIMNL27.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 167B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6d584df93b6785277a090e3c2d46ebba057d262253dfcebbb81585a9f48658c1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-C4U26E7KPB.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-C4U26E7KPB.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 210B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f85b2a74823a54b1d904d44b638204ae78301a91eabacfc1dc7f07508c384057
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-D8X9ELU8VZ.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-D8X9ELU8VZ.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 356B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9b2993a8b96673393b17ec53d71cb5862eb2a44ba9fd3c5f465a0bf4638a4b9d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-E0RWV8CMUV.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-E0RWV8CMUV.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 442B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e04fbcc696a2ea2a326a1b7bc57f25a0e1b33091e588889da5a9d7015c595022
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-ETIAVTMZG1.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-ETIAVTMZG1.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 120B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dda8d0d5444670f0a82f7b7aabf1f771d94d0c418f15be75b120137758932c7a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-FY8FMH2F43.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-FY8FMH2F43.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 177B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3c5fafbc237f9e5f72829cc66a37dc81bcb531b9f3aeaee91a55469fd7de5073
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-JH0GK1KBMA.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-JH0GK1KBMA.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 745B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 46b24c8416c8b349a455d78475d8bb99ba260fa6ea3b722e15dc312bcd7db53d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-K1ZLW720DM.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-K1ZLW720DM.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 118B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 33f189b55282b1a6d904fd2424cdc051fbd3af17b942899942fc6daf46280146
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-KXW6IA41LP.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-KXW6IA41LP.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fc52e4eea80062b28175e6df1cebb5abe679e26035efc515184074593309bed9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-L918A4046Q.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-L918A4046Q.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 125B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0941ec5da06f1cafe91004c1b035997609ab1eef1f39a9ac5f0bb558dd8f93eb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-N76BVFKPBY.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-N76BVFKPBY.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 417B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 239bf3f261e5ee675b27e546fc9dfba9ced5e2e521dc112df22389c1227b8c1a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-N7MQKHEZKN.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-N7MQKHEZKN.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 875B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6001207502a85ce95a405c9100e575994dab92e04fd28c1c66eefc69c52dc3ad
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-O1J16OUJ6K.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-O1J16OUJ6K.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 687B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d1424af3aeb805bca2375f3c01c885525be4561065ff1118fd5e3fcde63d2757
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-O6FFGO875H.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-O6FFGO875H.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 232B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5485c7bd8be92e5a94e08bb94090fd6128e063114af8679482154398ea4b8c8c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-OJ8UJM6NUD.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-OJ8UJM6NUD.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 150B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 50e45c5bc1f41a265ccdb7106571d751b4a875577d19c5409009fcdd0e82cfc1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-P6PUQMUPMG.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-P6PUQMUPMG.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 183B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b2e9b5268db1594656d584a35cc7083fcc5fb41b6768dbd7448054d1904d780d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-PDWWJ55GAU.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-PDWWJ55GAU.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 493B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4d5d16a9ef3db072309d531e11057076bfa7b03f4f47f6bd8a7d89d1fe0bd39b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-PZ6AUJGDUW.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-PZ6AUJGDUW.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f38227a12d179e016f9b2696d3dc8ec4c6c96c275cfccbe839dd5ba0c51d9b26
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-Q8DURHWPZ4.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-Q8DURHWPZ4.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 130B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dc8861aaef091c7030bb95734be7ca69b41f64440368e823ee02df899cfb452d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-QL6RCVH7WA.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-QL6RCVH7WA.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 317B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 237ff3516492b63b2ed41562ea6e3b983f277a2375f12d427a0a7769cec15043
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-QZKXEVQUOH.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-QZKXEVQUOH.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 118B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7109a067ad00c3cdd31365c76ea8e24264910fe9b1350a292fc00dd7d2b97e5b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-RWOTSH4FCC.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-RWOTSH4FCC.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 935B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 60f757e557455aef99ad54ae55c3e8d18347fdef0bdc5af176055e154e7b8f38
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-SRB6EOINFR.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-SRB6EOINFR.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 231B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ef0d766bdcffd4ba13bbe77dd451ce94e79d38c6b11e6db761aaa352ceae7d36
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-TZDD5MD7AT.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-TZDD5MD7AT.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 185B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 30544b5f1ecbc6ff7dca896b1493ee57864d121cce3cf63e274ca0a1ae075c53
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-UG6O4MLVYO.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-UG6O4MLVYO.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 171B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 840b43337d232f04aed0b3209a43a0b25bb5f4bb53920620c7e0bcc155743daa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-UQSUJI9LRF.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-UQSUJI9LRF.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 683B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 349cb567bded99187024758d0cb9cda60b55227a4d7fe1763f7f41753f692d7c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-W9X82SJV1V.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-W9X82SJV1V.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1cab68c7c8cf21d2f7a721eaf3e254899685deecbc2b11c2198183c2f19f3602
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-X29HFED10D.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-X29HFED10D.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 310B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4a094c584b7e0dc23291d778861ead37d087ef0e43574e8d43bae27239648298
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-XQWRJ06P8E.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-XQWRJ06P8E.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 305B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2a9ce212f759efaee2773d7f22e13dd91c5da7dd0fddba2882b10e7d03bd4a5c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-YG63K118IT.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-YG63K118IT.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 26c58314abbab9420da568696af5ff36287b0e569eb15d2c35904a1c7d9a32d8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-ZFPH9XWR2B.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-ZFPH9XWR2B.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 177B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 340dfb8f5d90ee5d986eb4b3570a2b3481ca50048a1a5eb38144e13a598d9bc9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-ZKPYSSX9EZ.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-ZKPYSSX9EZ.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 977B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a547ed23a7f28777996b58b610ed9ac1c0500042e0d70682f893a8508709717d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-J3HQPFLIYG.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\is-J3HQPFLIYG.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 215B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-0FWEHTI2E5.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-0FWEHTI2E5.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 178B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d7585c904a07b57038f7937cd19b518b2ca465eefc3aa176f0e23ff0679ea942
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-0MTHWIPIY8.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-0MTHWIPIY8.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 231B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9a91628cce9d93e0943532402060b64790218c391bbd3ea7367c29c0e266adb5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-3XI9WOEC8P.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-3XI9WOEC8P.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 234B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f823805fa4d01e7e4584cd2630a9099eb9720419fcead1be34888d32baf94bab
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-4WR5R79KSC.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-4WR5R79KSC.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 780B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7afea33b4b6109fccad617fc05ba2ffc422bc60b02e805303e129ca9954953a1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-5SBHQ0EIA6.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-5SBHQ0EIA6.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 628B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7437b32e1edf24ab5701933db00909c7d7db4b6870290bbc7e4735a4fc7981b8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-6I6A5TWRKF.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-6I6A5TWRKF.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 528B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2d54781387c4398487a62b8395d6dfbaf4b37df0b023d4346d1983b28175596d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-71R95I7QFS.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-71R95I7QFS.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e2af8372551f3af475ab36589ee502bbd520425f5a8ac6a55762ab1a9f4650ee
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-7I5NMSWFRK.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-7I5NMSWFRK.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1004B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9f94e7c42c285b0607e3e41c8a523f11e00a3b675bd2a9d93c7c12e476a91587
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-8I2LO92KCX.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-8I2LO92KCX.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 513B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3bd1cba7b0517257de59ea097e188ebaa706b7bbfca338a29ddbec2d944c5567
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-9MS820T9ZX.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-9MS820T9ZX.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ac3911723fbc5dbd7831c4049036f4f9d5b290a52164143d9e4846fc3fa5ceb0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-A9DPKKCV5Q.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-A9DPKKCV5Q.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8f31e9f6dbe509a60f161d49580499f27e953693b7a8705b02a0bbc9d256ac4e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-AW0BB09RK3.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-AW0BB09RK3.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 68bb0080f05b810c785098bddb9ce7b9949e322a374c65b4c7ad99ac107a10be
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-BBNR8WXQL0.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-BBNR8WXQL0.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 206B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9bef876bbd6193e05e5e0ad50706ee454d1ea71da782a6f9e9bf8e5e71bb920d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-BMLKTFSWQU.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-BMLKTFSWQU.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c0f2676c1b75d123bb19cc6fbfcd067d823a7693cf89fecf73c32a3cb934e9a0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-BZQNLSAQXS.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-BZQNLSAQXS.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 226B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5ce6134336919f7288d5f5312772890ac680e324d47e6552f523cc71c25a5336
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-C25EN5UTYO.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-C25EN5UTYO.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 438B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b690ff71125077a35907ee9df97bb986fbebb2ee82b1f443d86e25fd15738204
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-CK0BEIJ9WP.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-CK0BEIJ9WP.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 31014ee2cc775bb62207d6057640cd89497435529c0b147736b8fa10059de132
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-CS6YT65GD0.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-CS6YT65GD0.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 166B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e75ed5a1b1f028cfa665127e88e1a7078fc91f91775bf890365a8500d9869db7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-D0D9VBGMZO.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-D0D9VBGMZO.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 281B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0537d3ed85192a87eda61f3a3232200881d11b11d5b566420bf9efd924442b5d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-DUFIPMT2TX.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-DUFIPMT2TX.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 417B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 827bd8deb24f977506b8acf20c482e1f448e8504e8de29ab784a3f2933f0dc69
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-E2RLHS6M0E.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-E2RLHS6M0E.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 450B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ff909958af7cef5fa56e5b70f4fcfdc939646eb97df3ddb71dcecae692c75abf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-I9K10MJP43.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-I9K10MJP43.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 222B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9ad904d8e8eb37344bcdde47be90a9271e908e4568c6dde2f7d396ca9e1a1a64
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-IH60175V6T.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-IH60175V6T.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 590B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5d2c7b18155db2f3583896fde0addccc481a816a9b36531b201bc5e31bbb35ab
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-ILILQFSCDA.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-ILILQFSCDA.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9bbfc57d26160aa9fdf885358fc89aaae9258419be1fa0a60544d23e4c52a3d8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-IP0LS7HMOY.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-IP0LS7HMOY.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 244B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fe96c7fddd6a33588dc4bdd2881ac3e972d6c019be15d595f5668e059ded738f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-IWNDW87Z3G.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-IWNDW87Z3G.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d4a8c508e022525049f8a331e1b3f99ffabe486798781c9c2a06f18fc16cb395
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-JKTCSL9IGA.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-JKTCSL9IGA.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 176B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ffa7ff4e1328851e3f65e0f07c5d07e6a0b6b3c564a22493a0e53e733a4339c9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-K5Y2WL5THE.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-K5Y2WL5THE.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 131B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 95bc4afbc55494f30ec3553ae051c73b535e9aad45426eb373cb788f25f88caa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-LOJ2B9O66Z.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-LOJ2B9O66Z.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 128B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3235f1b7e4fa0d316b1aa5c3b92ea6586daee896e43222f648670e8fa6d71368
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-MBXEYR2B1A.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-MBXEYR2B1A.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 34a47dc79f253f27a7757d747f3402559294fe080d1409890ffaeaad1a3d7b1e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-N5MHG0LJYM.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-N5MHG0LJYM.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 343B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d0f2f23ce73f6559fa3a61f4e7c068875e321dc6aca3a0eb6a423ae94054b92a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-PT92EPSP8K.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-PT92EPSP8K.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 327B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5f81a72696418ba2acca392d8aa5ddc94a2b873275d8ab17fb64ef3b6d6f981a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-QATM9L0MGU.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-QATM9L0MGU.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 389B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2bc47bd96c56063f0708b773931de60869bcc74858e348188813262d6ffb1b02
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-QQQ2AI48PI.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-QQQ2AI48PI.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 164B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d5a68925a3626dabc5a773663cd0134ae03c908c0c8adb4381578078c3fc056e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-R4MWJT9NTU.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-R4MWJT9NTU.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 932B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 32297750f17ff2595f94c94ffe379f1d400c80c0bcb145bda6565e0165727a37
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-RQRZ9CHWU3.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-RQRZ9CHWU3.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 caf1dc9e14b96d649fbc00a5210fbd0e209fee56c724ba746ea7a22edf73d5ac
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-RTSAH4TXMD.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-RTSAH4TXMD.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 180B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6fd283b8c8f1c96a7b0084a475dc0915cc7db16c938858b6c2fc42a2c286107a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-S19GACV0YI.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-S19GACV0YI.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 992B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9b1916e06dd0605a1cb61052de50cda49723e08f280dfce484b8b06d54cb1a17
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-T2G9HNZSGW.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-T2G9HNZSGW.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 129B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 233a82176ffcd3c6d906b605bd08e413347ee9df6b09ad746f84469116a54811
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-ZPP68GRUXY.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-ZPP68GRUXY.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 215B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bfdd4f412de35ced17a26b6090b41befbf11e97578a244798a475c35f1b81685
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-ZT15L4Y10N.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-ZT15L4Y10N.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 180B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5ad959df793d952cc1b275096ee13eeb553dc0357caa2efcf2a4350363a6d363
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        spinbox-indicator-down-icon-up-hovered.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-down-icon-up-hovered.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 138B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6291f9c78c77f1fb89dd0b43c51daa98c2ab6c98ca737c2ef1f61f1f201b4514
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-NVNKTH2BRW.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Imagine\is-NVNKTH2BRW.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 851B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 529300dab184b8b597775933d749e973a37377c9e15fe295ea232204a0865e3b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-XS9HA5590G.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Imagine\is-XS9HA5590G.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 841B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bfb44b28be8636cf5fedd504b41ded92dde35350a9e437f61f327e413cb18f07
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        is-UC23T3D9DI.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Universal\is-UC23T3D9DI.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 981ab6db297e985d37b6d83f26801075ec35abeaff38c28adb2e7255ceae1a31
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        happd.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\ProgramData\Happ\logs\happd.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 550B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d285ba215c8379d1aa27e973f4e1721cc0070fca5ed80c1ce444e26f488b42fc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ReaderMessages

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 36KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b1b77e96279ead2b460de3de70e2ea4f5ad1b853598a4e27a5caf3f1a32cc4f3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ReaderMessages

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 56KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 111dac2948e4cecb10b0d2e10d8afaa663d78d643826b592d6414a1fd77cc131
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ReaderMessages

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 64KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7ec4b79875febd4c1b9bde62dff3669e00fbd89deb45c8d5cb822a098dab3c11
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        F0B2CB9C11CFD091DCC143A9C3B857B3

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0B2CB9C11CFD091DCC143A9C3B857B3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 657B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc65
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        F0B2CB9C11CFD091DCC143A9C3B857B3

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0B2CB9C11CFD091DCC143A9C3B857B3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 304B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bf1ea1b7c606adc2550d383dd381c2b9b948e49baaa014de13d3c3ca4a4d9f89
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        F0B2CB9C11CFD091DCC143A9C3B857B3

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0B2CB9C11CFD091DCC143A9C3B857B3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 304B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d3ec1866d89ee6dbbbd18e4c9341f3a4f8a4513c2dcc95453355d427201a719b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        SharedDataEvents

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9e15b02820b83b4a6e40ac354c1607c0a3e22472457835d666c087596aab2844
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000007

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000009

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 82KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f2583aafb9fc2980cb1258e8c3793d0742d300a8e39fadcbfd3d8e08d8ac1d24
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00000a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 123KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 aaa17874f0e10d44cb7eeb936ed3fd6cd9d5f4a5568a6b4e3f42683c59a72eda
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00000e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 513KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6124e6ddec3ab45791bec06bfa2ec65ce8133544819f9114b60aacf13713c006
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000013

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 570a680a3395afa889c2b91304f42031c7a87e6772a1a3e51cee49e3b157dc1a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000014

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ef5987a65de60c15084f58eb14943fe3d9ff412f5f67134dad7b0903ad02503a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000018

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 61KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6896a9dc57a2cec40233664a3eb0e5818dcc02c93dba76a147f0be381f269f65
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000019

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 52KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a7eb32a5531f42dabecd9547b0c1ae9aa48122e326e2e7f202ffef8c86bc7543
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00001a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 69KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6cb3aac42ef05678eb1c7520cd19fe7227e4f00ac5562f590aeaab4dc61776a2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00002d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7476553a0c442bad7a88d2fddaa49acb67819516d4db4db372cff48112cd74e6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00003d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 119KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 52d1dd3d023191d38a2e971dc23daa8ebf0d9bc9601906942efd1160b1157504
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000043

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 94KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8d08b67c252083a37cb7295ba5796d73c6e205c7aabe133d9cb604b73ea5985c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000044

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000044
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 73KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5f66ef35f19e1bc8bfad52e2139ad510998e759dbb99d825f7876b8c3cdbdee6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000047

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 61KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 405a13b02b86f8bbf4e4e2658fe5ad94e4cc26afe6ed90033ca4b33c41750b24
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000049

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 158KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00004a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9645681f2b1c63c1802d526b68946a335d29997927bd25ea13304109f90edf91
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000051

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 91KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 de8279221cec92147e41e962754da2e9667fe862dc94f192566fa7bec3d11f11
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000052

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000052
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 102KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ca1384cb59f04dad25ccc5c40a28b2c94dc1dbfa14692b2f8f4efc08f4ba48cd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000054

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000054
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00006d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 97KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6e9619cbffb6bed8cd7172c3bfb896f170dd8aac932a3f1ff11bc035b9d53e6e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00006e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 100KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1612ba9b45896783e67ff0421120e16215cb84d6874c5a23d27ee0de058d057d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        08449e145c2b7790_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\08449e145c2b7790_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5b6fb60808c8cecd49c6147cedecb42a27699dbc2885b6060e7f494fa24d5153
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        25e32d54b3b3f429_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\25e32d54b3b3f429_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 276B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9318abc8959c2038e340ed30dc0b85fc371e5b2eee6a608fc7c0ae4763a1a251
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        336a68eaaf209f48_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\336a68eaaf209f48_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 309B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 769b077d5c290b106dd528973480832fb703515895dea208e64484039ab8dbcd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3e7d411cfe177f10_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3e7d411cfe177f10_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 469KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5a52b7313800c9d13119effb2758e4c85900fcac2a71da22570c48662bef7f67
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4bdd1c04cacafeba_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4bdd1c04cacafeba_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7ae53b82cffe0f7d5b3d1480aae6c93cb0d408631091e71973849b887bc97473
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        707f42972bc1305e_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\707f42972bc1305e_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 312KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dd068c77b4b3d70482e733b6514f293a0be4093be3bf321f01111199ee715471
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        735d36d31986b2a0_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\735d36d31986b2a0_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 476KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 51f53da4eeca5a392b67197d84b33219e0a0d8869796deeddb396a6c13528c71
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        bd29003c29ce6273_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bd29003c29ce6273_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 58KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e63ca63e71774261fb21f4384903ee6a5d32b3a9982596113d6abd0f9da7fae8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        d5b39ba0c2fcb1c8_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d5b39ba0c2fcb1c8_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 301B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e2441ea2e075ce9bb0922a917d02a060ce057708748fdb5dd08632d9cf76a24d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        e3a70359d9aa4eee_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e3a70359d9aa4eee_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3d5f65ec282105674f7f27c2c13f1057a8c74ed87ed4b53df1ef47793c27c1a5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        eeff083ec481d739_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\eeff083ec481d739_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 294B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 026ebc56961ab5b266bc44af58c0553d32ac1cfd0525fa868ea04e8ec3aebec1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        fe8b7ca011cc9644_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 301B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 eb63832c99e5f9f2bfd68b6b67ac7eca39ffc3c885c17203ba310558e7298904
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        fe8b7ca011cc9644_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 261B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 40eb06e64dd17bfb98d30a1548ae59762f82867231460c42af21cd5da6edbc32
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 08d123b7b131832dcee62e2da5944714f788fef3824ce3dd794822b7e4d22dc0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c95a93d750104e44e394b3602c12ada9f91f086988d32cb04f12ec898dc4ebbd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cb324b19395d1348a83ab6531d3da894a7c0b49584d1e66a581cb75d82d10a26
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ddf561e7d6bd420d2f4e2d82111e2cca52022e3b2b1331cc252600d203e7cccb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 593B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        craw_background.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 531KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        CURRENT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 16B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 06619ffc6418854464a4a2fc71c7b5593cd9c0875945b51736b1c75e74e66145
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4009fbe6d55170a598a4b4d2250a7c26f1d1a2484f351f379fa211a1477a3251
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 53KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 53676bc60ef23e214c5b17644fbf94d64a9ae1bda03297e6a51b84383152d95b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 160df0c162567a66ee6258f37026c2af3f622bd4fbefcf6af4e902612b02e21a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        SCT Auditing Pending Reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        TransportSecurity

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7780344f4c41afdee9fe0effb907e35f484a29434b5f90358cb74af0bbe76ce5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7a8ee938d0cc35eb01516858b9e2a3804971e2aac32f6d75e0cc199ef21573be
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3c64330c7a2fcac09c804421ba158dc434d1e06d475657379a9c25e771a19ba3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c526163f50766c8f5c1c141557b654024cd93e81bfd40b4a4341c08e9622631b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8200e787c35d75df651723cf1a714d329063f5187ddbf2b3c82bcae058a50dfb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 13663fac03a8378bd41229b07f936fb92fd16a585423713aab2a842a56308529
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c91830adfe4dd8506007d6988a0cbbef7d877eacfaaae383059c35821098090e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 44e3d2d7c79a50b30fdfe842b8b361b30860b335f9e40e1c5bfa803a22003ce5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5222b4c2ca236f22e7c6fac9a862969eb0b7e6936fd66dc2bde8603599da8586
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d8f30f50cc599319aabb45440f4e2a9ef2af3995f45492335a3786df6e5b3f52
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 120ba9ac182d81d52886a2ffe11df4f254ec17c8c1c1a2e5960f979ca27fa78e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8a4679595182f8db2cd2ac361b3a5cdc2a153f861ef6a415904289a86dee896f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c443fddc3b9bceaee5dedd8e9b46470bc675ef73a4460a0a023c96556b295d1b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 aa659f40952fd47c6c78cd5b5a8cc3b6d3840ddb23ea52ffa40e60fff5b63dcf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 69d87d6342f50d6d9fc8c5766b72e93f538b41066176b6ca42d5aaaa68a09f96
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 91945a0ce67d71ddc9a3668e106ecd2fd140c0ea98dc087232451a70887e42d1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8d72cec10cffe08f61ad7399138705dec2f5719ecf86ead3a6efbee9d575be09
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 347b02fec5ac0b89f0b685910b9252150c68e5dc80bba801ca5ab91c3a098d2c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2eda1957593074872346b373f8ac63c766e6064bb239155c4a3a1589ce9fb29b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        logo

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Search Logos\logo
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 35KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7fec884ee636fb2a6394e828755218b4918c3c02bc86b5efcea6eb9ff170e754
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cbba37fe902bfaf79a6cc88dc362f25a72f46291c3457c53c5dd45701ac35584
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 120B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8590ab1b3bc5eece2f21a6a3528d1aeb3ae962c8a0c6cda358c0196eb16061ef
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6f9f3e1b8a3b3a51588147ddd4ef1a5bbada8a300cdeb48081b3d572278431e7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 120B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c8278d49e41d91c42faf102eb5acf970400f3f0289f1366741c2b6337ec09a05
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8657cd6748d81a19b76acb0c86eae96ef4867c608a24468c9d4e609306b9241d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index~RFe6263a6.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe6263a6.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 873b372feacfe4b337b9e42ec69ad6845ad953bfc4722aacfe8db4b6167dd82d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        data_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        data_1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 264KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        data_2

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        data_3

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 87B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fa2ad76b2754362ec9a32c24a767d7739b3de717f8f28f786997d6da0ea50853
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State~RFe6b7acc.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State~RFe6b7acc.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 59B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 120KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9e9ccd77a7d214e9c7c23c1e854ec86b971122494c6dcaa6e59c60c736710f92
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e343175ad55f8b5fc0f943bb697ab58fdde1ea28f8baf951dbe5bbae178f64ce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 121KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1175a27bfd82e2304e1a6c49493201941bf7b25a57b79cb6cd4273c259eaa206
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8fde9ee6f1406f5953e3e4d0bcabebbb3c2bd9bd36f28f79b8c0b12840fc17c5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 121KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9cbe0e73770a1c652be79e349b1842c9c766f41ccf9f2e730c42e5e47ac725f8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d3d644122d7affc777a7acd78538797f1c25fc9cd8f1184164517e2d3e2deede
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e7fe25c3ad2973acea97105ade4e626c404857f3118c2061abcaaa261edabe14
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        StartupProfileData-NonInteractive

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3674b90c1caf1df47ef6cdfcff99b7987586cab16fe77bbe8318ca09a0cd9a77
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        __PSScriptPolicyTest_hqnoemv0.ysd.ps1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_hqnoemv0.ysd.ps1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 60B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        mzivubkk.0.cs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\mzivubkk\mzivubkk.0.cs
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 332B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4bb21ed9480dd95753017979955711560f6a655938d180b33f0c5b2fa1684aff
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2348_628865779\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 450B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        connection.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\v2RayTun\connection.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 53KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 af001b0276ae27dfbe60f96bbd0b58a2be083e5c5fac3b0ae3c2bf42ba0d87fa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        default.exc

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        shared_preferences.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\v2RayTun.net\v2RayTun\shared_preferences.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 106KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 52f7bc240feb0f8b56c2eeb481b45da911d1a73a968a6e1b8cad527eb0c499fa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        shared_preferences.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\v2RayTun.net\v2RayTun\shared_preferences.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 348KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 63d1ea3f7e7b07730c6345c760989131b07e2e035c84ce66f6193cbfff7c0c00
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        shared_preferences.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\v2RayTun.net\v2RayTun\shared_preferences.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 734B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 75f8b8e18f3ce752236b2cbade1efdac3f271a2da2facdd2992b220a07ec3940
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        shared_preferences.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\v2RayTun.net\v2RayTun\shared_preferences.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 419KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b93e236decc51348ef686dedcb9aa7443b8ab5011eb05229984839fd2ede4156
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        shared_preferences.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\v2RayTun.net\v2RayTun\shared_preferences.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 348KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1e10c5c4e5d2615d1e68c58ecf963c14cf23b55b0df0f3647c0cbb22cafcb0d7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        shared_preferences.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\v2RayTun.net\v2RayTun\shared_preferences.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 60B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b65c5d51156e4f5ac30bc565a22eb7bec9e0722cb063f294e45eada39d56a0a3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        shared_preferences.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\v2RayTun.net\v2RayTun\shared_preferences.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 218KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6b4cca57b97a986b1561c50fe8ef75234d8838e019dd8e1450283fabc07e9204
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        shared_preferences.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\v2RayTun.net\v2RayTun\shared_preferences.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 218KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a3643605afd492be0a6fca80f504d43fbdbe10935fb6eaa81f7f8935241e719e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        shared_preferences.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\v2RayTun.net\v2RayTun\shared_preferences.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 419KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4be75e41527d09f8d1d3b324a857eba92929f4bcaa897d5f3476e96a9c02d4cc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        e644902.msi

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\e644902.msi
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 208KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 47cceb26dd7b78f0d3d09fddc419290907fe818979884b2192c834034180e83b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        wintun.inf_amd64_8ed20477a29aa8f7.ini

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\FileRepository\wintun.inf_amd64_8ed20477a29aa8f7.ini
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 415B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 24291b58ddee08aa7b927fc8ae2e4f9b813a06b5c1c226a89750098eb6faa1ee
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        wintun.inf

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\e5d9e5032deb50af48de9e1da456e6db166a9b5889ba237f276f872530a0b798\wintun.inf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0181e3af3e45efd36fa74de8245103c2c93ffc01e896dd4235f55d89e26d64b3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        logo.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{32ED2991-5E56-428B-A03D-646098639C7B}\.ba\logo.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        VC_redist.x64.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{32ED2991-5E56-428B-A03D-646098639C7B}\.be\VC_redist.x64.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 670KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 270fa05033b8b9455bd0d38924b1f1f3e4d3e32565da263209d1f9698effbc05
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        wixstdba.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{3D858B18-51AB-45DC-9624-5E2BC96E0A55}\.ba\wixstdba.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 215KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        license.rtf

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{935FACAF-9CC1-4CC8-8B17-17D76F846EA6}\.ba\license.rtf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        thm.wxl

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{935FACAF-9CC1-4CC8-8B17-17D76F846EA6}\.ba\thm.wxl
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        thm.xml

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{935FACAF-9CC1-4CC8-8B17-17D76F846EA6}\.ba\thm.xml
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        wixstdba.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{A7127798-1CED-456D-84FA-AAAD720BFB46}\.ba\wixstdba.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 191KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2708-1081-0x0000000000400000-0x00000000004BF000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4496-3346-0x000001A6D8A10000-0x000001A6D8A18000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1173-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1181-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1182-0x00000000762F0000-0x00000000763A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1187-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1188-0x0000000074560000-0x0000000074585000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1190-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1193-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1197-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1205-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1207-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1208-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1210-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1215-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1216-0x0000000074560000-0x0000000074585000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1218-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1221-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1223-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1224-0x00000000762F0000-0x00000000763A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1231-0x0000000073E40000-0x0000000073E73000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1233-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1243-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1248-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1250-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1157-0x0000000076570000-0x0000000076652000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1164-0x00000000762F0000-0x00000000763A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1196-0x0000000073C50000-0x0000000073D78000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1238-0x00000000762F0000-0x00000000763A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1244-0x00000000762F0000-0x00000000763A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1251-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1252-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1151-0x00000000756C0000-0x0000000075C9C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1137-0x0000000076F30000-0x0000000076FAE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1149-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1146-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1179-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1176-0x00000000762F0000-0x00000000763A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1170-0x00000000762F0000-0x00000000763A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1169-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1167-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1161-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1155-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1241-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1237-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1230-0x0000000074560000-0x0000000074585000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1229-0x0000000074F30000-0x0000000074FB1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1201-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1175-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1163-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1133-0x0000000076F30000-0x0000000076FAE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1150-0x00000000762F0000-0x00000000763A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1148-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1141-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1144-0x0000000073E40000-0x0000000073E73000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1143-0x00000000769E0000-0x0000000076A05000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1142-0x0000000076F30000-0x0000000076FAE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1139-0x0000000076F30000-0x0000000076FAE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1140-0x00000000769E0000-0x0000000076A05000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1138-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1136-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1134-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1147-0x00000000769E0000-0x0000000076A05000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1145-0x0000000010000000-0x0000000010061000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6824-1135-0x0000000076F30000-0x0000000076FAE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/7496-3537-0x000001A0285D0000-0x000001A0285D8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/7996-3572-0x000001BD4B9A0000-0x000001BD4B9A8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/8404-3331-0x000002AF27D50000-0x000002AF27D58000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/8404-3321-0x000002AF27D60000-0x000002AF27D82000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/8932-3588-0x0000012F958E0000-0x0000012F958E8000-memory.dmp