Analysis

  • user interaction
    yes
  • max time kernel
    1800s
  • max time network
    1803s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 14:04

General

  • Target
    VencordInstaller.exe
  • Size 9.9MB
  • Sample260714-rda5eses5q
  • SHA256 dc0826657a005009f43bdc3a0933d08352f8b22b2b9b961697a2db6e9913e871
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Drops desktop.ini file(s) 3 IoCs
  • Enumerates connected drives 3 TTPs 48 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 9 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 6 IoCs
  • Suspicious behavior: LoadsDriver 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 58 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\VencordInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\VencordInstaller.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:5284
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:1216
    • C:\Windows\system32\sihost.exe
      sihost.exe
      1⤵
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4296
      • C:\Windows\explorer.exe
        explorer.exe /LOADSAVEDWINDOWS
        2⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops desktop.ini file(s)
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3688
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe"
          3⤵
          • Checks SCSI registry key(s)
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:3388
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffee044c728,0x7ffee044c734,0x7ffee044c740
            4⤵
              PID:6052
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1912,i,1207153581125546951,1628537554045858320,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:11
              4⤵
              • System Time Discovery
              PID:4700
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,10465712121914899919,10274381304620353028,262144 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=1992 /prefetch:2
              4⤵
                PID:1272
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2336,i,12944631602091137802,1921356844053239145,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:13
                4⤵
                  PID:1768
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3292,i,5146910642618409977,16318888854190452653,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:1
                  4⤵
                    PID:4408
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3320,i,7817168612939389683,8661638879261632900,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
                    4⤵
                      PID:480
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4744,i,16776975405324240834,16100173324392335098,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:1
                      4⤵
                        PID:6064
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4924,i,5710943026144566447,14116117688480504855,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:14
                        4⤵
                          PID:4268
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4936,i,9259181626947585745,15630009487705395831,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
                          4⤵
                            PID:5264
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4940,i,10142792240981966259,3921460476314775826,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:14
                            4⤵
                              PID:3512
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,16615420501445065354,16638411372104784313,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
                              4⤵
                                PID:5008
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5512,i,6477346969813990970,15240679032656737705,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
                                4⤵
                                  PID:4024
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5540,i,13499251042392615860,14692284248007860200,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:1
                                  4⤵
                                    PID:1268
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5848,i,3512535312207227602,16245431210812755355,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:1
                                    4⤵
                                      PID:4644
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,15003949120472347474,3225308329034203370,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:14
                                      4⤵
                                        PID:5224
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6028,i,5504819704595995375,5789374778119641841,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:1
                                        4⤵
                                          PID:3412
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5824,i,12415768755032236865,11967183389744902211,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:1
                                          4⤵
                                            PID:5336
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5812,i,2177301602119640378,3443699189076801930,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:14
                                            4⤵
                                              PID:5568
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6160,i,2030310395102644985,8971889150625770484,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:1
                                              4⤵
                                                PID:4404
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6172,i,6790372261758287437,8178181178326140118,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:1
                                                4⤵
                                                  PID:4596
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5756,i,3883372045080514125,2592164288452475676,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
                                                  4⤵
                                                    PID:4384
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6132,i,14694221853252558196,5713282855926994284,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
                                                    4⤵
                                                      PID:6072
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5548,i,5047973559205701316,7338339966116865566,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:1
                                                      4⤵
                                                        PID:2420
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3376,i,9797200837775650062,1417663522513202478,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
                                                        4⤵
                                                          PID:4344
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3748,i,12521319012602418425,16236580210666276301,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:9
                                                          4⤵
                                                            PID:4616
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5648,i,13789824145106768465,8913948451156164963,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:1
                                                            4⤵
                                                              PID:5468
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6136,i,16240368719898731637,11215384117812106944,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:1
                                                              4⤵
                                                                PID:1932
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5976,i,11649272244346032688,16712138939099959949,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
                                                                4⤵
                                                                  PID:4020
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6704,i,8079695317478417815,616286302461958927,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:1
                                                                  4⤵
                                                                    PID:1236
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5692,i,17686005758573309231,16543842003258357691,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:1
                                                                    4⤵
                                                                      PID:52
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3760,i,14860783676701098234,8401035872542523486,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
                                                                      4⤵
                                                                        PID:5776
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3736,i,10853130755067527217,4940204755806573269,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:14
                                                                        4⤵
                                                                          PID:4312
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3684,i,3279156595808750531,15017411686152362768,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:14
                                                                          4⤵
                                                                            PID:5140
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3640,i,2665598581630477948,14719291866965639283,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:14
                                                                            4⤵
                                                                              PID:2172
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3644,i,7741769091923390210,9171137949688392309,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:14
                                                                              4⤵
                                                                                PID:5568
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3684,i,14652126577206960466,1834882876041954553,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
                                                                                4⤵
                                                                                  PID:4808
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6572,i,3672394285080886675,15201403598656724984,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:14
                                                                                  4⤵
                                                                                    PID:4244
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,18200734164326793889,15007642006389021808,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:14
                                                                                    4⤵
                                                                                      PID:2168
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=6028,i,12420748888123766718,5439213749263322218,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:9
                                                                                      4⤵
                                                                                        PID:6064
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=3696,i,16854776295628081741,6908319306838255112,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:1
                                                                                        4⤵
                                                                                          PID:1636
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=6680,i,1900246761248065520,12610146904654213622,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:1
                                                                                          4⤵
                                                                                            PID:4244
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=5516,i,6190373998334901326,13822288323072933440,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:1
                                                                                            4⤵
                                                                                              PID:1828
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=6732,i,15212206206756055986,5040094215889080893,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:1
                                                                                              4⤵
                                                                                                PID:5568
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=6680,i,14780575992814122645,15638485350387384778,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:1
                                                                                                4⤵
                                                                                                  PID:4512
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=6412,i,17637082889455559119,5319056545612151338,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:1
                                                                                                  4⤵
                                                                                                    PID:5364
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7164,i,2811106513955841415,7871421446588615525,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:1
                                                                                                    4⤵
                                                                                                      PID:2156
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=6084,i,12153620587208817176,1889294098646209867,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
                                                                                                      4⤵
                                                                                                        PID:2880
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=5548,i,9741421154672098322,4382763926422763652,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:1
                                                                                                        4⤵
                                                                                                          PID:4140
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=7080,i,4271952993440076272,7910968779702830353,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
                                                                                                          4⤵
                                                                                                            PID:4652
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=7152,i,6136070047807866007,279835187817788833,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:1
                                                                                                            4⤵
                                                                                                              PID:1380
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=6940,i,1598341901150172058,11040277122836239311,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7176 /prefetch:1
                                                                                                              4⤵
                                                                                                                PID:696
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=7280,i,11291343139316036971,2210447907126323361,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:1
                                                                                                                4⤵
                                                                                                                  PID:4512
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=7448,i,3545192162567746104,12425174850493721128,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:1
                                                                                                                  4⤵
                                                                                                                    PID:3884
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=6800,i,3707612675615698573,13531992584550294182,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7524 /prefetch:1
                                                                                                                    4⤵
                                                                                                                      PID:5096
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=6804,i,1680311434701705262,16209098710546784598,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:1
                                                                                                                      4⤵
                                                                                                                        PID:4984
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=6096,i,7081610801701813681,16650542882482355452,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:1
                                                                                                                        4⤵
                                                                                                                          PID:2168
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=6804,i,1010141157239513072,9702362713178519458,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7576 /prefetch:1
                                                                                                                          4⤵
                                                                                                                            PID:3512
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=6096,i,13352052223859811601,3896585753954159840,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7708 /prefetch:1
                                                                                                                            4⤵
                                                                                                                              PID:6128
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=7332,i,1909815203938112621,2788389440899839450,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:1
                                                                                                                              4⤵
                                                                                                                                PID:3588
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=7116,i,7165582642491333826,1592450152619068369,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7332 /prefetch:1
                                                                                                                                4⤵
                                                                                                                                  PID:3996
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=6812,i,9180133504537334404,9819427132830105315,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:1
                                                                                                                                  4⤵
                                                                                                                                    PID:5492
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=4884,i,12625240566601072795,1564381314480997389,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7308 /prefetch:1
                                                                                                                                    4⤵
                                                                                                                                      PID:1508
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=7012,i,5582787046511016333,12564567168525951945,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:1
                                                                                                                                      4⤵
                                                                                                                                        PID:1584
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7136,i,8644532963351504156,4973158493472515585,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7576 /prefetch:1
                                                                                                                                        4⤵
                                                                                                                                          PID:3280
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=5444,i,2127866658555473751,7278296779452633187,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:1
                                                                                                                                          4⤵
                                                                                                                                            PID:2696
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7768,i,1360636152773578021,14110541131651163146,262144 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:10
                                                                                                                                            4⤵
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:4720
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=7484,i,7494919664230187285,8687871474542350883,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:1
                                                                                                                                            4⤵
                                                                                                                                              PID:1860
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7700,i,2664569084383218796,4678919928313117192,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7232 /prefetch:14
                                                                                                                                              4⤵
                                                                                                                                              • Modifies registry class
                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                              PID:1572
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=6452,i,8084244715311630298,15834308526712467332,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:1
                                                                                                                                              4⤵
                                                                                                                                                PID:2932
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=4684,i,11245794061662574018,14314062517149127849,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7372 /prefetch:1
                                                                                                                                                4⤵
                                                                                                                                                  PID:2828
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=7384,i,2355864471989408445,7298949702940691586,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
                                                                                                                                                  4⤵
                                                                                                                                                    PID:52
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=8252,i,8064657501112575008,17196796483180436093,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:1
                                                                                                                                                    4⤵
                                                                                                                                                      PID:2964
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=8248,i,11474412829291777405,11764739987062970869,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
                                                                                                                                                      4⤵
                                                                                                                                                        PID:4992
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=7368,i,15450795961620351091,3001538659574471726,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
                                                                                                                                                        4⤵
                                                                                                                                                          PID:6012
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=5528,i,7575958575568259811,14315016633534978952,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
                                                                                                                                                          4⤵
                                                                                                                                                            PID:5316
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=8388,i,441266885475267832,3989955695560868153,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:1
                                                                                                                                                            4⤵
                                                                                                                                                              PID:2360
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=6728,i,10905940020413563471,8919389881478530277,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8260 /prefetch:1
                                                                                                                                                              4⤵
                                                                                                                                                                PID:2732
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=8460,i,8311794881066071309,17817418123643295318,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8472 /prefetch:1
                                                                                                                                                                4⤵
                                                                                                                                                                  PID:5224
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=6616,i,9535421202992690862,13370212334027696453,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:1
                                                                                                                                                                  4⤵
                                                                                                                                                                    PID:5856
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=7860,i,2123569607923432410,16384123417599984440,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:1
                                                                                                                                                                    4⤵
                                                                                                                                                                      PID:2316
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=8348,i,8013914225963425650,15189601367277340287,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8484 /prefetch:1
                                                                                                                                                                      4⤵
                                                                                                                                                                        PID:4844
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=8096,i,4248115809577308210,13248649280753804106,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8252 /prefetch:1
                                                                                                                                                                        4⤵
                                                                                                                                                                          PID:2332
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=8688,i,15545672817937972433,14876631889557131240,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8116 /prefetch:1
                                                                                                                                                                          4⤵
                                                                                                                                                                            PID:5464
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=6708,i,8869713836319558076,2891272290410982517,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:1
                                                                                                                                                                            4⤵
                                                                                                                                                                              PID:860
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=7576,i,8432030614111346745,13506946622029121022,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:1
                                                                                                                                                                              4⤵
                                                                                                                                                                                PID:4176
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=8412,i,11617676241070438943,14780889394128965807,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:12
                                                                                                                                                                                4⤵
                                                                                                                                                                                  PID:2160
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=8792,i,10133718279175757547,3480047217727307518,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8396 /prefetch:14
                                                                                                                                                                                  4⤵
                                                                                                                                                                                    PID:120
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=7340,i,11817746569530211150,18095157653296477244,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:1
                                                                                                                                                                                    4⤵
                                                                                                                                                                                      PID:952
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=8368,i,16217850615447541148,9948129104825896345,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:9
                                                                                                                                                                                      4⤵
                                                                                                                                                                                        PID:4392
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=9176,i,7579254302508226464,7608279436539946370,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=9188 /prefetch:1
                                                                                                                                                                                        4⤵
                                                                                                                                                                                          PID:4052
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=7040,i,9092234700622441319,4632733642209386641,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:1
                                                                                                                                                                                          4⤵
                                                                                                                                                                                            PID:2072
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=4840,i,7469476674309737573,11227135905141089408,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=9204 /prefetch:1
                                                                                                                                                                                            4⤵
                                                                                                                                                                                              PID:940
                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=8568,i,4676645247202660439,2026181511787089342,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8140 /prefetch:1
                                                                                                                                                                                              4⤵
                                                                                                                                                                                                PID:2792
                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=7440,i,17572919505824052358,16689796348277519051,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:1
                                                                                                                                                                                                4⤵
                                                                                                                                                                                                  PID:6964
                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=9024,i,15276217217933783925,16140576377291539873,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=9004 /prefetch:1
                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                    PID:3368
                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=8340,i,3932063057606178768,10838025176557624456,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=1592 /prefetch:1
                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                      PID:5900
                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=9000,i,8072409463852757743,13621168353502017777,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8284 /prefetch:1
                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                        PID:2732
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=8268,i,11765308971421581016,653006930605312802,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:1
                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                          PID:4888
                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=6056,i,3703328029332922332,2464273302768244517,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                            PID:6204
                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=8500,i,8299571294159440222,16647928742021478750,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                              PID:4468
                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=6488,i,7696230168432168007,8963666127619203524,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                PID:4204
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4904,i,4165945053125424039,10403247616289849142,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:14
                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                PID:7132
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=7240,i,8037310565443708875,17480824878286664521,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:1
                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                  PID:952
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=6400,i,15281757438407304005,8813737892998718500,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:1
                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                    PID:2560
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=6600,i,11076571641113999181,12531621838520311662,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:5504
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=8252,i,3829891140837177390,16695775376349845190,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8652 /prefetch:1
                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                        PID:1960
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=7456,i,12868172742661958630,5145279361684798788,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                          PID:4356
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=6092,i,2836640532399943909,10753830416907243463,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8636 /prefetch:1
                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                            PID:2524
                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=7076,i,8464816213482575364,13099614749312905447,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:1
                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                              PID:5812
                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=5780,i,9669138397787075822,12491212299058053593,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                PID:5076
                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7812,i,6163371923310159353,1498860306955785205,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7756 /prefetch:14
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                PID:364
                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=6428,i,2454591136455658016,7118510522827236559,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:1
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                  PID:6392
                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=6452,i,14534383440324671253,7721436906193313946,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:1
                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                    PID:6192
                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=8260,i,13551986531321244290,2966574024157305120,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8664 /prefetch:1
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                      PID:4788
                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=8120,i,7394237879557769396,9825589317621856237,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7800 /prefetch:1
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                        PID:3916
                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=7284,i,3451625900126143147,18295908896000406606,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8388 /prefetch:1
                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                          PID:4268
                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=9084,i,16666395456283250088,2236870779896921312,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8888 /prefetch:1
                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                            PID:3268
                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=7236,i,3109445490921279696,5200334752210267245,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7484 /prefetch:1
                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                              PID:4088
                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=8088,i,16445512715291613692,15323886786713489040,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:1
                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                PID:6024
                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=9208,i,11241898145530122433,7262778355839027032,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                  PID:4392
                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --metrics-shmem-handle=7228,i,15528244298690114435,10130483720553077040,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:1
                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                    PID:2040
                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --metrics-shmem-handle=8884,i,10159111371539108618,10970290400805698963,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:1
                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                      PID:6844
                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=6064,i,12958163514465828539,7570810730356034798,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:1
                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                        PID:3372
                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=7752,i,6473089273191158787,18282166857987997129,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:1
                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                          PID:5680
                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4640,i,6494583522492239373,4510307339576233266,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6768 /prefetch:14
                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                            PID:1568
                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --metrics-shmem-handle=6696,i,13042167499941728036,3142634849917386110,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:1
                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                              PID:2484
                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --metrics-shmem-handle=5928,i,9664155712859294525,9289724977561009353,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:1
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                PID:6344
                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --metrics-shmem-handle=7216,i,7643823073399501128,7413373857105697810,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8572 /prefetch:1
                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                  PID:6416
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=8424,i,12859142951834867753,13910476421344149012,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=8524 /prefetch:14
                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                  PID:6552
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=9136,i,15637968729597839673,7136813421278432389,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:14
                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                  PID:2868
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7900,i,3847021403040903267,6060130284134911740,524288 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                  PID:4824
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=7220,i,17531462224895656385,5104915329045818646,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                    PID:612
                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=6752,i,3714347085300459501,351226144487247144,2097152 --field-trial-handle=1996,i,14957718076619267985,9410202237060077551,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:1
                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                      PID:1756
                                                                                                                                                                                                                                                                  • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\VideoLAN\VLC\vlc.exe" -Iskins
                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                                                                                                    • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                    PID:4916
                                                                                                                                                                                                                                                                  • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\[BrazzersExxtra] Chanell Heart (Anal Oiliness Is Next To Godliness _ 07.14.mp4"
                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                                                                                                    • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                    PID:4544
                                                                                                                                                                                                                                                                • C:\Windows\system32\SystemSettingsAdminFlows.exe
                                                                                                                                                                                                                                                                  "C:\Windows\system32\SystemSettingsAdminFlows.exe" StorageAdminHelper
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:5268
                                                                                                                                                                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                  PID:784
                                                                                                                                                                                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                  PID:1232
                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                    PID:5340
                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                      PID:4240
                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                        PID:4816
                                                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                        • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                        PID:4636
                                                                                                                                                                                                                                                                      • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                                                                                                                                                                        \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                          PID:4444
                                                                                                                                                                                                                                                                        • C:\Windows\System32\DataExchangeHost.exe
                                                                                                                                                                                                                                                                          C:\Windows\System32\DataExchangeHost.exe -Embedding
                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                            PID:2776
                                                                                                                                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                            C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                              PID:4076
                                                                                                                                                                                                                                                                            • C:\Windows\System32\rundll32.exe
                                                                                                                                                                                                                                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                PID:4392
                                                                                                                                                                                                                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                                                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                PID:1968
                                                                                                                                                                                                                                                                                • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\[BrazzersExxtra] Chanell Heart (Anal Oiliness Is Next To Godliness _ 07.14.2026)"
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                  • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                  PID:4100
                                                                                                                                                                                                                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                                                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                PID:6012
                                                                                                                                                                                                                                                                                • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\[BrazzersExxtra] Chanell Heart (Anal Oiliness Is Next To Godliness _ 07.14.2026)"
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                  • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                  PID:996
                                                                                                                                                                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                  PID:608
                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Windows Media Player\wmplayer.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding
                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                  • Enumerates connected drives
                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                  PID:1592
                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\unregmp2.exe
                                                                                                                                                                                                                                                                                    "C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                    PID:348
                                                                                                                                                                                                                                                                                    • C:\Windows\system32\unregmp2.exe
                                                                                                                                                                                                                                                                                      "C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                      • Enumerates connected drives
                                                                                                                                                                                                                                                                                      PID:6172
                                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost
                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                  • Drops file in Windows directory
                                                                                                                                                                                                                                                                                  PID:4380
                                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                  • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                  PID:6996
                                                                                                                                                                                                                                                                                  • C:\Windows\system32\dashost.exe
                                                                                                                                                                                                                                                                                    dashost.exe {f1291037-523c-411c-94fc0ab5db254e97}
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                      PID:5396

                                                                                                                                                                                                                                                                                  Network

                                                                                                                                                                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                        Replay Monitor

                                                                                                                                                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                                                                                                                                                        Downloads

                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                        • Size 40B
                                                                                                                                                                                                                                                                                        • SHA256 0348e188ce947271b1b49a9d58c1aaf1347e158d5de7ee8e42117c3b3d0a6c95
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                        7971a283-546c-4ffd-8701-2f97d53953bf.tmp

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7971a283-546c-4ffd-8701-2f97d53953bf.tmp
                                                                                                                                                                                                                                                                                        • Size 15KB
                                                                                                                                                                                                                                                                                        • SHA256 dde54d78bad29eb62ca7ee13d886ec498ab4047d543896c42a9f0525eb5a4453
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                        • Size 6B
                                                                                                                                                                                                                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                        • Size 1008B
                                                                                                                                                                                                                                                                                        • SHA256 dd5f7a17761459ed19167dee10d7e80975bbc1786b094206cfdb930bed287546
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                        • Size 960B
                                                                                                                                                                                                                                                                                        • SHA256 8dc0743759d2963b143de70b9ce280bcec18099f6578f25d78ab9846726445fa
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        messages.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\_locales\en\messages.json
                                                                                                                                                                                                                                                                                        • Size 53KB
                                                                                                                                                                                                                                                                                        • SHA256 91991a1c981c6dbac08c705f7995d4f85350c42050973917c4fff0df475b3d35
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        _ruleset16

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\_metadata\generated_indexed_rulesets\_ruleset16
                                                                                                                                                                                                                                                                                        • Size 675B
                                                                                                                                                                                                                                                                                        • SHA256 0d4714b2ed5844340d5e051e728c7f8cdddf0ead37c55c7c39415a02d4248016
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        _ruleset19

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\_metadata\generated_indexed_rulesets\_ruleset19
                                                                                                                                                                                                                                                                                        • Size 8.3MB
                                                                                                                                                                                                                                                                                        • SHA256 7754ddcffe101db2e0771a6e4199862950f360c45dc1cf557e19186d2f382e18
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        _ruleset45

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\_metadata\generated_indexed_rulesets\_ruleset45
                                                                                                                                                                                                                                                                                        • Size 10.6MB
                                                                                                                                                                                                                                                                                        • SHA256 a0d318750cbdaa69c690a0e73386cd59b107270204c8b97da0a1266860503ed9
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        alert-container.css

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\css\alert-container.css
                                                                                                                                                                                                                                                                                        • Size 357B
                                                                                                                                                                                                                                                                                        • SHA256 7c7d38137b2fc8a19f120c4d42f5828ab0b0db0010b3b14711694ee30b090721
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        alert-popup.css

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\css\alert-popup.css
                                                                                                                                                                                                                                                                                        • Size 30KB
                                                                                                                                                                                                                                                                                        • SHA256 a47341092d2c8b81a9cc2d4f593f3d1e5934ecd46ecaccbc038d51df1b196047
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        rules-limits-container.css

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\css\rules-limits-container.css
                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                        • SHA256 39edcbc69b1290f78671e6383891ef22d3cd094ecab01a71cc16c87e6565991f
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        rules-limits-popup.css

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\css\rules-limits-popup.css
                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                        • SHA256 f3280228558e795a4d8a8f156245d8e624ef002eb8c72cf5ee5633d5344e9fb3
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        update-container.css

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\css\update-container.css
                                                                                                                                                                                                                                                                                        • Size 358B
                                                                                                                                                                                                                                                                                        • SHA256 2d2679429b5fa09be6319371e1ae224da02f7f049fb1d88ff5f6b99817e32966
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        Roboto-Flex-Regular.woff2

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\fonts\Roboto-Flex-Regular.woff2
                                                                                                                                                                                                                                                                                        • Size 711KB
                                                                                                                                                                                                                                                                                        • SHA256 5ccdab969b7e09570751e511b8cbcdcfffc6f0ed1614a15b08e1df8dca087df6
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        loading-19.png

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\icons\loading-19.png
                                                                                                                                                                                                                                                                                        • Size 662B
                                                                                                                                                                                                                                                                                        • SHA256 90a4bbf5876dd3b44837a35ef373dc011b8698651e40e50917e84c67fba7014d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        loading-38.png

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\icons\loading-38.png
                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                        • SHA256 5919dce77b7fbc8b9566913d26a7afb58c93840aada265f5e65201d820565af0
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        on-128.png

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\icons\on-128.png
                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                        • SHA256 11cd5c7070f03a041147ea5580f176d103e13b2690362749ae6b2d0eb8201ff2
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        on-16.png

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\icons\on-16.png
                                                                                                                                                                                                                                                                                        • Size 454B
                                                                                                                                                                                                                                                                                        • SHA256 4bca4e2222da811914d9506aae0b5e370c4c3481523960b2b2825bfe5a89a37e
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        on-19.png

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\icons\on-19.png
                                                                                                                                                                                                                                                                                        • Size 530B
                                                                                                                                                                                                                                                                                        • SHA256 699fea616eae938e0f58d9e4ad3a616e6f39cd4dfb93d846e586e2bbc2979030
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        on-38.png

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\icons\on-38.png
                                                                                                                                                                                                                                                                                        • Size 925B
                                                                                                                                                                                                                                                                                        • SHA256 1bfdcd6a9c24daa221636aaf420da73e5a3a8be4366e14889daddd8c2857f291
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        logo.svg

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\assets\images\logo.svg
                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                        • SHA256 e42160eac0b1bffc3e1676245c24322cb5bd9080321f668742ba3a766a324b30
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_0.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_0\ruleset_0.json
                                                                                                                                                                                                                                                                                        • Size 35KB
                                                                                                                                                                                                                                                                                        • SHA256 a5bf2c588954a9c74553e711069cbfc2ad90dced4285dff4451eb2f332d37b91
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_103.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_103\ruleset_103.json
                                                                                                                                                                                                                                                                                        • Size 180KB
                                                                                                                                                                                                                                                                                        • SHA256 7fc6933a4b0ed78ae8686b10cf3b62f83b6bc701fd91bfa195d0eec15cf824af
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_105.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_105\ruleset_105.json
                                                                                                                                                                                                                                                                                        • Size 74KB
                                                                                                                                                                                                                                                                                        • SHA256 53825dcff7debdc03b7965805d7426f7a8906bf1c9a02bece7706c2e43c332bb
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_108.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_108\ruleset_108.json
                                                                                                                                                                                                                                                                                        • Size 304KB
                                                                                                                                                                                                                                                                                        • SHA256 7126a582116bb47479485bf52356e92fa5258374db2df94c7386cee41380bfde
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_109.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_109\ruleset_109.json
                                                                                                                                                                                                                                                                                        • Size 397KB
                                                                                                                                                                                                                                                                                        • SHA256 e5db4d54ba94d30399fb60bc8c6855a6c508dba0de8360d1277b6e19e2387e5c
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_10.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_10\ruleset_10.json
                                                                                                                                                                                                                                                                                        • Size 136KB
                                                                                                                                                                                                                                                                                        • SHA256 822f7cf7f7a0a271aceb869ecb1248369bec138b5a8cba6ae19d09dcee6ece74
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_110.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_110\ruleset_110.json
                                                                                                                                                                                                                                                                                        • Size 152KB
                                                                                                                                                                                                                                                                                        • SHA256 d02a56aec6ed35af8dce6b034161a956eec4e0f0e340fb3a8156d343a4ea7076
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_111.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_111\ruleset_111.json
                                                                                                                                                                                                                                                                                        • Size 50KB
                                                                                                                                                                                                                                                                                        • SHA256 931f3b38136589bdd63f6581e2275131b7f20eba36340f8d3fe0d67b1d1816d9
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_112.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_112\ruleset_112.json
                                                                                                                                                                                                                                                                                        • Size 232KB
                                                                                                                                                                                                                                                                                        • SHA256 7e3d1a2ffcbf84fc027d2322ed39859acdd6fed211e47c19c72a0f4232c9ecae
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_114.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_114\ruleset_114.json
                                                                                                                                                                                                                                                                                        • Size 82KB
                                                                                                                                                                                                                                                                                        • SHA256 e5d74b512b8d7424cb3681f8ddf215169c765da656cf5f0593c9ba50b576d77a
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_11.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_11\ruleset_11.json
                                                                                                                                                                                                                                                                                        • Size 781KB
                                                                                                                                                                                                                                                                                        • SHA256 7daf6510324722346aca9244a312da96f08f8b9f51f408a903b9b32a40a445f4
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_120.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_120\ruleset_120.json
                                                                                                                                                                                                                                                                                        • Size 599KB
                                                                                                                                                                                                                                                                                        • SHA256 0b27b4212000a2245717261fc01ce6ad1ac15d61756e70195a4c73a38ec1b2a3
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_13.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_13\ruleset_13.json
                                                                                                                                                                                                                                                                                        • Size 705KB
                                                                                                                                                                                                                                                                                        • SHA256 8ab4fef5a99da290a777c29b2fc33456947e09cb057c01a5bf22fe8e4039cb26
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_16.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_16\ruleset_16.json
                                                                                                                                                                                                                                                                                        • Size 2.2MB
                                                                                                                                                                                                                                                                                        • SHA256 06ea44116594e75ab030d9775c1c066952dbce03e2ebf4a8d4e9e964785aac79
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_17.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_17\ruleset_17.json
                                                                                                                                                                                                                                                                                        • Size 824KB
                                                                                                                                                                                                                                                                                        • SHA256 5f140fb811e8370d1ec4e2b01c624e2fec5c3c39795505716d909ed36fde7f81
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_18.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_18\ruleset_18.json
                                                                                                                                                                                                                                                                                        • Size 2.1MB
                                                                                                                                                                                                                                                                                        • SHA256 2cd117a9f7582684c3c4ca8d8bad67c36e6d3791c333d98cd669e9b6d1d0897f
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_19.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_19\ruleset_19.json
                                                                                                                                                                                                                                                                                        • Size 1.8MB
                                                                                                                                                                                                                                                                                        • SHA256 c01771ac6573953105fa30bb58af45a090a5ed9308c990e7daf5393783ad47fd
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_1.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_1\ruleset_1.json
                                                                                                                                                                                                                                                                                        • Size 2.0MB
                                                                                                                                                                                                                                                                                        • SHA256 a5932be7b3b4e02adb8f156574e64f47334393c86315b4ba42ea8058c629a8f3
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_202.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_202\ruleset_202.json
                                                                                                                                                                                                                                                                                        • Size 162KB
                                                                                                                                                                                                                                                                                        • SHA256 deffa66bd98b93bbc70526c174e6f5f53b24597efdd43b5c79b48a2dbdbf6add
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_203.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_203\ruleset_203.json
                                                                                                                                                                                                                                                                                        • Size 174KB
                                                                                                                                                                                                                                                                                        • SHA256 8b300c4980e773221917af1ce42f21bf15837b64305974c4c5f98ddba853dd10
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_208.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_208\ruleset_208.json
                                                                                                                                                                                                                                                                                        • Size 4.2MB
                                                                                                                                                                                                                                                                                        • SHA256 9abcb2db8fb8b81e6082f7724b37cebaa0fe0f07a8dae95b7176e14cbf0ad52d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_20.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_20\ruleset_20.json
                                                                                                                                                                                                                                                                                        • Size 288KB
                                                                                                                                                                                                                                                                                        • SHA256 fe30cfc6c56fea93f6239d66d3a8f2a6fbef2dde7a021f263bc0ade0ed361c91
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_214.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_214\ruleset_214.json
                                                                                                                                                                                                                                                                                        • Size 135KB
                                                                                                                                                                                                                                                                                        • SHA256 8fb7ff59fcc01f59e8b6aa937f59f4507b8c249d5f324c188f2d83396ef2f483
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_216.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_216\ruleset_216.json
                                                                                                                                                                                                                                                                                        • Size 583KB
                                                                                                                                                                                                                                                                                        • SHA256 619677a5e708f9f81a3635f863bb34592228d87fe099498e942de6eac6d19ece
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_217.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_217\ruleset_217.json
                                                                                                                                                                                                                                                                                        • Size 415KB
                                                                                                                                                                                                                                                                                        • SHA256 6403865811140750387a82d1a10650fe4f329f98c704fdbf5ec3040204ec3e6b
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_218.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_218\ruleset_218.json
                                                                                                                                                                                                                                                                                        • Size 60KB
                                                                                                                                                                                                                                                                                        • SHA256 55834b277ae343bb240f651684654dc3ceff9ce12e256b47fd96dfa7d1b471f8
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_21.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_21\ruleset_21.json
                                                                                                                                                                                                                                                                                        • Size 916KB
                                                                                                                                                                                                                                                                                        • SHA256 a4d9939b067741de3f4fd314c0630a5f321efaccc76401bb96307a4b7a342047
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_224.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_224\ruleset_224.json
                                                                                                                                                                                                                                                                                        • Size 2.9MB
                                                                                                                                                                                                                                                                                        • SHA256 fc7912070887fc6cf199464ad506abd43f0f344752b18b47c1cc4495ba58529b
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_227.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_227\ruleset_227.json
                                                                                                                                                                                                                                                                                        • Size 517KB
                                                                                                                                                                                                                                                                                        • SHA256 ecfaecdd80a98c7ba2a61ab8b8fac0fd777db60b9cf8ddb5d41b7e4ba8ae595f
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_22.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_22\ruleset_22.json
                                                                                                                                                                                                                                                                                        • Size 302KB
                                                                                                                                                                                                                                                                                        • SHA256 ea84a0e553b1b535e25e2f7c841cf8fd024a2a6fb7db321773e88690a9d583da
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_233.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_233\ruleset_233.json
                                                                                                                                                                                                                                                                                        • Size 140KB
                                                                                                                                                                                                                                                                                        • SHA256 31b0ecfa3b5a96e1992cc73feb8dfe0fd78f231570b16eb0395394ea4123af2a
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_235.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_235\ruleset_235.json
                                                                                                                                                                                                                                                                                        • Size 428KB
                                                                                                                                                                                                                                                                                        • SHA256 608d90f7a59bd923d0585e7fed5fee20967716a856625fbd08082e21cc8dff41
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_238.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_238\ruleset_238.json
                                                                                                                                                                                                                                                                                        • Size 108KB
                                                                                                                                                                                                                                                                                        • SHA256 26efdd9753c44a6498cff1f8d1875daeeafe1c2a832f98bda3d89a675f503b41
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_23.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_23\ruleset_23.json
                                                                                                                                                                                                                                                                                        • Size 786KB
                                                                                                                                                                                                                                                                                        • SHA256 294a48438a8500da3a4998538c8ed254d9ae100e7e768537703e9db9a9efb8b9
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_243.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_243\ruleset_243.json
                                                                                                                                                                                                                                                                                        • Size 562KB
                                                                                                                                                                                                                                                                                        • SHA256 00bb8c10bc8dcf9b85dd7f552eff6e68778ae3c409351852b1c33420c10f2e4c
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_249.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_249\ruleset_249.json
                                                                                                                                                                                                                                                                                        • Size 448KB
                                                                                                                                                                                                                                                                                        • SHA256 23f38e367ae536d49a3692b9a3fbe06535f34c71a0849a6dbed12b31dd97d00e
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_252.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_252\ruleset_252.json
                                                                                                                                                                                                                                                                                        • Size 42KB
                                                                                                                                                                                                                                                                                        • SHA256 4035bcf4b07fc3b868081a95fd2507bc3e56b536f2500bcf7f1b7f2f9df93f8e
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_253.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_253\ruleset_253.json
                                                                                                                                                                                                                                                                                        • Size 1.6MB
                                                                                                                                                                                                                                                                                        • SHA256 c468507f265568a732798eca7500bb3de96468b3eb22e362d10570501b1677a0
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_254.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_254\ruleset_254.json
                                                                                                                                                                                                                                                                                        • Size 128KB
                                                                                                                                                                                                                                                                                        • SHA256 85337f92fcc7f102efd9a85a0d42e73e0a92372055e3b5eb5ccdd45ae29b3de1
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_255.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_255\ruleset_255.json
                                                                                                                                                                                                                                                                                        • Size 22.0MB
                                                                                                                                                                                                                                                                                        • SHA256 d7c143b685454ed00e8a32a971987c4df7e9697b8e8fb6b2681367032b2deecd
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_256.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_256\ruleset_256.json
                                                                                                                                                                                                                                                                                        • Size 322KB
                                                                                                                                                                                                                                                                                        • SHA256 510f8b0b7465fb0f0bf27f0553a1a6e9a12991e607b431958f0ad6911eb53932
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_257.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_257\ruleset_257.json
                                                                                                                                                                                                                                                                                        • Size 1.2MB
                                                                                                                                                                                                                                                                                        • SHA256 3227adbe76a1028ec2a2c76dc60afbd82f10f773a9042c43942c3f1ce28d0cb8
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_259.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_259\ruleset_259.json
                                                                                                                                                                                                                                                                                        • Size 4.0MB
                                                                                                                                                                                                                                                                                        • SHA256 bce3ba413b040e4185bfd9e6463a6b1c8543d40e7397830a1fa35c6dfcc12a58
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_2.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_2\ruleset_2.json
                                                                                                                                                                                                                                                                                        • Size 18.3MB
                                                                                                                                                                                                                                                                                        • SHA256 2a422542aee219ccacedff825fc4577f8532421cf32c44c06fafb445271ddbbc
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_3.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_3\ruleset_3.json
                                                                                                                                                                                                                                                                                        • Size 17.5MB
                                                                                                                                                                                                                                                                                        • SHA256 bd4deaaa5064c556802a35e952cb2ccbcdc2e7e81e1dce68bf87d9eadae79687
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_4.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_4\ruleset_4.json
                                                                                                                                                                                                                                                                                        • Size 1.0MB
                                                                                                                                                                                                                                                                                        • SHA256 e896879d59a6fbe38b3a480cc866d6f7ca6af014c74f33db4fc1eceb8e09fe97
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_5.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_5\ruleset_5.json
                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                        • SHA256 10e067e2d5d080e7f17952d87ac6335041dfee1544210bf8cff60b63d200effa
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_6.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_6\ruleset_6.json
                                                                                                                                                                                                                                                                                        • Size 1.2MB
                                                                                                                                                                                                                                                                                        • SHA256 b178268d2774aad499a202cc30066ff5e275bcb7cdf3614de469f6d524576ac5
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_7.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_7\ruleset_7.json
                                                                                                                                                                                                                                                                                        • Size 1.1MB
                                                                                                                                                                                                                                                                                        • SHA256 c0aab9549d47048346837f8b991b97cccf64d4b4f1377f7030fd2f1d74666e3d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_8.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_8\ruleset_8.json
                                                                                                                                                                                                                                                                                        • Size 205KB
                                                                                                                                                                                                                                                                                        • SHA256 3b3384f8d02ceeff64936f45d900757fa305bd10720a16934ff6f6ba0ad0865a
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        ruleset_9.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\declarative\ruleset_9\ruleset_9.json
                                                                                                                                                                                                                                                                                        • Size 604KB
                                                                                                                                                                                                                                                                                        • SHA256 a4ea83ead71850c4642863ece9eb5bfbc42e8fb7966efa57b28d73b0f15898b1
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        filters_i18n.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\filters\filters_i18n.json
                                                                                                                                                                                                                                                                                        • Size 1.0MB
                                                                                                                                                                                                                                                                                        • SHA256 87a7c4ce906e1e7e415cebea8999866c7724da8fab432ce38ca3befcc7699749
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        background.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\pages\background.js
                                                                                                                                                                                                                                                                                        • Size 7.7MB
                                                                                                                                                                                                                                                                                        • SHA256 aeea4a986d7f1173ea493f6f2340b9e8d46870e9500e99f86bb5583d1f4f9133
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        blocked.html

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\pages\blocking\blocked.html
                                                                                                                                                                                                                                                                                        • Size 109KB
                                                                                                                                                                                                                                                                                        • SHA256 e1911ceffdd944e18ef949fa283c0b53640cb22880080b04735b2dddaeadb7a4
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        blocked.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\pages\blocking\blocked.js
                                                                                                                                                                                                                                                                                        • Size 438KB
                                                                                                                                                                                                                                                                                        • SHA256 2a621361e7f95634f815a7e3cd4f61f9a7fe1edcaf7731881781c13df8822622
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        content-script-end.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\pages\content-script-end.js
                                                                                                                                                                                                                                                                                        • Size 58KB
                                                                                                                                                                                                                                                                                        • SHA256 d16bfc63fc8e0422a11e4cab62f67f1970639c74ef7e4f6d9f23367e9ba8a2be
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        devtools.html

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\pages\devtools.html
                                                                                                                                                                                                                                                                                        • Size 385B
                                                                                                                                                                                                                                                                                        • SHA256 281dbeacf202efbdda3475cd3a65dcc859f32982fe71f6654746495353929581
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        gpc.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\pages\gpc.js
                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                        • SHA256 8a6a584b5f6f7855485f77526c01c50c504c39b3460878256bc6fc95419c3a92
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        options.html

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\pages\options.html
                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                        • SHA256 ac7a365753a248ade05aac08ab359af639e36bdd0cdf2879e89aa575e08f0054
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        popup.html

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\pages\popup.html
                                                                                                                                                                                                                                                                                        • Size 514B
                                                                                                                                                                                                                                                                                        • SHA256 a3d7de7cc6f085d37531e555e179e459918c9f5414c133a8d09ee9ad1184fcb2
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        thankyou.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\pages\thankyou.js
                                                                                                                                                                                                                                                                                        • Size 334KB
                                                                                                                                                                                                                                                                                        • SHA256 885aab82d97990458a419f073b67b46b31649b081bae48b47bd42f5e1421d249
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        runtime.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\runtime.js
                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                        • SHA256 4ed5db5ae30434dc0f291b64ee9ee6a90a7c21a1252ec7bba615a555852a77bb
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        mobx.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\vendors\mobx.js
                                                                                                                                                                                                                                                                                        • Size 172KB
                                                                                                                                                                                                                                                                                        • SHA256 a910d5e7763cb8f6ddb5eb7f5888120467aafd2a42433040ebd0ab84b59667f6
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        react.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\vendors\react.js
                                                                                                                                                                                                                                                                                        • Size 132KB
                                                                                                                                                                                                                                                                                        • SHA256 ee7a1f14fa949b4767cd861fc05751c9c0a3bd0d6dc91c8ab0612dd79545515e
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        google-analytics.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\web-accessible-resources\redirects\google-analytics.js
                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                        • SHA256 2420c48f85c529182c83debd405f95f1439faa1cb1a26629dbef55e239907e61
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        googletagservices-gpt.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.4.3.97_0\web-accessible-resources\redirects\googletagservices-gpt.js
                                                                                                                                                                                                                                                                                        • Size 15KB
                                                                                                                                                                                                                                                                                        • SHA256 17006048e96d13ef654f0203502635190788ea806dc6131493be440a353e867d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        messages.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                                                                                                                                                                                                                                                        • Size 593B
                                                                                                                                                                                                                                                                                        • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        craw_background.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                                                                                                                                                                                                                        • Size 531KB
                                                                                                                                                                                                                                                                                        • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        CURRENT

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
                                                                                                                                                                                                                                                                                        • Size 16B
                                                                                                                                                                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                        17

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\17
                                                                                                                                                                                                                                                                                        • Size 76KB
                                                                                                                                                                                                                                                                                        • SHA256 a9f57573d0c433948c7c9526ec86835d897d734f96ee390ddc068e16dc166b87
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        2

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\2
                                                                                                                                                                                                                                                                                        • Size 1.1MB
                                                                                                                                                                                                                                                                                        • SHA256 a4694b363535d77258ce65cc0898efb380819c479ede59dfbe91a083e818c3d5
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        22

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\22
                                                                                                                                                                                                                                                                                        • Size 92KB
                                                                                                                                                                                                                                                                                        • SHA256 7a63940848a00ffdc9a9500694ac8501a9a120a3eb2e1704d4d24bbeb63d93dd
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        25

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\25
                                                                                                                                                                                                                                                                                        • Size 156KB
                                                                                                                                                                                                                                                                                        • SHA256 5a66042842d76d4ed058c865ddcc64911f8420b25fbb90ec365e9f7d3760585d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        2b

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\2b
                                                                                                                                                                                                                                                                                        • Size 138KB
                                                                                                                                                                                                                                                                                        • SHA256 a433f35938feb8f7f29f09b175c4fc657752afef9c78d66802aba0e1c851b60c
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        2f

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\2f
                                                                                                                                                                                                                                                                                        • Size 196KB
                                                                                                                                                                                                                                                                                        • SHA256 90cbe4bb6fb04451c522ea5d3d1b3f79a7b049ffa414defc74f30d23086e3c8f
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        33

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\33
                                                                                                                                                                                                                                                                                        • Size 822KB
                                                                                                                                                                                                                                                                                        • SHA256 fcb396a1fdf91f136c29e986f383260171251d7091463ee8d083bf7f05c63811
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        37

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\37
                                                                                                                                                                                                                                                                                        • Size 181KB
                                                                                                                                                                                                                                                                                        • SHA256 0c9898829a8378da1e0f08e35ec4954bee0458183fb611cabdf38c2543a03720
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        3b

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\3b
                                                                                                                                                                                                                                                                                        • Size 1.3MB
                                                                                                                                                                                                                                                                                        • SHA256 f62f9f4f1a711f0077f58ef9c0140063f9ba46b37eac96d02306e8b04fa2a9a9
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        45

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\45
                                                                                                                                                                                                                                                                                        • Size 1.8MB
                                                                                                                                                                                                                                                                                        • SHA256 3dcc97e41ec1e1c56b648ab2104e55168a07c94153c73a3a6996d1395cab4f17
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        5

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\5
                                                                                                                                                                                                                                                                                        • Size 4.1MB
                                                                                                                                                                                                                                                                                        • SHA256 401d5d80997037bd95c7fd227173c14503d7831afaf29b1f1ddfce477eb59d70
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        9

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\9
                                                                                                                                                                                                                                                                                        • Size 111KB
                                                                                                                                                                                                                                                                                        • SHA256 237b3a4472d7e74c8af1598cb4484046d4e9ef1549b06d6ff241a764fba1019d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        d

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_bgnkhhnnamicmpeenaelnjfhikgbkllg_0.indexeddb.blob\3\00\d
                                                                                                                                                                                                                                                                                        • Size 81KB
                                                                                                                                                                                                                                                                                        • SHA256 6a427253516e3ce0005b365c1a366915ae9812599bb10f14f2f9334c1ef93efb
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        2036ebe0-5eef-4a39-a5f2-13393a27d404.tmp

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\2036ebe0-5eef-4a39-a5f2-13393a27d404.tmp
                                                                                                                                                                                                                                                                                        • Size 9KB
                                                                                                                                                                                                                                                                                        • SHA256 111df746ac558c5fbb3a306cc2ef9e6fcc1ad89f384a2caad6e74287f1bd6e0d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        4436388d-f803-4d8c-824b-ec351a191d09.tmp

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\4436388d-f803-4d8c-824b-ec351a191d09.tmp
                                                                                                                                                                                                                                                                                        • Size 1015B
                                                                                                                                                                                                                                                                                        • SHA256 e4dfdf690523a2d39db8fa6f72eabe88fe48ee992b1991ebe122db9a6e5f3192
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                        • SHA256 6c23abe6ad5586052c907310e523194fe5762bcaeeaa0dfd17f11b7c5f30717f
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                        • SHA256 becece5a8a656a65cdf0bcb01fe952e0a63f45e1aa2f008684ca1b68b88eb35d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        SCT Auditing Pending Reports

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                        • Size 2B
                                                                                                                                                                                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                        • SHA256 78c3c9e9e313f2d71ab12dc6208cff61f3bff74e5c0f616fa886a4be2bb365bb
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                        • SHA256 840ad55f3d2c16956837150b1a8e7152a0fca64784324c8d84ace72c559c4dd2
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                        • SHA256 ccec473862f0d1333c999220b30f1489a1bd8c4aee5553a6bac7c7a947eb5b25
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                        • SHA256 06e57cdc93fbdcf29271ec63c4de19f22213672da5454708bbe60f8f16f61959
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                        • Size 15KB
                                                                                                                                                                                                                                                                                        • SHA256 73707755aa46c01e34a6d9589f7042d1f2e10024c7bb8ef4d0142e2f1df7abc9
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                        • SHA256 adf4f53884f08bedb68dff42c9d54a497c942abb28f52e22e6ac4513158ca0e7
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                        • Size 16KB
                                                                                                                                                                                                                                                                                        • SHA256 57eda0bf0fd266afaf3be5290d7aa698c645ad49ee219f64f57d9664f8f74b05
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Secure Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                        • SHA256 1e2b3d5ac7db8fdd6cd856e1b029cfd3ffde967393107d8e330062315522d1cf
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Secure Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                        • SHA256 371b810505c85e07f06f1a881b0bb9d79bb4ca43e819da73a792cd358ded9b4d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Secure Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                        • SHA256 77c571084935716464170e557e548ae4499b8a2ebedd4ac51b0f9a0b383ebbf1
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Secure Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                        • SHA256 f94836e89a67d12e4ae4fbac83a5e633078336aacf27d2d4ed97bdfdaafcfa20
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Secure Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                        • SHA256 a24033bbd925f8337e81c07f11109fb120a54638dc3c7f1bbeb0d6da35970854
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Secure Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                        • SHA256 09c281b6c448e4361f06acf3dd3f3dae977ab310c5bcf961749bcee548fc8ed9
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Secure Preferences

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                        • SHA256 ccbc8c5d88f879213c0d97da55daa2f109bfe13a20d5634932e8d49ea971b6dc
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                        • Size 120B
                                                                                                                                                                                                                                                                                        • SHA256 704fc1d8f57a39450a801732efb1c8058a085eeeb4752bec4cc13a4d1f70981d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                        • Size 120B
                                                                                                                                                                                                                                                                                        • SHA256 6b0130a1c44f1b26115b16deb7af12a2c483c9abb365463be5b8c902f378a778
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                        • SHA256 3a60f889ec455342b950c1cd692b00331ea888565baa867122da79de2424d44a
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                        • SHA256 3d611baa5d29b51357e13f91489a331b8430e1c7ad48f3c43c89f0e9dab91b3d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        the-real-index~RFe619d49.TMP

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe619d49.TMP
                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                        • SHA256 3f82e914e691cc1fbe984fdd9487b01a98927c06f0860ec0070c7354201c5b09
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                        data_0

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                        data_1

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
                                                                                                                                                                                                                                                                                        • Size 264KB
                                                                                                                                                                                                                                                                                        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                        data_2

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                        data_3

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                        MANIFEST-000001

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                        • Size 41B
                                                                                                                                                                                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 16a24baa297c395f4e4bc6b49e5167a9e684df3bade233433972a743b3be8932
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 82941372fac285118d97273920b06c77076d4e89453aefa0eb4b92438cb742b7
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 4c5cc2013277a7121f2cb88c9cd910235d121104ffb4a26c0ae99b0b4d25e702
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 093c3d15a393986a4ef7d8371ef2634bcb80d9ed11182d644f4b3dae15245118
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 121KB
                                                                                                                                                                                                                                                                                        • SHA256 dd0d077ff19836c81546d607eee081beb0ef39e2ae9466e189afb1c8f44bfd43
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 264a61a687e62f1a248a68642d889e0b6e4554dab2f974f42d9f741907f26fe0
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 b0ab005f18890cd1a2a53970b1b357cf1f5f1c42f5c59903bffe46f38a273af7
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 b3aa705c34585a65f99f6a47569e6625b89e79d6a23990206768427d2703f98b
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 c416ec39822ae9ebb1ad2f5e87e8886b8a8ef5091fa11ae87137e95c910f7330
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 121KB
                                                                                                                                                                                                                                                                                        • SHA256 58b045ec7ef765c379cf2f11c09eb613a95c945a4187b830fa8aa7f8a110d772
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 121KB
                                                                                                                                                                                                                                                                                        • SHA256 e6b50091f0e3b02111d4dbae0a6c9577411601df2bf6fd5686694897aa0f8573
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 6bb5275d8d8e02b796ae7d48531d1c3660d81f0505cdafd09a2f77b9f2a0c463
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 cce68e850a746b6301f7680a4050af24f8c0d9ab3984ab31265136293ccf9e8d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 97311473006eb8e08de386253dfbe5da0e1fec140163d099f9b1127ccef1aa9e
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 b842f0384ec0cf66cdda99bbe6e7650cc1355d0828b902d98cbbfc11dcbbbcfa
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                        • SHA256 4a00927d0e99699e82f1ce59722b7c262c20b01e1468c9dafcb00ee885cb7093
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 42914c5a176cb20ee315db6d435c708041ae86b881cdd23419b06296cbe50541
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 a95b8bf2f0ac3cc663be24698898940bc039e99f2b7bfc28a90430a9764ce607
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 d542cbeaf25e5d0890761707f78c682704a5416ae3254aad71f64b3a240b6e22
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 ce9915f47148d2bdbd067ab65f6775cb6bbbf40e5bde82237756286d122d8342
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 df02335c457898374f9fa896042f247736cc27c748ac1f10b6017274c07bd4b5
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 679ad4e04450d843edf1e34ec44d56fe89cfa0a019a3683c65323924b252180c
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 0785790ab533495d3075bd77d6d4c9190825eaee9cc7d916c942c7e95cce918c
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 3c145be629206ba0870a9afc1533b4842db825d6499d2a7cdc1f9d80971805b7
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                        • SHA256 23da1b054f48e4421b0624037704b089a1fa39204003c866b5c1fb3c06fa8df7
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        CurrentDatabase_400.wmdb

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
                                                                                                                                                                                                                                                                                        • Size 704KB
                                                                                                                                                                                                                                                                                        • SHA256 ab92ba9fde5131a47904046020e4cdd6e0a82948bd4bc69caa1f0309a977fb43
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        WMSDKNS.XML.bak

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.bak
                                                                                                                                                                                                                                                                                        • Size 9KB
                                                                                                                                                                                                                                                                                        • SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        prep_Activatable Class_Hermes_perf.cache

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                                                                                                                                                                                                                        • Size 599B
                                                                                                                                                                                                                                                                                        • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        messages.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3388_1848202177\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                                                                        • Size 450B
                                                                                                                                                                                                                                                                                        • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        messages.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3388_977526574\CRX_INSTALL\_locales\mk-MK\messages.json
                                                                                                                                                                                                                                                                                        • Size 284B
                                                                                                                                                                                                                                                                                        • SHA256 6793bb670964839930d31e2fdd6edde6dc5ceb7455624911ee6d20c28962f2ae
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        messages.json

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3388_977526574\CRX_INSTALL\_locales\ta\messages.json
                                                                                                                                                                                                                                                                                        • Size 284B
                                                                                                                                                                                                                                                                                        • SHA256 45b2fe770f39771e7c99d766e65c5abdee7e757c441f7e75755847662ba4be7e
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        content-script-start.js

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3388_977526574\CRX_INSTALL\pages\content-script-start.js
                                                                                                                                                                                                                                                                                        • Size 483KB
                                                                                                                                                                                                                                                                                        • SHA256 a9bcec75cbed0786e4743c7800b7a5e8d3161fe56c5c1dc24c0ed0f5ef5d427a
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        default.exc

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                                                                                                                                                                                                                                        • Size 2B
                                                                                                                                                                                                                                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                        f01b4d95cf55d32a.automaticDestinations-ms

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                        • SHA256 96e68651e0da1eaa5e16b927585af65186b86f7019bfd33e7c80fc6ed4bc5f2e
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        f01b4d95cf55d32a.automaticDestinations-ms

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                        • SHA256 fdec5e23aaa9b02c91c2428ab0771a5862b5eeee28f1a938de4e60b06d81bac8
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        f01b4d95cf55d32a.automaticDestinations-ms

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                        • SHA256 c976d301a56c1d96ca194ec39463294fa22677167f06bdba5eca07c2f92b857a
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        74d7f43c1561fc1e.customDestinations-ms

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74d7f43c1561fc1e.customDestinations-ms
                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                        • SHA256 2705b9002a8b7992886f74827e47ba17d9ed5530191f198613c105b7dff1f1ad
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        74d7f43c1561fc1e.customDestinations-ms

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74d7f43c1561fc1e.customDestinations-ms
                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                        • SHA256 247fec3140c27bd4402065ab53077789f005611492a6f9adab3d43c4a96edf22
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        ml.xspf.tmp4100

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\vlc\ml.xspf.tmp4100
                                                                                                                                                                                                                                                                                        • Size 304B
                                                                                                                                                                                                                                                                                        • SHA256 81970dbe581373d14fbd451ac4b3f96e5f69b79645f1ee1ca715cff3af0bf20d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        vlc-qt-interface.ini.zOw996

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini.zOw996
                                                                                                                                                                                                                                                                                        • Size 799B
                                                                                                                                                                                                                                                                                        • SHA256 0cd35ca0422a610c99dd493bc09e15c262735b934fe54fbf30cf89841b00de4d
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                        vlcrc.4100

                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\vlc\vlcrc.4100
                                                                                                                                                                                                                                                                                        • Size 94KB
                                                                                                                                                                                                                                                                                        • SHA256 0aa66bb67e2cd111cf3b860777b321c95cec2ba68a754b9a5bf31908fad54bc3
                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                        memory/784-212-0x000001F980CB0000-0x000001F980F6C000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/784-195-0x000001F980CB0000-0x000001F980F6C000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/1232-24-0x00000165801E0000-0x00000165802E0000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/1232-23-0x00000165801E0000-0x00000165802E0000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/1232-3401-0x0000016587120000-0x0000016587220000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/1232-25-0x00000165801E0000-0x00000165802E0000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/1232-65-0x0000016584250000-0x0000016584270000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/1232-32-0x0000016582E70000-0x0000016582F70000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/1232-38-0x0000016582E10000-0x0000016582E30000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/1232-31-0x0000016582A30000-0x0000016582A50000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-3977-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-834-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-209-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-211-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-2880-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-4781-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-3943-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-1664-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-4003-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-501-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-699-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-4765-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-4749-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-2998-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-4207-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-4717-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-194-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/3688-3198-0x000000000DA90000-0x000000000E30B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4100-4778-0x00007FF6C8120000-0x00007FF6C8218000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4100-4779-0x00007FFEE4D10000-0x00007FFEE4D44000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4100-4780-0x00007FFEDB0D0000-0x00007FFEDB386000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3963-0x00007FFEE6C50000-0x00007FFEE6C6A000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3953-0x00007FFEED9C0000-0x00007FFEED9D1000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3947-0x00007FFEF0DC0000-0x00007FFEF0DD1000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3946-0x00007FFEDD610000-0x00007FFEDD8C6000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3949-0x00007FFEEB780000-0x00007FFEEB7A2000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3945-0x00007FFEE6D00000-0x00007FFEE6D34000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3944-0x00007FF6C8120000-0x00007FF6C8218000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3950-0x00007FFEE6A80000-0x00007FFEE6AAB000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3952-0x00007FFEEDA00000-0x00007FFEEDA14000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3994-0x00007FFEDD610000-0x00007FFEDD8C6000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3993-0x00007FFEE6D00000-0x00007FFEE6D34000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3992-0x00007FF6C8120000-0x00007FF6C8218000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3956-0x00007FFEDE030000-0x00007FFEDE118000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3958-0x00007FFEE37D0000-0x00007FFEE3811000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3959-0x00007FFEE5990000-0x00007FFEE59BF000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3961-0x00007FFEE37A0000-0x00007FFEE37C6000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3962-0x00007FFEE3770000-0x00007FFEE379D000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3948-0x00007FFEF00F0000-0x00007FFEF0109000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3964-0x00007FFEE6BA0000-0x00007FFEE6BB1000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3966-0x00007FFEDC250000-0x00007FFEDC45B000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3968-0x00007FFEDDEF0000-0x00007FFEDDF3F000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3969-0x00007FFEDDEC0000-0x00007FFEDDEE5000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3971-0x00007FFEE40D0000-0x00007FFEE40EB000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3970-0x00007FFEDDC10000-0x00007FFEDDCBB000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3972-0x00007FFED22D0000-0x00007FFED2515000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3967-0x00007FFEDDCC0000-0x00007FFEDDD58000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3965-0x00007FFEE41A0000-0x00007FFEE41B1000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3960-0x00007FFEE6EC0000-0x00007FFEE6ED8000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3954-0x000001F4E2110000-0x000001F4E21E2000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3957-0x00007FFEDDF40000-0x00007FFEDE023000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3955-0x00007FFEDC460000-0x00007FFEDC6F6000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/4916-3951-0x00007FFEDC8C0000-0x00007FFEDCC50000-memory.dmp

                                                                                                                                                                                                                                                                                        memory/5284-0-0x00007FF688FA0000-0x00007FF68A219000-memory.dmp