6a992a8387a83a8c6df99a2a4a77445a900e533a201cdc37127e85b4c49df87c

Analysis

user interaction
yes
max time kernel
299s
max time network
302s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 16:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
leakedTzx/tzx.exe
Size 12.9MB
Sample260718-vaxe2af13m
SHA256 6a992a8387a83a8c6df99a2a4a77445a900e533a201cdc37127e85b4c49df87c
MD5 54b615739a80f87023281da15b631a6c
SHA1 da36d18875b9943daa1c518aa84d0ebf0e7c68b7
SHA512 c21e170c34053a838ce91b2cfb6a8e342cf76d8837a74e643e8c2a26062d5d94a5adfd7465f21c7c091b08557a6e96bcaa07df7ec78e968d2ee6d25d615cb854
SSDEEP 393216:OhLMbDaXEAphVtnIUQSg+MPm5WtTLvu7Cvpl+:W4bDaRphDto+hWtHvu7F
TLSH
T157D633A872800AFAE8F3503C5D21C561F2B1B5002F96D2FF0BB44A291E3FAD55E79795
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution spyware stealer

Malware Config

Signatures

Loads dropped DLL 23 IoCs

pid	Process
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe
1768	tzx.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Executes a command shell one-liner 1 TTPs 2 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1660	cmd.exe
4392	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3704	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288668966040328"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
7416	chrome.exe
7416	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe
Token: SeShutdownPrivilege	3960	chrome.exe
Token: SeCreatePagefilePrivilege	3960	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe
3960	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1168 wrote to memory of 1768	1168	tzx.exe	85
PID 1768 wrote to memory of 1660	1768	tzx.exe	87
PID 3960 wrote to memory of 456	3960	chrome.exe	97
PID 3960 wrote to memory of 2488	3960	chrome.exe	98
PID 3960 wrote to memory of 2488	3960	chrome.exe	98
PID 3960 wrote to memory of 3704	3960	chrome.exe	99
PID 3960 wrote to memory of 4256	3960	chrome.exe	101
PID 3960 wrote to memory of 4256	3960	chrome.exe	101
PID 3960 wrote to memory of 2768	3960	chrome.exe	103
PID 3960 wrote to memory of 2768	3960	chrome.exe	103
PID 3960 wrote to memory of 3940	3960	chrome.exe	102
PID 3960 wrote to memory of 3940	3960	chrome.exe	102
PID 3960 wrote to memory of 936	3960	chrome.exe	104
PID 3960 wrote to memory of 936	3960	chrome.exe	104
PID 3960 wrote to memory of 1740	3960	chrome.exe	105
PID 3960 wrote to memory of 1740	3960	chrome.exe	105
PID 1768 wrote to memory of 4392	1768	tzx.exe	108
PID 3960 wrote to memory of 4360	3960	chrome.exe	111
PID 3960 wrote to memory of 5032	3960	chrome.exe	116
PID 3960 wrote to memory of 5032	3960	chrome.exe	116
PID 3960 wrote to memory of 4916	3960	chrome.exe	117
PID 3960 wrote to memory of 4916	3960	chrome.exe	117
PID 3960 wrote to memory of 4008	3960	chrome.exe	118
PID 3960 wrote to memory of 4008	3960	chrome.exe	118
PID 3960 wrote to memory of 4572	3960	chrome.exe	119
PID 3960 wrote to memory of 4572	3960	chrome.exe	119
PID 3960 wrote to memory of 2680	3960	chrome.exe	120
PID 3960 wrote to memory of 2680	3960	chrome.exe	120
PID 3960 wrote to memory of 1428	3960	chrome.exe	121
PID 3960 wrote to memory of 1428	3960	chrome.exe	121
PID 3960 wrote to memory of 4560	3960	chrome.exe	122
PID 3960 wrote to memory of 4560	3960	chrome.exe	122
PID 3960 wrote to memory of 5720	3960	chrome.exe	129
PID 3960 wrote to memory of 5728	3960	chrome.exe	130
PID 3960 wrote to memory of 5736	3960	chrome.exe	131
PID 3960 wrote to memory of 5316	3960	chrome.exe	132
PID 3960 wrote to memory of 5316	3960	chrome.exe	132
PID 3960 wrote to memory of 4680	3960	chrome.exe	133
PID 3960 wrote to memory of 4680	3960	chrome.exe	133
PID 3960 wrote to memory of 5180	3960	chrome.exe	135
PID 3960 wrote to memory of 5180	3960	chrome.exe	135
PID 3960 wrote to memory of 5728	3960	chrome.exe	136
PID 3960 wrote to memory of 5728	3960	chrome.exe	136
PID 3960 wrote to memory of 6036	3960	chrome.exe	137
PID 3960 wrote to memory of 6036	3960	chrome.exe	137
PID 3960 wrote to memory of 4436	3960	chrome.exe	138
PID 3960 wrote to memory of 4436	3960	chrome.exe	138
PID 3960 wrote to memory of 3220	3960	chrome.exe	139
PID 3960 wrote to memory of 3220	3960	chrome.exe	139
PID 3960 wrote to memory of 4560	3960	chrome.exe	140
PID 3960 wrote to memory of 4560	3960	chrome.exe	140
PID 3960 wrote to memory of 6120	3960	chrome.exe	141
PID 3960 wrote to memory of 6120	3960	chrome.exe	141
PID 3960 wrote to memory of 6140	3960	chrome.exe	142
PID 3960 wrote to memory of 6140	3960	chrome.exe	142
PID 3960 wrote to memory of 4484	3960	chrome.exe	143
PID 3960 wrote to memory of 4484	3960	chrome.exe	143
PID 3960 wrote to memory of 4504	3960	chrome.exe	147
PID 3960 wrote to memory of 4504	3960	chrome.exe	147
PID 3960 wrote to memory of 1072	3960	chrome.exe	150
PID 3960 wrote to memory of 1072	3960	chrome.exe	150
PID 3960 wrote to memory of 1016	3960	chrome.exe	144
PID 3960 wrote to memory of 2484	3960	chrome.exe	145
PID 3960 wrote to memory of 1016	3960	chrome.exe	144

C:\Users\Admin\AppData\Local\Temp\leakedTzx\tzx.exe
"C:\Users\Admin\AppData\Local\Temp\leakedTzx\tzx.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1168
- C:\Users\Admin\AppData\Local\Temp\leakedTzx\tzx.exe
  "C:\Users\Admin\AppData\Local\Temp\leakedTzx\tzx.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:1768
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "ver"
    3⤵
    - Executes a command shell one-liner
    PID:1660
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "ver"
    3⤵
    - Executes a command shell one-liner
    PID:4392

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffbf2a3c728,0x7ffbf2a3c734,0x7ffbf2a3c740
  2⤵
  PID:456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1788,i,9827245639765713600,16505684089701364830,262144 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1664,i,4332562340353134048,306512197163349821,524288 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,11612035047109346198,16775489455552141388,524288 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2356 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3188,i,12818410991990256408,1009995095324140190,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3144,i,5108517178521069627,13605595082371580309,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4324,i,18332718765695525403,7601517425458367601,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4752,i,7453366356297257525,1545251821051847080,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,657006193448172635,1225929370062911492,524288 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5764,i,1568515003100322180,12728338305938528040,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5772,i,13487173084687603199,3074657679853531833,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5860,i,8554623692428644728,5390170160216131007,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5812,i,640741374149822853,11131673718154806217,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5924,i,4456726537741453950,2832444219679434471,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4784,i,1383830074039797407,12396680189214861450,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5920,i,5352927682876690063,11570356321047349825,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3356,i,15789172706239085049,7528472929832123078,524288 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4604 /prefetch:8
  2⤵
  PID:5720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4772,i,12703914862257618086,3339959355686893662,524288 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4816,i,15312970048816554618,4865685219761977913,524288 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:5736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3664,i,1128429018450862978,5894488121446986175,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:5316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6252,i,1640926039245414198,16204795227688044201,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6408,i,5560852619911436302,2251439154811391415,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6428 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6648,i,2484089745221748503,13877669189412063075,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6192,i,9162784263545104198,6011440061246346147,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6700 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=7076,i,9963513573587617636,1474803773129739074,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6276 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6952,i,12502914049627169670,6134505071386795115,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3712,i,17907556338356033919,2356070588650252300,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6088,i,7495318843913886728,11057676600896288521,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7360,i,5095747490623372269,6748562944497160310,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7380 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6080,i,3968785525040310597,13156378306573313964,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7148 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7448,i,15427797361090446068,10714858132227644551,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7464 /prefetch:1
  2⤵
  PID:1016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7492,i,5652850574821800775,6959927697955950159,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7532 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7508,i,17481575447879134231,7569639264990871259,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7568 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7560,i,5945349917406296992,2172987666822785995,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7592 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7616,i,3218587927416738936,10240970457997353649,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7648,i,10644114881314984619,907525197431596677,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7708 /prefetch:1
  2⤵
  PID:772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7664,i,2583116523375198397,2793715521771393944,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7772 /prefetch:1
  2⤵
  PID:1072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7680,i,17684178923582463318,10576496432940208480,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7792 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8684,i,10333649920984987941,9655322296706922045,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8016 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8820,i,14676677346352323411,137280471800423892,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8804 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8980,i,5182487910779173012,6799630459154904083,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8988 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9224,i,9991916615649094551,8679118863035101969,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9248 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9328,i,6832712225058970883,9766933785662592522,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9332 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9480,i,5220576546335998516,108919556063078946,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9484 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=8964,i,11048714276957350354,14877496937761118667,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:6400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=8920,i,10253825472128300798,4082000178828481634,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9464 /prefetch:1
  2⤵
  PID:6408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9468,i,887615068810627328,3426918153329336191,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8840 /prefetch:1
  2⤵
  PID:6616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9624,i,9894911938497924993,6507394334447164839,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9912 /prefetch:1
  2⤵
  PID:6624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=10024,i,77784194410650363,6032057432259295889,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10036 /prefetch:1
  2⤵
  PID:6676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=10184,i,11130892025884459579,10132380111062278474,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10188 /prefetch:1
  2⤵
  PID:6732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=10324,i,12284483121629533905,3583068000671651612,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10352 /prefetch:1
  2⤵
  PID:6784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=10284,i,558025347864128694,4894060009270390367,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7340 /prefetch:1
  2⤵
  PID:6836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10636,i,2071514833336308655,225538225616454982,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10656 /prefetch:1
  2⤵
  PID:6888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10624,i,5739695659935952889,4071992115979661959,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10812 /prefetch:1
  2⤵
  PID:6940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10640,i,15568383906179864583,2234923668679400376,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10940 /prefetch:1
  2⤵
  PID:6992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=10624,i,12556220264288701586,16284568095870498176,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10900 /prefetch:1
  2⤵
  PID:7036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=10776,i,4989238564946333142,3266572045362301481,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11192 /prefetch:1
  2⤵
  PID:7088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=11300,i,3433993329323088376,2001814408375910624,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11348 /prefetch:1
  2⤵
  PID:7140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11512,i,10148816771691192912,2075259413467131348,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11492 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=11168,i,3530691682640469817,7626603592431417608,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11676 /prefetch:1
  2⤵
  PID:6296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11756,i,6564472202481026802,2492742644291097402,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11780 /prefetch:1
  2⤵
  PID:6528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11940,i,5436425983567890596,16721518451545143873,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11912 /prefetch:1
  2⤵
  PID:6584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=11960,i,11886855231050489346,5007822195188296214,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11956 /prefetch:1
  2⤵
  PID:6592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12228,i,8515589362532533817,18173261443977493914,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12232 /prefetch:1
  2⤵
  PID:7212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=12348,i,3375755311566936772,16946618832486101618,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12364 /prefetch:1
  2⤵
  PID:7220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=12540,i,16302335834375043123,15049046740456321518,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12564 /prefetch:1
  2⤵
  PID:7316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=12484,i,14349507540008084541,10505274059668769811,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12700 /prefetch:1
  2⤵
  PID:7324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=12184,i,17997574462908693062,2610185474257789577,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10920 /prefetch:1
  2⤵
  PID:7416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=12832,i,1319667513286280262,6469939692355139334,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12824 /prefetch:1
  2⤵
  PID:7424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=13040,i,3703923611390480052,1361489454017280483,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12488 /prefetch:1
  2⤵
  PID:7524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=13020,i,5895001824907584024,4217055729785982230,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13088 /prefetch:1
  2⤵
  PID:7532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=12580,i,17543648879677832816,5028552606042715915,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12844 /prefetch:1
  2⤵
  PID:7652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=11932,i,2166232094240094503,15608236426898158755,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13208 /prefetch:1
  2⤵
  PID:7660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=13564,i,15022495132604423506,11804464107994128036,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13540 /prefetch:1
  2⤵
  PID:7712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=15208,i,3393492260225183139,2961106424173864865,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15216 /prefetch:1
  2⤵
  PID:7768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=12792,i,3672535923800516716,391566800847112243,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12788 /prefetch:1
  2⤵
  PID:6544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=15224,i,3860498052259138663,274471709426046444,2097152 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12688 /prefetch:1
  2⤵
  PID:7680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=15220,i,5920992535506639330,12243395857105278764,262144 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10672 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:7416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=15076,i,1615039769431308795,8530944527569543543,524288 --field-trial-handle=2020,i,10799256758389482666,15179700224686828259,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15144 /prefetch:8
  2⤵
  PID:7632

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3888

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:380

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:7516

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 57ef67cad8c1fb007425db976d80f53d92a8053c56c99bd627be85a6d91d7b91
MD5 f219261372fd7e01af693de8d200039b
SHA1 3883dac3e751159102808251e329d2ddea19644c
SHA512 79429f5f6206e6f01df53905cf649109eb8ae53b5b92a5578101c089ae7256294e23624d5b26db54b167bfaa77c5b4917935da71715f042424d1b451dfce8013
TLSH
T11DE02BAECC229C3718F91B3821140745E75413267F90D90F3B3DC30C8FB6A3A456682C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 38KB
SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
MD5 9436affc97843765a966b3568fa7e5ec
SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
TLSH
T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 114KB
SHA256 785451e202505e2987cd4a4886444d30fccab61341ead740bc6b6aa7894c815e
MD5 017cce08e6dbbee1af24d998ea62feee
SHA1 f73a9454416f86b2fa67cb28ea95f2c9e4fc74c7
SHA512 780e084ab736253b8606eef8ba45d401fc3467e2b64ee8760fa5d001fa12a0f566eb15ec149c43474beb1e65d01608ae853079fe7da131a11ae6dc70cfeca86f
SSDEEP 3072:rLOjBiikoVm0Ji7iR3NL4D+Tk0Gb1HJhh:r+BrkoLE2dUDrFNJhh
TLSH
T116B31288FC2919F248D8381A11A3771C9269F2FBCD3E8B91B8DFFA18C495A5B473505D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 82KB
SHA256 7a6f21721cf7a54d8c517ee4b13105dd9cebefd69c73df6b5b0bcbe6cd17f493
MD5 8148326fce587535de762f006257955a
SHA1 8ff00d217f6d5ab1d78ff1028ccb099a0863275f
SHA512 9ce3f942d4f916b7d98618d345f389dad1cea9aafb65e31e3c9fa1730c3b50d84ed815fce9405b2ffec468e4ce361129ad6ad80c97398520a6c8db3b0fb8b30d
SSDEEP 1536:TP1iF3C+CyRfnF9Hsa5YtplkbEEoIbw8i/6E09P/QOz+DWWpro05F5aUXADA3P:z1CbCyt7K3kbEhF8iCTP/QsrWpHT5aWH
TLSH
T1308312F21CF1AE1573943CC9AD09213508D7EDE54CCE6AC0FE19693C21B29B73A1E628
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 513KB
SHA256 9d11fb93093fbfbf4ed6b0dffe52dc57f97d0d9e065500503889b8b62e38e14d
MD5 4f2f93224750a2827af7b114811a3aab
SHA1 da3b360c3be892ceb98641b98108640819b96075
SHA512 8d62eaf5016cb6d746bae34d17052d4483b785835321f15d7d0d82644fc5ce02ffac2f9b93f8b4f7e5958ec16377bafa9e2396bc56a7ece6eeb53cad39c145b3
SSDEEP 12288:Q8NSimUMl6g6y8rzbBhlIzF9WhACDCQMZLFqpPKmhi:Q8ciPK6g/8jBSnWhHDGZhqhvi
TLSH
T17EB423E1941FCB6D69AAB06C1BBC3BEA87D44252D8C2E515C31B4096DE3B0B06C756FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 88KB
SHA256 0cec1788b7f22011ea498fb13821763faf192a738c23ee793feb71a9251d3b97
MD5 a2279f6f16386a9ce3b107d0486166e5
SHA1 6c912fb57f496c1e8d790ad1d295a3a9d9184a5a
SHA512 0b729461eebf476bdb72020f907c1364d26d6ee3f29b05ced8143b768f75458d72831309e09e21f27b249b646d926488582c1163bed891f4491dd7f02bece88d
SSDEEP 1536:2w6ADCuC9e+5hM9ZkI/F8l8Pkxc9Kd8mNuvdcbO76CYHnWW0uFoVz+t+:iU1+5G/kItTPqc9oAcbOO9HWYTt+
TLSH
T14C9312043424B58FB052F4B8A3F99948007F871D7E7F318F2BC56BD2AAB5C2550EC9A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
Size 25KB
SHA256 476281e78b46bf0abd2bffbae3f3c97ec2db1e4a80a3c63105d0e91404f467c6
MD5 e420ba67fde74d86468f3e7d06b1735d
SHA1 2a11a95247d607b97f1f667f799c152b49106436
SHA512 01728b65bfeee1847dc06e4c8cc663bd5d27a016ce062c9ddf7ec13493658463758c513da61bf9fa957fd86d978682a3d66c3c70faade348bbb6fafc85ff6cf1
SSDEEP 384:PxGeDvrtajMRlGNRkOJ8j2EhYxAcV85DeHniXp7kCk6ri5dOXmhX1mcfd/LeXEmk:Jx5RlZOJ8L11DciXpJNrgUmGcfd/T
TLSH
T1CEB2E1634CADD672667F6B0662A4C24CCD986E80D07018C796EE3DBE437DA19CC3860D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000038

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038
Size 61KB
SHA256 dfb80ee5b241069f406be3ea4fd3290cda6226f41dc6e7b353f7bfc3314b4f12
MD5 6af8356e0c45cbe4ccbe4611622bea84
SHA1 4ad5ed7d920bfec3715a27e15b19dfb0ee166c0f
SHA512 dffa9e16524e67b8db7666901330a426f72d92a88a519f7549c6a633f0177317689099eb3436f38788e65e60dade00e1788b7643e04975fbda5c31cee272f28d
SSDEEP 1536:0ba94kop65L1QBH0n0CDsSwt6kXKzSFNuO/A+X:d98WLSBlEKt6kXKDO4+X
TLSH
T1EC5302446F80259DFCF31D9464904BE48E559AC35345A809CF674DC2EF78889E3CB79D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000039

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
Size 55KB
SHA256 f2f099b1af9dae3b342ae3fd46ae8e6c053ddde66e15cd71ad30f7edbda16d69
MD5 6c8c3e4643b00e36e945d61b9183ca69
SHA1 706db8a4f6895080a748d17c4a04e46692821795
SHA512 e9687f9e524828ca88c86a76c2f5672110fbcfcc4b61b69a5cdccc371c8bdced0ed0ec38afd375e388cb8b5715a322047991803e9b4f5e924894477147dc0620
SSDEEP 1536:dY1tYnJXLHwf2C2gUTIjafyWGlUMAL9S87ySU:q1tYnJ7HwLDDWtMALc8Wj
TLSH
T15A430208A43A5A966920998BE653FD9AF37BB573C90017F1DFE87B51104048F1887DF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003a
Size 77KB
SHA256 7df4194a1dc8bfdc2fa37a1807fe55f8f4816df9529433a27146ef0c816ed90a
MD5 59d6fecea03a1ea4d99d94aebe6c9439
SHA1 8f20106c082b059cb3e06dd7162e612dc1da0a76
SHA512 7b09b62fde77f6f7dd8d202144c850e2245c26071c3ddfd2637cbce49e143c221173ebe3765fcb46596ea6236ea0ef326cb3b1c21151c306091f1f3192d74062
SSDEEP 1536:3V3YtmHk6dJeB9+vIttDadNBfikP82V4FeMq6+we2464/zQGLUTS:lIqk6JeD+voDadNB6UaFeIB4/fLUTS
TLSH
T1DD7302308846BA077716C4F4489ADBD680DD6AACFFE096D07980F50BD9DFD20D8B6E46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005d
Size 373KB
SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
MD5 ad6388a08d35f6d67db1213404b7f81d
SHA1 55cb415cfa760fb4beda8422d7c635cd4caf1915
SHA512 1b92070f13725fbe34b18dce86e09ee76536ef7dd7190f2c11d54f71b91acdfd40f03c8972a85099b988fae24eaec038be967cbe7b57783340140481b9362248
SSDEEP 6144:qm2dRYZtgXkt4w9410UKjgGHjMaP8RVkqSRhP58OU5R67u4nORWO7lQ8E9:C8tg599lGDBskZP58B67znOwGQ8E9
TLSH
T1A084232C983F6900BB0252741FD6C76E4FF40988A2C0D4C28254A193F9B7EA7F5A7779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000062
Size 97KB
SHA256 6e9619cbffb6bed8cd7172c3bfb896f170dd8aac932a3f1ff11bc035b9d53e6e
MD5 7d4f7c31059a29d5ca4bcc8c3090edce
SHA1 1ad0961998e6fd8a57ef2ef6ce4bdee9fbd555f5
SHA512 c283558d93643e09adf26081eee657f56f1699ae7f25a26c25ac19bd6372744b983751ef58cb88f632c1b67394643fa2ef8e6f8d61bfa39887ccbd8ae2f951a2
SSDEEP 1536:c1Ah0NShqi8NjZ+0sw9S54zgbiEvgZXRkSr/TSg:cvN19v+ZwY5liEyS6TSg
TLSH
T1C7A312EE8B71C246E90D57294D20724EBE7A834417C8AD26FBE1F713C6C4091CABD746
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000063
Size 100KB
SHA256 1612ba9b45896783e67ff0421120e16215cb84d6874c5a23d27ee0de058d057d
MD5 da02aa867f81f529a03fa6b85c99e40c
SHA1 ab54f2f268af090293cc65aaa10df8bc52301f1f
SHA512 eff2d27f780006d1b6072027887d97b0dc991100cf2bc485421cad9bd6a3d1b4127867782ad2210b7ccaeae09bdf92500774d8b5391a20db2306a0851e88bff3
SSDEEP 1536:RAoV3Pez7FqC6fVPqF32w4tYNVpBDRchoiNlSGcqpvBHcdLoW:2oVfezV69P22F+n/e2iltptW
TLSH
T1F5A3F07A3385FB87D2482B78C302441B6C737E19543ED984EDD694B284763A8BD71CE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 70d35a53cfa84a7830b9d27181046e4676d571a05740254a90bab1af5c22b396
MD5 3e756c93071eeb17b5fe03d4851415fa
SHA1 a2de0f1838b2cdd421fd933372bd5feb0d0a0dbf
SHA512 176fefaf7a3bd3f8f592922dd1307ae84adaa1542c84417e16737a62bdb68d18cdc91dbcead19b339f5cf26b81ca385771cd043cc93cbecbffd3903fc47b237b
TLSH
T12E81FBE8A252CDE7FF76C934A8D51C047A34A2BD4E070E8A5245D434DE537F5750287E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 49KB
SHA256 77461c42eb0e9b39a80f6f2d4c61e1e1dee8b82dc0a4104cdae299b8e9ce291b
MD5 83fce6f005078f4b6f5a52a07508b60b
SHA1 bccc22f5592782302a53f9da084949d34c7279eb
SHA512 0477ec009ccd528157cf4662155d752574d3c3c70771d97cb526c0515f0da93a2ee0275acef48acf7788169fb872087bc3d3d6d2fe236ab7d4005bc512cd052b
SSDEEP 384:DSzkwTO+jBJTJSPdUNbe2WerQGQvZJgJYRV5BesD+vZJba3RnLHO3mawSU4JWxjI:01SS+irQZLmG/4rvi3t2VEupEZYbgFwF
TLSH
T15233AEF783E4897DC91266F09E246E1BCF5D0569031C3C7B8AE4BE5753E6832E29160E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 38KB
SHA256 0f1fdc131317d1095c3897028991d7c92a7a335a2ee0d844f1196f6ffa9dbc28
MD5 67a9c93874b783cdb50b8213757e6940
SHA1 49bcf661f6fa1c8072411b7d21d9570020c00371
SHA512 d3787d0e53fde600057c037151aa83c583f3a17166b5d4b191f2cb83cc626b2ffaad14749cb677f965a8c51cba2873e0c042e716120c88bbb872a64b17deb27a
SSDEEP 384:DSzkwWO+jBJTJSPdUNbe2WerQGQvZJgJYRV5BesD+vhaZYSU4JWxji8FOS8+1UFm:l1SS+DdrQZLmG/4Dvi3t2QJHN
TLSH
T18903BFF7D3E4897DC91266F09A242E1BCF6D0569031C3C7B8AE4BE5753E6832D29160E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 52KB
SHA256 868c11e39006147cb178c74f1d1cc899d5b3e1e7ed81ca793974eca6dd31f1a6
MD5 56018b055f3c1072ce06259e5c3d78d0
SHA1 e023861db23f7651a86ad6ca81b89289a2cfe435
SHA512 7685eadc79f7d36a7688b4d3f517fc83d580ac2336dfa5c390eaad300294913ee1a66ae9d95c17159dd3f44ef4801c08118a879269a407794843468532c77495
SSDEEP 384:DSzkwTOgjBJTJSPdUNbe2WerQGQvZJgJYRV5BesD+vZJba3RnLHO3ORqD6ES8ogM:K1SS+4rQZLmG/4rvi3t2VEuMgRCCZYBd
TLSH
T1E033BEF783E4897DC91266F09E246E1BCF5D0569031C3C7B8AE4BE5753E6832E29160E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b8333ad188cdb978c068aec99915a446ab4358a4c8acb4af303103674d3c8357
MD5 d91dda64f5651ff1a9ea2e60b988c6c7
SHA1 c37a0cfc1bf10a8ff85ebd64bb3de2e61ddc3daa
SHA512 d1d918cc8d2d1110dea3f645c1614221ea5658834fe832bc9c5e17b5eeafd7e10cad5a0c68a3cbbc3ab34b1f8835a31cccab1f619cc85a411998c8eb92ece95c
SSDEEP 192:ARiVuKDsf61GlDv7chAPRp2qg9BHsb+WNnk40/PkrJJVyIsnAUgtaJ:ARiVjy7w8Xlgrwz0Hov8
TLSH
T11E42C82EAA2069BB5CE7D229FD257B53E7F5102225942EC4E6FC8A2C15E75CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 e769626e1ef2e8ee888f2849ba7e30119e33dfb106fc68dc52797daa72842188
MD5 8f15c84055e8d07688116f79539a430e
SHA1 bd9add392e177576a35b787deacfc094ba80c329
SHA512 3afed2e56ba24eff3005d0f0d682cd12db745468c049984029d52f98b31de8c521b85b46c2634816ff8fbfdc87f451ef385afe58036412121655d5dce9dc2ff4
SSDEEP 192:nRZcBzVuKDsf61GDtv7chwPRpOq/FNwLuXaT0F9BHsb+WNAOfurLBCqxRN8aPkr2:nRZmzVjgNw8XNtXrwA9VR8IZOe
TLSH
T1C462B62BA92069B79DEAD229F9157B57E3F2202265D41EC4E7FC8F1C15E76CC220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 9d97de5282142a058fb0320740738169ef377d8eb06535cda2f19d312ae17f89
MD5 f000ef85db8fbbdcbdb7e76a800e5341
SHA1 2840f4e520ff7ac0497a7b264492b141e206290a
SHA512 ab9cf08ddef7388a19858aad459e1d4dbfab99f25a2667e2a1a5e9ee434d481d0ea225ab7a7fb7fd747f82575d14eea33ab18b021105b7237c5240e3a6a0b9af
SSDEEP 192:nRgcBzVv3KDsf61GDtv7chwPRpOq/FNwLuXaT0F9BHsb+WNAOfurLBCqxRN8aPky:nRgmzVIgNw8XNtXrwA9VR8IZOe
TLSH
T19C62B62BA92069B79DEAD229F9157B57E3F2202265D01EC4E7FC8F1C15E76CC211740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 75b37dddf17f0ec906c0558b09214e0305b9d5dc2d94e17181eba5aa5675aabc
MD5 7d74a668e01afd6bcc890b9e4e73aff2
SHA1 cfc884734b210a912bb62f668b1b0c2111f3d403
SHA512 d2fa30b4d1a723f8402e43a47d1cfed8b0ea6950930308b9aad15217f87de62f6734ee488631f89cbed8904f0a66aa5ae1bcb4a6596b18a7a1c44bba027ce707
SSDEEP 192:nRgcBzVuKDsf61GDtv7chwPRpOq/FNwLuXaT0F9BHsb+WNAOfurLBCqxRN8aPkr2:nRgmzVjgNw8XNtXrwA9VR8IZOe
TLSH
T13362B62BA92069B79DEAD229F9157B57E3F2202265D01EC4E7FC8F1C15E76CC220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a6c612c53b2b13bbfec4bda9b2daa2cdaae4c7eeca915fd68d27acc9c99b73f0
MD5 79c248fa135560571ad3ecf34b7ce5f8
SHA1 2b7624224948e64410cf9642a389bc2c89b3696f
SHA512 5cb1e1152de9bb32ce02216aa5f6f5237bb9116bd975b801c770bb1396dae746911d23a83172456d60c32ab44f09d42472439bd8fa2cf8d603daba4b8a61e68a
SSDEEP 192:ARycBhVuKDsf61GlDv7chAPRp2qWNwL69F9BHsb+WNAOL8k44oc2TPkrJJVyIsnH:ARymhVjy7w8XlWlrwAPw2bov8
TLSH
T18252E82FAA2069BB5CE6D229F9257B57E3F5102225842DC4E7FC8E2C15E76CC321700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ed0af2ff1fe10c15037708599754e57fd3fd4c74d4dd46b52013e2a1e0fc90ee
MD5 acf76fb9ffacf9f92dee163b306aa16b
SHA1 a6e3ef5a4d7a76e26591d1399a31e5f30bb86e82
SHA512 669be49e642e260b8874fe0756b7dd59d17c1e10a6923d731b93c2d359888afba525bad0b2e7cc7c6b7a3bffcf20b3a7a8842a9ac40020394dc3995653b18974
SSDEEP 192:nRycBzVuKDsf61GDDv7chAPRp2q/FNwLuXaT0F9BHsb+WNAOfurLBCqWqPkrgJVK:nRymzVjg7w8XltXrwA9VWYFve
TLSH
T1F962B72FAA2069BB5DE6D22AF9117757E3F2102265842EC4E7FC8B1C15E76CC221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 2780f08cb0496667d6dc4531e70212a1cb618c2d68293ee9958d88dc1e52be75
MD5 1c4e94b7fdcc2d98300648a08335357f
SHA1 7171805db11870e31589f5ea5c754e5d4a0fb39d
SHA512 6626073a56956fbfd82a56811b9c7413fdf0c2aa1c81e59e6a162c152e3d99ce8ae5ae38a5642f3fc905ecac280525b739067168c6633acd8defbe5a6774176e
TLSH
T10CB0124180015522C01202F816C2149872189F10970E3B0543E06DA3DC392948018090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c435.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c435.TMP
Size 96B
SHA256 c1f0e3bd18fa226b43e2685ae714358f85f28831c737138efa57ff3bf04a4778
MD5 1f3f44b6093613c972910b9bcca0239f
SHA1 8ab7afeda7acd6f77248de86525e61f76d3bae59
SHA512 84ad485422d77c3560e580d2124896437c43f674abf9253a16915af9387c96db7a762db44601a1a3916bf8e4305098aca092946251c444d3e027c26d73923312
TLSH
T10BB02200C802222BC08203F02C8080CC30A8EF20C2030A02E2F02A2ACC30AE80228022
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 450d5a31848a3e59e534640cfb97f501777e8c26a88a76b08d3fca8e31ca278a
MD5 eff51b3dff4ab4ff18eef649ce6e1c68
SHA1 5eefdcd96ee41ad53491c2cfec38d1731716c7f5
SHA512 4ad46c7724bd34e5637aa4224472cc817f12113b26cd7ad2b7e16d695e34bbd50817f791a6010546912d670f1e0e198cdbb5fc3e985fef1a810b13de650b5728
TLSH
T18CB0118028C0BE32EC88E33082C2808832A0ECA082A0A203A0E0088BC8032C2800220A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 a0b3ed1b8285046fec965337f81714bdce140f3854ce45e16c1addeade77b49f
MD5 ee430d28d3398b74fcd0e70d1c9fd05c
SHA1 5fdaac16c35b177467d827dc8d3ae0159783c818
SHA512 fabd505d5e119789d21f42d32cf00afc94e3491e6b1c9d642872793799036a40d6f59bf11f0d4dffcabc06844f14a9b379394e1812861fa02e5b6c289921ca11
TLSH
T1BEB0012D1199BE26ED98877113C2589476617990A3A29192D4F4105A9A16283A312616
MD5 SHA1 SHA512 TLSH

Submit Download

e693cf85-6a4d-4bbc-af2b-b28cc79bf4d5.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e693cf85-6a4d-4bbc-af2b-b28cc79bf4d5.tmp
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 4a8330498428e930d8e88af583e121b62c0ebacae771e3745c229a5087e6eccc
MD5 5401435c74cdef59148f9846868330e1
SHA1 5314bf5e8c204ccc5f30ee775457076e72f26649
SHA512 b62650f0aa3af209096881c1b0cf07d9c9c21cfb21d7c95723729f1418cdf0d715596d4d3eb0e50c361db24c076bfee85c747df32a50378dc5c777d09653cf6e
SSDEEP 6144:Yik4RlER6EtbaSgZoh0KepeBf2LcFmUi21rSm8uUVNSlzYa:YiHERLa3KYe9fi21b8j8zT
TLSH
T14E342324E577F971FE1D205872DF7719DD2891E1D6DAC0C68332A601E5FA3C30BA582A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 bc4910f967aaf6fda2fc59f4021396295114e975f01d41a348d2805123f3807c
MD5 5a16d33de0c07349693bfbd1235eb76c
SHA1 53f2251f541bfdd8ba6c814e5f2cfb8fa4dee8d6
SHA512 dc4e0fe41cfac8e70ae2fcc3e87c092a2d65619b01461f5aa11b92b9bbbf4406201afde92776036e3070dce95bfb6ad7cd996e3a7a4caaa5f8d259c17edbe660
SSDEEP 6144:eFik4RlER6EtbaSgZoh0KepeBf2LcFmUi21rSm8uUVNSlzYa:kiHERLa3KYe9fi21b8j8zT
TLSH
T1D5342334E477B9B1BE1D308872DE77199D28D1E2DAD9C0C64731BA01A9BD3C31B65C29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 7db98ee50c0448a0a3cb16f893d4754e5cdb606e9d5cd7971050011d2671ea1f
MD5 895fdbe5d110d886fab5e52b0dbea2f6
SHA1 931db253b52baa96ddd69da227deb10a33350ecc
SHA512 1ecdc3d94840f4a455f45def11fe4c5b2ba54ef452948a4e7482e5892403648100987509b4827ff6e7babc0985e83210f46dc1b503b9aeb8a105e5c25ea8c0c8
SSDEEP 3072:SBFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:kFmUi21rSm8uUVNSlzY/
TLSH
T19DC3130076E3E8F2EE5930447BEE2A145D6C0D818291C6415773AD419DEF3C71FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 2656d5bfc99b8cbbf6f635e6be814c4635cb76cab38bd2e0b91bfdba2ff5435d
MD5 794cafbcda82a0fc8458b6cd429a7f08
SHA1 3adef641ad63f5a07fe154454d79762cbfefe906
SHA512 afa72b3ffe0223c9cd7c6068d225f830fe08c8be255f63dfd882c861d4f3483f79e68b85bdef8f13552802527105cd5a45c8f94fc0529522e054d94d969cfddf
SSDEEP 6144:+ik4RlER6EtbaSgZoh0KepeBf2LcFmUi21rSm8uUVNSlzYa:+iHERLa3KYe9fi21b8j8zT
TLSH
T1C4342324E577F971FE1D205872DE7719D92891E1D6DAC0C64332AA01E5FA3C30BA482A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 16d37893575054f95a9bdeae20a9ef84d220b687f337ebf383cac6f823ff8f9d
MD5 138127a93a1c47cf107beda7acfea2a6
SHA1 1f521b81f52f9fc549d43f687d846d5a24a7a6dc
SHA512 71052c24e1a56f7d2e69044aad9906bb50b54144ae7d7be05735d5e8f866d9af22b71cecd90a82df10e80e43b2f9acfa082de96dcbc012f7a8b88ecc5ac7d0f7
SSDEEP 6144:mFik4RlER6EtbaSgZoh0KepeBf2LcFmUi21rSm8uUVNSlzYa:MiHERLa3KYe9fi21b8j8zT
TLSH
T1CD342334E477B9B2FE1D208872DE77199D28D1E2DAD9C0C64731BA01A9BD3C31B65C29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\VCRUNTIME140_1.dll
Size 48KB
SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
MD5 c0c0b4c611561f94798b62eb43097722
SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
TLSH
T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_asyncio.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_asyncio.pyd
Size 76KB
SHA256 dc6db118862ab3298e55e0f7c44c2c0dae4af9e810d2578271280202d6aa098a
MD5 1a44ebfcf46c66c29212b0063f68c9fc
SHA1 927408b5ccd9af96f1311d9d2cf87a9e65fc98e5
SHA512 fc3a1c9bfdaf3f587e0c06eb97f549b7c802cc1ee40461709b65f91117fb47d9f98b7d15d90c4b38969da0c9c6e9893b4469edc9c6d322328edc999956b8b157
SSDEEP 1536:ybpJfNBXdvQSvyhoIGDnMPy1Ni9EfILaqn:ybp1XdvQSvGoIGDnSzn
TLSH
T12A735B8792A44186EEB79178CF536FD3FBB0F1855A00935F5194C18E2F533A18BBA322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_bz2.pyd
Size 85KB
SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
MD5 207d4a4b7a113ef494514918f2dccdf3
SHA1 74b59453b5bb6194e0d2587d26d499d0f7e1aed5
SHA512 f7e5a2608ee19fd400d4bfe27e8603289a219af6a4a4a9e65ebb76c715d926fb9b08293fc2a3fed2195784804764265fa0b356547f23c501ec8ff9487c948b27
SSDEEP 1536:xtMtz7eksNCb6YVVEFxO2RqOyuzotWw8pRbIiQIG3VTy1Ni9QfIY6utw:PMtzSqurjOqqfgotWrplIiQIG3VtKtw
TLSH
T14A837E86B3B462B6F59B81B496910353F730FF960710A3BFB25482863F13B91AF58365
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_ctypes.pyd
Size 139KB
SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
MD5 eeabc0c7756ed7a29e33e467c398737f
SHA1 ec5c401946a9df4e4ab764ddb4639e4e33e1ce40
SHA512 5e1e93545e1be34880fc680ca12004792076e88baa6cac4512fdbbdb90091a9ae441a16b8d24f64c6b03bf14903babddecfa783ce5c016759ed790c0eabc189b
SSDEEP 3072:G/n1qQ8/27N56EBZrGwrb1OzIJswKRW2r7rw8IGGPzoGc:wn1JDT6wrszIJfUDwtc
TLSH
T1A3D38F4B336841E6DA678138C6739E47FBB1F4511A10878F4264C99B2F637A2AE3F315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_decimal.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_decimal.pyd
Size 283KB
SHA256 8d41a84db20a9b985e98c802ad6833cf9625c744ad35478dd346f54f81488706
MD5 4bebc4da7d6319283a8c664bfc55408e
SHA1 4dc69a8105272711673afa5f712af982a18532e1
SHA512 411cd0ee4189654e836579efb4df509a02cba39cd9793e6d7250aa4e239449dafb6936ac57cb8ee7bd97cf2fb178beea17f658bf6ae7149ed8ed927a7c47bdf3
SSDEEP 6144:ASM9SUWXvOOiSx1u8llV6zeGqqM43fIWeA9O8O8OOT6MPgz/:ASM9SUWfQSx1ucapLIz/
TLSH
T1D5547C52A3490CA4EF7384388A479A57F7B2B8414360D78F47A48A972F933E3677E744
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_hashlib.pyd
Size 67KB
SHA256 36ce760b9fac53fe51755f30a68d86f5fde89bf1b66c65c19e04aa3afa404ac2
MD5 dcf15b3e1858d9324be2c719e4e990c9
SHA1 8311c2fb0bb75342367a83fcca7161a0f7fadafb
SHA512 fa2783d0cbbba477a08bf4f2fa3df21d6d0bf5bd5bc7cef25254a3d29fc7d01229337ad5dd54c2f0e67b956fd43953aa98586240102511ddd48d04c674b7ff93
SSDEEP 1536:KXwAzOYBQca7JKs2+C5oIGDIUy1Ni97BfIkxd8:0J/yJKs2+IoIGDIm6o8
TLSH
T1EF635B8AA6984092DA2382B5C9E34F43F974F252271197DF6678C18E2F233C3573B756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_lzma.pyd
Size 157KB
SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
MD5 cada2b240b280f172aeb32a1666b21e6
SHA1 c15dc39329444433c255309eb89bae188aae1b22
SHA512 8b12298efd28549d46e2c48cff94b07039cf513bbac25063ebad8bae57b96e07eefd7df82229441af142c1b96dc837dec468263c0873d14da280e3ed6e42eb9e
SSDEEP 3072:BJ66g4T5QW7JfyjEqkSkA51b4pznfJ9mNopUpdbQIGI1HFk:BUR4Tp4QPZ8N4RxYOgbPa
TLSH
T110F34C86B794F0E6F7328C38D2624F57E6F578590320929A01CC976D2B1FB759A2E313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_multiprocessing.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_multiprocessing.pyd
Size 37KB
SHA256 9e87ce081fbcf0b6596fcba98e121379ad72a33d68e6b2af7a8bcc5b900229ba
MD5 f4c0f97d3ed7d0c07f86fb7f30e594aa
SHA1 2f06362552c005d36149d60ceab647754e17b3ef
SHA512 27aaa5979fe8aa3c01bf4838397b02a4a299bc7376e71dc695e80a7314f9f95e54b4eb8c4de511737676f0fe876a53df77e542dfebd86265daad70a4e03dd15c
SSDEEP 768:YFMV/e0XybycUlYIG7t2y1KPuBL2Ip4tTxf1ml9dHc7Lo:Yz0XybycKYIG7t2y1Ni9HfIbHcno
TLSH
T16D038C86A6380043F9678670C5A3EE87F571F7831A26965F3195D2CE1F373C1A36A34A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_overlapped.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_overlapped.pyd
Size 56KB
SHA256 ac877f3da413c1523c07b6a0dd1f7e0d7ceb3e8590a5e9e20a78eb1bcb700793
MD5 f2b6270e219a95f9055a6f7eb1baa231
SHA1 f6f4eb209a62151a1b21de64f5f9d52c1a063be2
SHA512 4755195491e389621ab6bf87d101ecba63225650dd2daf03775893990406313708030f962a70c17be43b45a3812297453cfe70d5fdf99bcf0cfa2323e8d34c3a
SSDEEP 1536:AsjKfS6rBgq/Otg4urMp0IGCtOy1Ni9CfIksus:ftgxrMp0IGCtGks
TLSH
T1CF437B4A579401DAEE73D279D1A39E03FB70B2D31601971F21A8D28A1F33792A72F385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_queue.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_queue.pyd
Size 35KB
SHA256 bb53357b4e91ac23ed4061f15ff3e5e91a5b3be1cbb0c6cf294521ae5b4efa1c
MD5 b04ab24c93d4d045a00ad6f2206b4287
SHA1 2b30376ae320223a4d4f93dfc460a9bae8df604b
SHA512 5033a0a39d0963c9a08a2a66b1522d6d9aba1eda925df7a33a05bcf607c2dd7b190fe3f426fb5c7563a5cc6b44005eb7df7aa81c045d7e5eeb94a0c0375dc0cd
SSDEEP 768:RJA4syt6hB1D68IGRUd+y1KPuBL2Ip4FTxf1mlIJdpS:vNkBY8IGRUd+y1Ni9/fIkdo
TLSH
T1A3F27CCBA7584097EA63C970C1A2DF92F575F7935B0186DF21A8C18A1E233C2A737319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_socket.pyd
Size 85KB
SHA256 25ac83cac32ed0d67b2cc9672ce64cb53f0a29a75b14c276e901023ff43da5f9
MD5 7a16a21ad11d3e9829ca3b379a2bb010
SHA1 90707b5c1662a1e4553f1cc10ba96c7452def7c2
SHA512 5e0268af7dad1646903ddb5e61fb38896a7ae964cadb38b5c28bc1524a69a87b7c09f501f3f570ec6bf78c8fa873b8fbe062bbe06cf839e32a2735f1efd0cae1
SSDEEP 1536:hcVuncT0XH3XAJtZypxm7XP+66wSzC/jAjI/Lb6NsQ3cs8PgMr8IGGwby1Ni9DFo:SEny2+jypxm7XPz6wSzC/jAjQOsQssV2
TLSH
T19B835B01A66040FAEB77C176C2639E63FBB4B5C01294A75F1466C55A1F333C2BE3AB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_sqlite3.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_sqlite3.pyd
Size 129KB
SHA256 b0c4edff6d60f300373ec929ab915f95ee601bf167e04d28e4e9e28a8e536fe0
MD5 add41312044467286c41f3b6999e2af4
SHA1 49bff0eb0993f44945e6f10a13dcb2808154aa7a
SHA512 464d18047ca22f0abb4d49fba73e89adfa7fec1da15f5532b7f3e223351c7f72d1f6f4b3a6651912026a5a46c94de30518f11be3248bbe36a04e83276f80d0eb
SSDEEP 3072:wxERl9CtamLAhqj8sIE561YASFHFyoIGDQNTVw:weRqLABY50SFHFyT+
TLSH
T1BBD35B6B631401AAE9A782B8C2735A43EB75F461572053DF41A0C24A1F373D3AF3B769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ssl.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_ssl.pyd
Size 186KB
SHA256 5c07572df2913618cfb851b608cb5f74d740fcce5c3f2e63dc0a2ba39ab35dad
MD5 e4ba5a52f5fa2a64baec46486cbdcf82
SHA1 ff213b504a70d50871eb8432cea1b22563364cb4
SHA512 111c926a0157d46c48a26da30face546b065eb4afddb6dcf27442fd4f73432808de43978f78f5b297b22a63d82d0d5bf305701e137f6060f59cbd601012e61fa
SSDEEP 3072:FVpZeIk2MZ7IifVvQto7qrvYLrgp8VuMG4eJ9i1zktdsQ/3Omca45gMqTVBOrQII:Bxk2MZZVvQtmL4457qTVMrQ
TLSH
T1AD147B47B5446EF7D802E8BAC6234543FBB4F045331297DE48D6EA520F03746AE6AB63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_wmi.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_wmi.pyd
Size 39KB
SHA256 0ab1fbcf18c95d70343012feb1aad61e1ba95aaed5b4a08e57fc5990e8a9a452
MD5 99a20947be014e8b4297765f03ed14b7
SHA1 01327b7b1456ecb3d75ce41e403ad870f4391663
SHA512 2841071945712547e13b82f2d7b4d72d25be77f239367dee92f31361478f81eb674e91835f679a266c5ad7b8a63118a3412302dc3fd9cfbd487442c6229fb159
SSDEEP 768:N2/EEqrVmjsOujOQMVQIG3iCFy1KPuBL2Ip4FTxf1ml6Z+7UlFg5yK:IE9BE+jOQMVQIG3iCFy1Ni9/fILKq1
TLSH
T143037D8AE6684092EA6BC574C4A5CE53F675F7D36712838F326482990F333D1E73A325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_zstd.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\_zstd.pyd
Size 491KB
SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
MD5 035b0a033dd00dbe887556f4d4b852c3
SHA1 e86cf52d825f9b68177354c54edaa57e962012c3
SHA512 0b428aa10a9e977e07023918870368a9c00e0eb4ab4f7cf1e88950d4aebd2ba5774ebea9f3779d05e370bbe315da6634922834106077d511b710c6131d29dc65
SSDEEP 12288:KccWmYLKvveeFSeX0ro+Q2J5BCl9VNqdp:KccWJKvveeFSeX0roMZdp
TLSH
T143B48D43F29943EDE53BC4B8CF565A13FBB1780B1214965B9395CB993F07B309A6A308
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ada92cb5d92a588d1b93__mypyc.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\ada92cb5d92a588d1b93__mypyc.cp314-win_amd64.pyd
Size 218KB
SHA256 3048af5864e17f79410273b3074416d67473eae22b3d7d1b7b58f24a506f82ed
MD5 adeae0ff252151f98991e536fc6a5177
SHA1 dbdc0b3b8f9be29cc01275421b24303f024aad81
SHA512 464ed3b77ff59a9102348456ee4237c947aa9dc114b992a106e1b32a21a20e8334a84ceff100c24136c285f4c3e6ca86454023eccb48ec2da5c3da5765608c23
SSDEEP 6144:F3bJmLg3z8fUJs9ZouzxkP8VXaVlaz8fnt4HtFmiGJZMIo0pn+lw:F3lk9Sztl
TLSH
T1CC24283A61990461ED774174CE27D453EAB2F421833096CF09D0CAB61F2B7E5BE7970A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\base_library.zip
Size 1.3MB
SHA256 6ef5a8adcdcda60777b2ed8400d9112bc4e35b850a8767cbe743d6cae47b8cff
MD5 392bda3796393a72fbef802e5ca85b5a
SHA1 1471d58fc9a5872011ab676b2d486a0190f6f335
SHA512 f502c1ece3f3f30626788ea9bb08ff83ae58e1c097d9e8ca206e65edd8a66b6d8d5fec3a36c17beabfbbfc1c7f2b890d1466bdef4548b359e472527893eed815
SSDEEP 24576:xl9pLuYaQZQuUFJdlQeOdP2m2dfjtlbtRpMP:CYaBuUFJdl/dRI
TLSH
T122552BA1B9917967FEC9F37A35B75A0CA715C0109B10D303B4A88DAC6FDF260AE558CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\charset_normalizer\cd.cp314-win_amd64.pyd
Size 10KB
SHA256 032b490f6b42a0928b3cb6e17fd4caf8a6becaaf05739c4fe41267dcf890c278
MD5 e58f635d100bd8d6e27d50253f0ba9d7
SHA1 a7a73a53fafa50b6614fc1956abdc769d7b010d5
SHA512 5aefbee4805f72f88aa41658c160badd748b1d3a7aa9157810d47605eebb11fa0b8b87e48272ab0195863a1ab5caae2ce4f3f03202481ccbcd2f3ec8769538e3
SSDEEP 192:M3xKeIaQYVYZuLnN6KxvecRo930aOc1TbEG9c9HDEuO5:UkYVVLN6Kxxo93EA19cZgl
TLSH
T12422E74CFA558CEAE725023E89A70F1E71A5B6250B5237CF4370D52D1EE37EA62785C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\libcrypto-3.dll
Size 6.0MB
SHA256 53c529145339fb042a3dcd3a09c2d7753204f8b4fc79d99e0d31e69a33985958
MD5 4191d4288230515c5098cc07f699a604
SHA1 bd8b4d48b2f4513dc378bc5a4cf4a3abbc6998d8
SHA512 c110a89ebb5b58126d556ffea1bf01efb4a6dd295f7387665223741a171d9353315de4d361d3d02a186c1c659aee20f46c579efc51b4c41f7282e1b5b4d6d040
SSDEEP 98304:ybM11p6ZVTRwlFh7V6v73WyXTf0W+JJe1CPwDvt3uFA0CaI:ybM1T6ZlalfV6v7GyXbnEJe1CPwDvt3T
TLSH
T1E6566B5EA7A80188E4BAD13CC6534627D2F1F85A5BB097CF05A196790F33BDA2B3D740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\libssl-3.dll
Size 1.3MB
SHA256 b17a87979862d19241edc4318f967e24c3ec356ed6c2368f561179fab2311001
MD5 d99207e7e513f87ad7571c4c2450771b
SHA1 b904eb3989c9a1ad77e3a541e40d84ae890e3df7
SHA512 bccd034e633b96c2c7dff6ca96c2bb8a8c0f90a872f256e8467e470ed57fc4b442c74da488b258b5a255feba26767a5c95293a636c94c754e2644ed91c5be7ac
SSDEEP 24576:gk2RrDo2iVOF8hXN1hyeWsoSvSZlRg5aYsC:gRFDo2uOKJ8sIRg5aYsC
TLSH
T11F556D5AA7B8016DD5B6C17CC6938B23D2B2F41623709BEF06658A790F23BD6273D344
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pyexpat.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\pyexpat.pyd
Size 217KB
SHA256 133942bde91fe43289076a0b50a01b265df4ead078617cca6f6604a4166e1260
MD5 cba7f704fa489655f2e6391c9faf137f
SHA1 730c3bfa120dfe0bdb3f42cc6f82a859b53bafa5
SHA512 5867066057005abe2a8e251e7e745bf82fcc7e41e26513dbbd111df2c9f4d19acbb8e1982fac2f13b0c7ff16400a1587c08b485855f441a6a42d3c03035e7ea1
SSDEEP 3072:fKHcmklCazVuJATShhjXmrZwFKdWTP3AWxk8pg2H6coK6Vqcm2aciTH9FMG1cEOG:fKhklCagYQhWwKdWTP3X/JrcMT1BOL6
TLSH
T190245C9BB261C0ABD843C13CD9978B17DAB2B86503909ACF12C4D77C9F6B751372A319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python314.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\python314.dll
Size 6.5MB
SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
MD5 006b0746b5abaf438d1bc753261c6d2c
SHA1 8f34714617f376cfa6e7e2aedc1e2a73de8c8fd8
SHA512 1c156c3f542de0a27e16ca5b7d6bbd34f2059b380ce85dbcfd5ae3a64de473fd160baba45ca30ad85dfe45742fdcb42aa969cbbaab26a569e324d4e65fb6d621
SSDEEP 98304:xVyDBH+ULEfi0VOuZd+FAX/uv3HDMiEEQn0rt:xVyD1+ULW5VrZRxim0rt
TLSH
T136669D26737901A5D9BB8035C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pywintypes314.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\pywin32_system32\pywintypes314.dll
Size 133KB
SHA256 e62808f40462f8066c8d19811cebd15467de6992b1cb48be5f5903910f5395f7
MD5 c11818bd607c6060902836c3f6bf024a
SHA1 31846f719f3eb804c8ffcf3783ef343b8e206730
SHA512 3349ddeaf776a5f6e20026e217d56cfbcf053772c3366af5aa3282ff2889cd92a2c31ba39b3cbaa18a90d6d1e9bbde97215278f12dbd7724062d5c3f06fd6e63
SSDEEP 3072:WZkbcF76SzXHDjEquY/rZ6YrFc1V4Bpg7d+LLvvzab:WZkbc0STfPuY/rP+1V4XgR+LT
TLSH
T1F2D32947374648DAE97A937DCD771A02C3A6B0000711E3CF46A1C2AA5F637E5AD3BB42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\select.pyd
Size 32KB
SHA256 fab1b4cee101359d82d72061b83cff1855337b3677b9fe01cd69f7548f4c496e
MD5 43a869da7432298fce80f8c163ad8e7f
SHA1 65d259ba8350561668706a563ee0800c1748c173
SHA512 26c57d276b82fcb9c4f971a8e74847e14dc1a3b942a62f442740d6244ee8f23ba29c9e56b5001c2734db3fd1ac52a6bda02926f47d12cf727e38703971fa9d55
SSDEEP 768:TB7YLZnCaqF8IGRGCy1KPuBL2Ip4pTxf1ml9dHu7L3:TB7C5CaqF8IGRGCy1Ni9bfIbHun3
TLSH
T17FE28CCAAB345047EA63C671C6A2CE83FA39F7E35611469F31B5918A1E237C1A337354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lorem ipsum.txt

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
Size 1KB
SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
MD5 4ce7501f6608f6ce4011d627979e1ae4
SHA1 78363672264d9cd3f72d5c1d3665e1657b1a5071
SHA512 a4cdf92725e1d740758da4dd28df5d1131f70cef46946b173fe6956cc0341f019d7c4fecc3c9605f354e1308858721dada825b4c19f59c5ad1ce01ab84c46b24
TLSH
T1972163328E9C03006FD1303A636E89EFD948F0281A04BB25ECF9D68FA44115CD6E2375
MD5 SHA1 SHA512 TLSH

Submit Download

sqlite3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\sqlite3.dll
Size 1.5MB
SHA256 2940bee51c4a00c7e8f2a8a1be857d4c4ad23b2657fbf7fdf18e3a3fd20066c6
MD5 f280c6a2e0a5adc4871442f0766525cb
SHA1 8dae709bd816002470140235222de6f1403980c3
SHA512 9f4b53bb88478cae86f383fc3586420e1c59a39274e79b08976f081629eb56654ac190e39bb37bc3e9a83f368f1956b92bd3b7d293a2c7eb7b8fc7d9b63699fa
SSDEEP 24576:NDKX0pwDaOrROsxNkJPcG/ZBZQQSKTWzdPcZb0LJ0ZC5hJ07gf4UBd84ZD1fuX3u:R8pOsxNkJPcGxDQuWRP+bZ6Icf4vC1fd
TLSH
T146759D4BF2B801ADD0A7C17A851B1707EBB1B4051B64A7CF1594CAA92F53FE217BE324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\unicodedata.pyd
Size 741KB
SHA256 0d4f124b2d6622d276d777f7106972219f9b310edb5df8149c253da7c013d6d8
MD5 4df357dfce07299b9e6759583f41ca68
SHA1 d5810b7f7d05ac3a37592566ee898f428919cb53
SHA512 f741882d4444a4be4342f89932b2510c57fd943cf782079551c202c419805a90a06203464cdf1a209a8da3e56677426dc9af388b2077a5746b3daf0f2da1f69f
SSDEEP 12288:jIwYBAPtrZmDtBPcH+dEYJ5EYub+z70lDJPT36mwtyqt:jIwYS5ZmDPqO54lDJPTMyqt
TLSH
T11EF4E5F5BB838C16E69B767A48D3210F4E50C2B35F1A8637B2182355D8EB3B44DD582E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

win32crypt.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11682\win32\win32crypt.pyd
Size 123KB
SHA256 1144670ad8271e4d477167bcb55b8ec38e8ad9f02c6fbfe66024e67083da2131
MD5 bef94c55e5f2b9c742467469abdbb089
SHA1 720fc0e2954fea3822144ca97303c6d60eb64133
SHA512 07644f2a5f9b6ae3fed2c55366aba74f5f3961d3deb1316139a1300df7229ae0d2be543b8100cc07cb8ba530c62d44a8e5c5b702641e63da4366eb946bb71799
SSDEEP 3072:+sFWiORseWQgjXefpRoh+MNO3xhxRXvxh+Pal:+0W9SQg0okRfxh+A
TLSH
T10EC33A1332964DD6E9AAD3BDC8239807E7A4B0154721ABCF0950C6DA0F67BE06D3E749
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download