fe8d032fde42038d8f37d1a93134fe1a2105a0e80259555fd9578ac4f7986666

Analysis

user interaction
yes
max time kernel
205s
max time network
210s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 11:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SolaraV3.exe
Size 18.3MB
Sample260803-ndzagahn2z
SHA256 fe8d032fde42038d8f37d1a93134fe1a2105a0e80259555fd9578ac4f7986666
MD5 03eb0a1f8f30c124509e8a517c9c6999
SHA1 ec9ff3c15ab6b7822155641ca79cf9d6c6c758d8
SHA512 896392fc461aa5433bbf4d0ff0b0388bb0fb725c115a22945c36d25598cacfa52cb9c8fc7176d7c6815753af4c16eb9ce183d30ad963c842e9f16d1da863309d
SSDEEP 393216:ItXdJBvGlmAzKCUqhqJmY1ypQ4d4SAIsdZz:QXdJBvGlmAzKCUqhqJmY1ypOKe5
TLSH
T11317E7617B5B99ACD09BC47483478A720A7170CB0B35B9FF449496382F6EBF42F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

adware defense_evasion discovery spyware trojan

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
8	944	SolaraV3.exe
172	1664	chrome.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Suspicious use of NtSetInformationThreadHideFromDebugger 9 IoCs

pid	Process
5324	RobloxPlayerBeta.exe
5324	RobloxPlayerBeta.exe
5324	RobloxPlayerBeta.exe
5844	RobloxPlayerBeta.exe
5844	RobloxPlayerBeta.exe
5844	RobloxPlayerBeta.exe
4464	RobloxPlayerBeta.exe
4464	RobloxPlayerBeta.exe
4464	RobloxPlayerBeta.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\AvatarImporter\img_light_R15.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Emotes\Editor\Large\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\VoiceChat\SpeakerDark\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\models\AvatarContextMenu\AvatarContextArrow.rbxm	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaChat\icons\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Controls\DefaultController\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\PlatformContent\pc\textures\water\normal_13.dds	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Moments\Reactions\crying-medium.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\icons\ic-add.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\icons\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\fonts\NotoSansThaiUI-Regular.ttf	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\StudioSharedUI\spawn_withoutbg_24.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Settings\Help\LeaveIcon.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Settings\Radial\EmptyTopRight.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\VoiceChat\MicLight\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\LuaPackages\Packages\_Index\FoundationImages\FoundationImages\SpriteSheets\img_set_1x_1.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\Controls\DesignSystem\ButtonStart.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Moments\Reactions\thumbs-up-large.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Settings\Help\AButtonLightSmall.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\graphic\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaChat\icons\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1808_874564598\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\Controls\DesignSystem\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\icons\ic-more-groups.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\particles\SquareParticle.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\avatar\compositing\CompositTorsoBase.mesh	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\PlayerList\UnFriend.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\ScreenshotHud\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\9-slice\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaChat\graphic\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaChat\icons\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\PathEditor\Control_Point.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\PlatformContent\pc\textures\water\normal_07.dds	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Controls\XboxController\DPadLeft.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Emotes\TenFoot\SelectedGradient.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\LuaPackages\Packages\_Index\FoundationImages\FoundationImages\SpriteSheets\img_set_3x_4.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\models\Photobooth\AbyssBlueLight.rbxm	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\icons\ic_launcher_vng_square_xxxhdpi.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\models\MaterialManager\smooth_sphere.mesh	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\MenuBar\icon_minimize.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\scroll-top.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Menu\hamburger3D.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\VirtualCursor\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\VoiceChat\New\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\VoiceChat\SpeakerDark\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\ExternalSite\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\fonts\gamecontrollerdb.txt	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaChat\icons\ic-createchat1-24x24.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\DraftsWidget\newSource.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Controls\DesignSystem\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Controls\DesignSystem\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\ExternalSite\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\ExternalSite\youtube.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\graphic\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\icons\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\icons\GameDetails\social\Amazon_large.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\fonts\families\TitilliumWeb.json	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\LegacyRbxGui\Granite .png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\Settings\Help\XButtonLight.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\content\textures\ui\VoiceChat\New\Unmuted0.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\InGameMenu\TouchControls\unequip_item.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\ExtraContent\textures\ui\LuaApp\icons\GameDetails\social\[email protected]	RobloxPlayerInstaller.exe

Executes dropped EXE 4 IoCs

pid	Process
6016	RobloxPlayerInstaller.exe
5324	RobloxPlayerBeta.exe
5844	RobloxPlayerBeta.exe
4464	RobloxPlayerBeta.exe

Loads dropped DLL 4 IoCs

pid	Process
944	SolaraV3.exe
5324	RobloxPlayerBeta.exe
5844	RobloxPlayerBeta.exe
4464	RobloxPlayerBeta.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	SolaraV3.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxPlayerInstaller.exe

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral1/files/0x00070000000244cc-227.dat	embeds_openssl

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RobloxPlayerInstaller.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1664	chrome.exe
6020	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 11 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxPlayerInstaller.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxPlayerInstaller.exe

Modifies Internet Explorer settings 1 TTPs 6 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	RobloxPlayerInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player	RobloxPlayerInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox	RobloxPlayerInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0"	RobloxPlayerInstaller.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302296835015440"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 32 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-145f189a6a974303\\RobloxPlayerBeta.exe\" %1"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\RobloxStudioInstaller.exe"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-145f189a6a974303\\RobloxPlayerBeta.exe"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\version = "version-145f189a6a974303"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\DefaultIcon	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\RobloxStudioInstaller.exe\" %1"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\URL Protocol	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-145f189a6a974303\\RobloxPlayerBeta.exe\" %1"	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command\version = "version-145f189a6a974303"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\ = "URL: Roblox Protocol"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\URL Protocol	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\ = "URL: Roblox Protocol"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\ = "URL: Roblox Protocol"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\version = "version-ff6341faef444107"	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-145f189a6a974303\\RobloxPlayerBeta.exe"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\DefaultIcon	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox	RobloxPlayerInstaller.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
1708	chrome.exe
1708	chrome.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
6016	RobloxPlayerInstaller.exe
6016	RobloxPlayerInstaller.exe
5324	RobloxPlayerBeta.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe
944	SolaraV3.exe

Suspicious behavior: LoadsDriver 10 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
664	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
1808	msedgewebview2.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
944	SolaraV3.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 944 wrote to memory of 1808	944	SolaraV3.exe	84
PID 1808 wrote to memory of 3688	1808	msedgewebview2.exe	85
PID 1808 wrote to memory of 2944	1808	msedgewebview2.exe	86
PID 1808 wrote to memory of 2944	1808	msedgewebview2.exe	86
PID 1808 wrote to memory of 2944	1808	msedgewebview2.exe	86
PID 1808 wrote to memory of 4804	1808	msedgewebview2.exe	87
PID 1808 wrote to memory of 3720	1808	msedgewebview2.exe	88
PID 1808 wrote to memory of 3720	1808	msedgewebview2.exe	88
PID 1808 wrote to memory of 1208	1808	msedgewebview2.exe	89
PID 1808 wrote to memory of 1208	1808	msedgewebview2.exe	89
PID 1808 wrote to memory of 1208	1808	msedgewebview2.exe	89
PID 1708 wrote to memory of 1356	1708	chrome.exe	100
PID 1708 wrote to memory of 3608	1708	chrome.exe	101
PID 1708 wrote to memory of 3608	1708	chrome.exe	101
PID 1708 wrote to memory of 1664	1708	chrome.exe	102
PID 1708 wrote to memory of 4156	1708	chrome.exe	103
PID 1708 wrote to memory of 4156	1708	chrome.exe	103
PID 1708 wrote to memory of 628	1708	chrome.exe	105
PID 1708 wrote to memory of 628	1708	chrome.exe	105
PID 1708 wrote to memory of 344	1708	chrome.exe	106
PID 1708 wrote to memory of 344	1708	chrome.exe	106
PID 1708 wrote to memory of 4972	1708	chrome.exe	107
PID 1708 wrote to memory of 4972	1708	chrome.exe	107
PID 1708 wrote to memory of 556	1708	chrome.exe	108
PID 1708 wrote to memory of 556	1708	chrome.exe	108
PID 1708 wrote to memory of 4600	1708	chrome.exe	110
PID 1708 wrote to memory of 5488	1708	chrome.exe	117
PID 1708 wrote to memory of 5488	1708	chrome.exe	117
PID 1708 wrote to memory of 5584	1708	chrome.exe	118
PID 1708 wrote to memory of 5584	1708	chrome.exe	118
PID 1808 wrote to memory of 1940	1808	msedgewebview2.exe	119
PID 1808 wrote to memory of 1940	1808	msedgewebview2.exe	119
PID 1708 wrote to memory of 5856	1708	chrome.exe	120
PID 1708 wrote to memory of 6016	1708	chrome.exe	121
PID 1708 wrote to memory of 1140	1708	chrome.exe	122
PID 1708 wrote to memory of 3060	1708	chrome.exe	123
PID 1708 wrote to memory of 2296	1708	chrome.exe	124
PID 6016 wrote to memory of 5324	6016	RobloxPlayerInstaller.exe	127
PID 1808 wrote to memory of 5852	1808	msedgewebview2.exe	134
PID 1808 wrote to memory of 5852	1808	msedgewebview2.exe	134
PID 1808 wrote to memory of 4624	1808	msedgewebview2.exe	138
PID 6044 wrote to memory of 5568	6044	chrome.exe	153
PID 6044 wrote to memory of 6020	6044	chrome.exe	154
PID 6044 wrote to memory of 5496	6044	chrome.exe	155
PID 6044 wrote to memory of 5496	6044	chrome.exe	155
PID 6044 wrote to memory of 3768	6044	chrome.exe	157
PID 6044 wrote to memory of 3768	6044	chrome.exe	157
PID 6044 wrote to memory of 2092	6044	chrome.exe	158
PID 6044 wrote to memory of 5640	6044	chrome.exe	159
PID 6044 wrote to memory of 2092	6044	chrome.exe	158
PID 6044 wrote to memory of 5640	6044	chrome.exe	159
PID 6044 wrote to memory of 1744	6044	chrome.exe	160
PID 6044 wrote to memory of 1744	6044	chrome.exe	160
PID 6044 wrote to memory of 4320	6044	chrome.exe	161
PID 1808 wrote to memory of 3828	1808	msedgewebview2.exe	162
PID 1808 wrote to memory of 3828	1808	msedgewebview2.exe	162
PID 6044 wrote to memory of 2344	6044	chrome.exe	163
PID 6044 wrote to memory of 2344	6044	chrome.exe	163
PID 6044 wrote to memory of 2840	6044	chrome.exe	164
PID 6044 wrote to memory of 2840	6044	chrome.exe	164
PID 6044 wrote to memory of 2688	6044	chrome.exe	165
PID 6044 wrote to memory of 2688	6044	chrome.exe	165
PID 6044 wrote to memory of 5812	6044	chrome.exe	166
PID 6044 wrote to memory of 5812	6044	chrome.exe	166

C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe
"C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe"
1⤵
- Downloads MZ/PE file
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:944
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=944.4436.9443079575969212868
  2⤵
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1808
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffa1829b078,0x7ffa1829b084,0x7ffa1829b090
    3⤵
    PID:3688
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1732,i,3285016904722693164,9188078308891027418,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1740 /prefetch:2
    3⤵
    PID:2944
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2060,i,3285016904722693164,9188078308891027418,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:3
    3⤵
    PID:4804
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,3285016904722693164,9188078308891027418,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:8
    3⤵
    PID:3720
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3576,i,3285016904722693164,9188078308891027418,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
    3⤵
    PID:1208
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4544,i,3285016904722693164,9188078308891027418,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
    3⤵
    PID:1940
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4580,i,3285016904722693164,9188078308891027418,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
    3⤵
    PID:5852
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4464,i,3285016904722693164,9188078308891027418,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
    3⤵
    PID:4624
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4468,i,3285016904722693164,9188078308891027418,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
    3⤵
    PID:3828

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffa1444c728,0x7ffa1444c734,0x7ffa1444c740
  2⤵
  PID:1356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,8896043501750881063,2888423533282343909,262144 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  PID:3608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,16775148015962084913,8828428666866335706,524288 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2088 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:1664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,8741908951288165320,13628396156035831060,524288 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,15045646295366336850,8238880069177110531,2097152 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3324,i,11135966235190653412,13120010062697584529,2097152 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4436,i,15502434706463166601,17175585053321789329,2097152 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:2
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,18274294242128631966,1747427180596830002,2097152 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5028,i,15972525206847118123,3222451823308915365,524288 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5796,i,4933646122476648547,6635264338226588270,2097152 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4864,i,17543887500329193029,1392815398706369479,2097152 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3444,i,6852152017944959733,15770393337351380708,524288 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3564 /prefetch:8
  2⤵
  PID:5856
- C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
  "C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
  2⤵
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:6016
- - C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\RobloxPlayerBeta.exe
    "C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\RobloxPlayerBeta.exe" -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 6016
    3⤵
    - Suspicious use of NtSetInformationThreadHideFromDebugger
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3464,i,3920259539108185580,8268107008273350653,524288 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3384,i,5013055025159487838,1242897540484377041,524288 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6140,i,10679081761084547336,5657008452302365057,524288 --field-trial-handle=1900,i,5781312400254771550,15758234611586603276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3468 /prefetch:8
  2⤵
  PID:2296

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:116

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5144

C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\RobloxPlayerBeta.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Executes dropped EXE
- Loads dropped DLL
PID:5844

C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\RobloxPlayerBeta.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Executes dropped EXE
- Loads dropped DLL
PID:4464

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x104,0x108,0x10c,0x100,0x110,0x7ffa1444c728,0x7ffa1444c734,0x7ffa1444c740
  2⤵
  PID:5568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2016,i,5874063826486011420,8377655155412387887,524288 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - System Time Discovery
  PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,11876174270412427936,14282925993679381889,262144 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:5496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,6534895889708053162,16106820557029118835,524288 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:3768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,10057014753973524753,5999173931830685744,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3240,i,9950218140600342408,7366510068488728861,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4576,i,8131583065030034064,9166941978442262604,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=4416 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5308,i,6371142556833542741,11608095479622510885,524288 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5580,i,5009867940067771438,7915071439697867838,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5740,i,10607005218319039922,17517786598948787717,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5668,i,7591536711958469526,12701992560823455058,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5756,i,2238920410880857904,1954684758997233236,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3244,i,10952440973862990847,17297404174331650430,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3412,i,11504235535496974618,164160751849911439,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5772,i,4396113703798095572,2747571546434742416,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6048,i,15792133199689310903,16062251773073169840,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:5904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3484,i,10897274327723202342,18145666415513814542,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6272,i,5082407798535008896,14295744252153281106,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6220,i,12402306699754707771,153232819131585829,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6188,i,9526283217050900135,15327250187681056199,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3452,i,7280239219514591470,4160344043844999866,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:60
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6388,i,10558726344803237283,11012999811032075089,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6408 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6444,i,10876107119753255060,14582675828383741370,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6524,i,3175197679495367289,9443554317523495224,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:1140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6724,i,16397312342030437099,3032683198899601876,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6700 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6072,i,12953782802386715991,15053498829353342481,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6768 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3364,i,16931056189350676423,2483349190068423024,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6256,i,11107411688209820561,5477253623886244385,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=5916,i,4539685920108201906,2264594410608201335,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5812,i,3078631814411762344,6834184185575896640,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6944 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6568,i,16002541653602401440,7579637889282648749,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=7040 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6608,i,704110102677939095,6470575418312559453,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7324,i,272017253757801585,17298002794229840962,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=7152 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7320,i,7604995162005019455,17049388762634434997,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=7504 /prefetch:1
  2⤵
  PID:6152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7640,i,6195586076119499604,16210278894397144249,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=7652 /prefetch:1
  2⤵
  PID:6160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7812,i,2139418299533499418,8239983171702828444,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=7840 /prefetch:1
  2⤵
  PID:6332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7984,i,13413935480646806570,2691619546553184827,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=7968 /prefetch:1
  2⤵
  PID:6340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8000,i,1539150985470986742,9987782471307895807,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=8036 /prefetch:1
  2⤵
  PID:6348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8352,i,10976031545466915885,9364700653332303959,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=8288 /prefetch:1
  2⤵
  PID:6500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8476,i,14767886489731324066,18159975255387744078,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=8472 /prefetch:1
  2⤵
  PID:6508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8592,i,11431241435902006874,7454702631584166697,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=8596 /prefetch:1
  2⤵
  PID:6516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=8628,i,13391864731424202059,12033474324411008046,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=8740 /prefetch:1
  2⤵
  PID:6524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8896,i,16822145835317690091,8861858233033827570,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=8904 /prefetch:1
  2⤵
  PID:6532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9056,i,16387349429364953866,15232879130243925085,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=9060 /prefetch:1
  2⤵
  PID:6540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=8636,i,3810786367613670890,11922655361554292209,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=8776 /prefetch:1
  2⤵
  PID:6808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9412,i,15878503823836388585,6869848126207326176,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=9232 /prefetch:1
  2⤵
  PID:6872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9436,i,7587983793010159205,2262706189406523050,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=9452 /prefetch:1
  2⤵
  PID:6880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9596,i,12005034036977907214,2424224772133696953,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=9600 /prefetch:1
  2⤵
  PID:6888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=9740,i,11328700147295770055,17986835148878589754,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=9752 /prefetch:1
  2⤵
  PID:6896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=9900,i,15577447746303122234,12859618249506699230,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=9904 /prefetch:1
  2⤵
  PID:6904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=10044,i,13966087824076976864,13647562563540998619,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=10064 /prefetch:1
  2⤵
  PID:6912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=10200,i,16149084110518672591,15916257220691652442,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=10212 /prefetch:1
  2⤵
  PID:6920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10356,i,4512400224119264142,2583100919083738926,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=10368 /prefetch:1
  2⤵
  PID:6928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10512,i,15301280143418200366,16660610997689959069,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=10524 /prefetch:1
  2⤵
  PID:6936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10668,i,8613934512021068545,14162757607532490585,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=10672 /prefetch:1
  2⤵
  PID:6944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=10812,i,14873452902263056167,9589796304046387620,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=10828 /prefetch:1
  2⤵
  PID:6952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=10972,i,10228560674953004714,2838951196979860186,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=10976 /prefetch:1
  2⤵
  PID:6960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=11116,i,3430712512085394858,13111262209196594802,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11132 /prefetch:1
  2⤵
  PID:6968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11268,i,9547113045230115368,268081057942159659,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11280 /prefetch:1
  2⤵
  PID:6976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=11424,i,7648737626078345050,10154448086449149783,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11436 /prefetch:1
  2⤵
  PID:6984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11688,i,704475751953911857,2052542711365061875,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11700 /prefetch:1
  2⤵
  PID:6992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11844,i,12174455675396294583,4871239925846205385,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11852 /prefetch:1
  2⤵
  PID:7000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=11992,i,6750370970424965106,3013154398857004784,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11996 /prefetch:1
  2⤵
  PID:7008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12020,i,2528245728076560617,17176088416491627105,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=12156 /prefetch:1
  2⤵
  PID:7016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=12280,i,4433839979766680565,14153217819211537934,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=12296 /prefetch:1
  2⤵
  PID:7024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=12432,i,10934931583860612962,6257305529389606355,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=12444 /prefetch:1
  2⤵
  PID:7032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=12472,i,3766937185754251994,18083375148634606268,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=12604 /prefetch:1
  2⤵
  PID:7040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=12728,i,17066678904607402609,13516290661444318605,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=12740 /prefetch:1
  2⤵
  PID:7048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=12892,i,13147955412079139305,5708696393839735081,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=12748 /prefetch:1
  2⤵
  PID:7056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=9740,i,13365675809041371462,428958201622250469,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11412 /prefetch:1
  2⤵
  PID:7248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5928,i,1475300952853187158,4798527170893773346,524288 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:7348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=11500,i,2207450224161474138,3242373962236397848,524288 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11492 /prefetch:8
  2⤵
  PID:7356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=11496,i,15381406290256307756,5385818599853777399,524288 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=7844 /prefetch:8
  2⤵
  PID:7364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=9484,i,7698694464562312171,3394926665477243174,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:7384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=9624,i,17224894198178956884,11579898088150413693,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11468 /prefetch:1
  2⤵
  PID:7412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=11528,i,4834165213720206811,16233752488205111220,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=13116 /prefetch:1
  2⤵
  PID:7452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=7292,i,9626332906911367473,16471639888416664744,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=13288 /prefetch:1
  2⤵
  PID:7712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=9908,i,14484304557467087151,675759537689878013,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=10676 /prefetch:1
  2⤵
  PID:7796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=13080,i,18267965753598636870,11004148885792535528,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=11476 /prefetch:1
  2⤵
  PID:7936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=13036,i,1885435079581201094,9839923097442399382,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=9240 /prefetch:1
  2⤵
  PID:7996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=6708,i,5773600924797254690,17590795655266465355,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=13084 /prefetch:1
  2⤵
  PID:8004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=7396,i,15715410931450836910,17065917982644911260,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=9624 /prefetch:1
  2⤵
  PID:8012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=6916,i,18059082650125003124,17439666174699265,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:8020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=6220,i,7427794001102867725,15149454601964130653,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:8028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=9200,i,16677786982896882610,2250756525567051619,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:7284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=7200,i,6924884495281963834,8038350360775070199,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:7512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=7892,i,8981049358661238115,10122012655527831758,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=7216 /prefetch:1
  2⤵
  PID:6916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=7924,i,9671201428538319959,1531992409676557290,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:7036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=7652,i,1455042064846754542,8420508608502042540,2097152 --field-trial-handle=2116,i,6881422800873423010,7200247954887587413,262144 --variations-seed-version=20260803-010036.294000-production --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:7772

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

RobloxStudioInstaller.exe

Path C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe
Size 9.7MB
SHA256 a33eeac3fde1d1f99de2df08d63faa818ffdfcf2ace6a37e11bec1fe59409c5f
MD5 ad0dfa05fcbf007b1e2e535139317ae1
SHA1 8bff45114123dad46374913eac070a7255ca57df
SHA512 98e470bec6520eff7ff701d3448dff3682c39a1a9f95211595cb6fd5fde63ba26aeb79ccd32fe7adc1ab3e27d551474e41d4e56c1e2d8f01d4cfe9715c7c234b
SSDEEP 196608:ivgkZi/+KxW/hvjyysmsxP66IM5e5QIfqZzcz9P:iv3KpysmsxC6d5e5QI8G
TLSH
T17FA6AF22B900C032E8D100B296BD5FFA997D9E340B7954D3A7D41DB95A705D33B3AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxPlayerBeta.dll

Path C:\Program Files (x86)\Roblox\Versions\version-145f189a6a974303\RobloxPlayerBeta.dll
Size 21.2MB
SHA256 269af4ce0111e647c0a7ca5d7f1e29d769c880fd6394bf03f8a368e5c34761b8
MD5 42aa3722cc784eb50ec34b639665a129
SHA1 2cd51a6517fdd48dc01e322b7590c93712ae5fa9
SHA512 9570b27b9db7bd62f57d40f49c22fc536f58adc436cb7f818c943ab03b3839d4b9526b925d4bc0e9f9b4f440df6cfa045ecd8406f9df66048c041e328720eb3c
SSDEEP 196608:mTQLBStMScC8/lZZKPBJw5v8zOcPAhO+D9T:mT4BShEv87Eve4hOaT
TLSH
T1EF27C08EA4D20AA8C6A25071F05F46D3E662304C0D6C6DF7C6FA02603673B9D6659F7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1808_608765908\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1808_874564598\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1808_945207323\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1808_945207323\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 77bcdb2c3160a7fd4141144587938963255d18e2280ca048bae35e2b889daae1
MD5 f444c4b91d48467daad7fc304bf0b2b7
SHA1 0a54e0644c006f7b684b802915a76b0b9e907f2e
SHA512 954788cc6221a65dba3cd53452e7ffe912bdce7b20bd8cf2525ecbc1a2e6c0ba3448dfbcc8997d4347508beecb9ddb77704805450cb4090f76ac02aea569ca9f
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c47387ddf30a92429a58a0c5028b4921a8c03b7d519a0c389e62d40bb97bc0bc
MD5 48909bced692df07acd662773187a60e
SHA1 c4ed25755ad44746fcaf89ab10632ce9441a3886
SHA512 ca3bb3bd401ade7a4a2285508f9a46462a4d9524023694b73cd4af9fd6465b5ddc95d72cb45f894140dade9ba7c5442a00a36414919e3402428589da08ec7d14
TLSH
T145E02BA6CD71AC771DFD071910914745FA9517162A80492F3A3CD20C4FB162A4196C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00004d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d
Size 24KB
SHA256 5cbdf118516a25377b5e3cb53394ded5ea96de75ade2f81c80a8bac0e4a39451
MD5 363640467e37802dd89f6ec9e01ad2cc
SHA1 835ac2b03cec23ad37d7a19a8cf7103a227ce910
SHA512 38df037b907039fa3650ba08f17a61313be3efbea580dac58919bebb27b1a844bb2fcdb72c29b25313a5b38cc9774b712b76a7bc829e5c290b44df573514375b
SSDEEP 768:nCxv41N5H3xI6mB2eEp5BfimT2Gkh6HgFj+:nCOn7I6mQRDilGU6HgFy
TLSH
T14EB2E14827AF5C0E724CD96EE0053A71B5513CCDBD3BDAB2C8B26AB4E07DBC4915A907
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000055
Size 141KB
SHA256 b9fe576251987a4203f109c2d6b1a50648d2ed1c5c21b8117cce8b8776a83b4f
MD5 9bf036fb8bfb98881ad4e1f55ce03d4e
SHA1 6434237dcb47b747bb066d8d4ee90dfa4c72e1ba
SHA512 3b7392fbae7526bdb9abf809b6472c96683187d1f5dcbf82a9fb3bda45421653a76f07612bcc43538ed639e786ddfdfe9f5245ab3539364288dcb941d01e6a75
SSDEEP 3072:p5XUTvV+FHjMA6NgP7OcLGwV0H0eSkKY56BmW:p5UDVsQlyPXLVEr/55W
TLSH
T15DE312A41482A68D1B4E05A5CB59F379C0ED015A801445FBB31EAF133ACEFF7667EA18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005e
Size 23KB
SHA256 8af9915f48211dab44ffc7ff31de198caed78603b3c7fb1db3cd5c45c40ae9e8
MD5 1cb903ed6f535d4cd1b66c098f4a2311
SHA1 89bb18d7ae9e43490d4fee41bcbd99ea572ed651
SHA512 c9620dfcc30a7bac559e81a6c9cab6b29438bb9e7d514a86b93a845e249e99369160692424aa1bbd047eb9f125a4f5936589d31c9ecd39a339a8e9930ebf22f4
SSDEEP 384:6p/djkkaKu1IBC+YLNlpk2VicdhCm3mbgxiKl8g4eyqDGlYo8vOh4nib/eVMnb:0Ii/YxT9VJdhCHgQKl8g4eyqDEf8Znil
TLSH
T15FB2E0FFC3A092B317A3C42EE527354448132AE18761390EC692C6F6B0639246CB2B65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000061
Size 21KB
SHA256 2a0b7c30f0977fb1625451633b6b398f1f2c69d01c655bba3918c961b66a0583
MD5 8a2c36b90c9c621271b5b157ed86e56b
SHA1 f542f96bdc7ea0f2acfd8cd9353ad01d722256a2
SHA512 10ab9e8180698c4f5570b516c20c7282c50755a33c9215c9bb97d58990004f614a95c06fcf5dd2fbb844e24a5d81332ebdffa5c89cd4b22ee46828d5deab1bd4
SSDEEP 384:3YCbDPjmywD3fwAJ2ZmSMqcHbjgog9rfaPkiTOi/dkewSpcE5uW:3sv0YUmSMnHgogxfadFkewc75uW
TLSH
T164A2E17711DD711BF84E9DE82DCE8ED5C8A9A0DE6C618C4047E014A8D0DEA760FFB4A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f567a21c5bd331325ff68d9510e4815971cff0c31f744e001d89acc7d3051d4d
MD5 f70241fc42b92d32645c5cf1ef4825bb
SHA1 0acae60945d2ea793e65da7aa9dcac19b689984c
SHA512 dc1c5256e90d28df3e6bec14bc4bb9aab1764d7ad3d2b95e923ad002c61e488b7d73bf77180945bfe61139d2e8b7408bc81db0e232c415c2281379a443f31edf
TLSH
T103511010A8E6AC21CFB54B3C1424DC1CADE73C8D05171B8B2A88E460634F7F5ABB2698
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 fd0e8bd56914f92acd85075e17849e7b10e7bd066e23ebe9bce558f7feff5a4c
MD5 3d1bb23e110ffe83f1c1f399e11a0c0c
SHA1 ad0fbf4038a7155194890234e7b0c751fd8ee091
SHA512 a0ae64d73cfce966291fc09c1c99c0aa760eaabc9ce2f34bdf65d9abd934459ba09a1643e14f153d2c1c75ec801012bd1b1cfdfce406c6959c12f5f6fab14cee
SSDEEP 3:MsEllllkEthXllkl2zEqvR:/M/xT02zrv
TLSH
T1DF4402046BC00805CB1014318422835053A4E42005119743285204129C975800C00200
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 28KB
SHA256 a090b2ae014f24b84920ffe0e1078450bdf0e6479185eec6f67e139bf70009a2
MD5 591d4ce1f53f02b9d9d83d49f135e50e
SHA1 366c8b0f0db18fcc4879351d75b68121005e60b4
SHA512 4e3f85ab7694fba6381b4e107b330caa65ea781aeaec8a27087ca63fd2e91b18ddf185e69e075d26c9fb2571a805387a4d2eb795bb72290157fa6abab6362061
SSDEEP 96:EeBCP7GASemhaOzpqpaCOKpRkm+myoBinzGqtITel0K+hb0TRu0wAI3w90TZxiPI:EcJH8paKzz+myoaNWKmF4TRBa3wcGQ
TLSH
T10ED24C935FB4B023E7824E7CA71D54A8EC3B822C9F869CC83525C0716FB884366255ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 0126a49d3a4495ce47e3930b045db898cfb7d7a2e63a2dabbd5d22c0aa66e116
MD5 6773ee61b07c04517bf6f0c486350992
SHA1 ccfa6f6cea38a3b18fb2819e4133016df0b41597
SHA512 c01ba4dd860d2888c7f4c4ee6e1b4ba9171919a516113fd211b5d53ff2ce48c2e8c47c61c6fb4410da530afeba36c7257731db90fd12672868eeb65f334b7b92
SSDEEP 96:Uny/Dth9cBC5EJuPRaP0/uejzH+bF+UIYysX0fxQp97CEHt/DfLcLq2piRk/E0qC:mOBmOZ/tH+bF+UI3iWGVCWNkqp3m
TLSH
T163F32B5F5F243211CDBD923B69E745B3596DF02F8713A6C66C6114B4CEE2652B02C0BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 870B
SHA256 11da1252095811b16e0470f0e2e22cff6c651aed2afc903e13089907bc62e7be
MD5 12f06ec3b4db6af798e503f820415863
SHA1 c069cb24e478ef1fb59aeec358b4f881651c744d
SHA512 9faddd46ffd3e440518736f561ea94fcdc36370d837b4553dfd6425e242b26909812ad68b9a98007cce0c4e7448aff6744e947269b7d4cbcdc7b98d2836dc2c9
TLSH
T1E911C2FB8344C110FE4280E4A76EF265F7674D3D998AE2D8C242B8794012625B7018E7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 332B
SHA256 ba65682d8d5785093b2a64e0b9a943b361e79d34d2d58e1e985198f103138f25
MD5 f23a2d337d7f911a804ccec51e8c8b6d
SHA1 0c9a5ebbe096f58087e32c9e1d74053c80d6cfb1
SHA512 17b518546521cc0239aab7dd2ecb62b203d16e1d3e7e0a8aabf513c89ef76cbdb971623aa56cacad922bccee536586410d671eda1e3b644881bc67536032c5ad
TLSH
T136E0D891B4ED899E1A88D01B6328770ECFE43405FECD69C11F44B49565848086AC0695
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d26743855d103e390fd38c7ca1deb646e92a1f09983289ae60f93327a2c8228d
MD5 bb67dfb44bb731ed838b842e75563f47
SHA1 993d516f2e6ffdbdf140dffad7e6b0a60a60c823
SHA512 3faee9dd6a13d4283f015f32269e19df4a0605c3cfdd1ee5ba0ea6ca03d5ec40933fcd69b1d58bbe6569659692b4c5962f2308c01680263694dc146b25d08871
TLSH
T1FA416BF3C7D8897D894156F4AB15AE1FCE690E14536C3C5AC8D8AE4F53E28B2D20158E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 843d2e407cd3fa6b1d22694c64c591ff6bcbe037e00f6fbe5b6738243b8cb19d
MD5 0f05e91399de7776afd4c624faed855b
SHA1 d33848860a30f8973978fbdd76d04bf054d3aa82
SHA512 2769a015be22fc22ad4668885919dc1d8a8e616d10a4d1bd4afd047618ae083e1317bd9713f985139c0f3078e31804d144da0d3bb83d06cb44cd32042bac2f30
TLSH
T11D818AF393E5C96D8A1592F09A156E1BCE6D0924031C3C7689E4BE1B53F3972E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 78dc1e9ec808066592a8e112fb2d5ab1aa5ff350ed655a09965c47f8df1b0b80
MD5 c581330b7e1213924a3c08ae21c1fafd
SHA1 ba09f255b2826c3d9f48a7147bb9da0ede0aa4b3
SHA512 6484b5e9181de5ac172afaa9afa758952a5bc8ebe2b2d42cc297afb6c2dd56f75a3ffaafc270211a67b450a0feb7106b54d8b4f4dde1f41e72395a7ee42f71e3
TLSH
T1A38199F383E5C96D8A1592F0AA156E1BCE6D0924031C3C7689E4BE1B53F3972E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 dd987ade8326fe9622068ca685932e5fbcb156090d5a3d492b85d3601d9a592c
MD5 c51aeb7df03391bff27806718495655a
SHA1 4ffb9c35221c38632fc499658e6e56ca28a9819f
SHA512 9caaff4afef048afb1c6c111f04df3e2b4e8fd19cfeae33241c55e9dd268d8db7322ec459c96d33b03ae930d07f6be26523a6233e7700659542470eb67e25a51
TLSH
T16731AC9BD27A745B107C697B0E04BC1A66B6A4370290ACF4DF6681ADF0818F32B22457
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1f50e1eb9ed74c4054bcf5a7abe462afb557fa9010e441e67bfa443797bb72b0
MD5 ef5ff3501a74d23b36fb820f9ade4ea4
SHA1 27697fa528606418f34306bd9c809588e2885176
SHA512 8e2aea82073d1a33662a187f56aa5ef883baff8c78b27c474b669013aef766d39776b6b78c668382c225cd4b769af1922a06eb1d455dde6449a6606290bc29a1
SSDEEP 192:ARrML/zv9sr9v7hpAPRp2lj95Hsb+WNnPDtfr27kz2r2T5P16kVyIsnAUgtaJ:ARrK7S99UXArwrF202Kig8
TLSH
T10942E86EB914693B5CCBC31AF9227B1BD3F6143125A41E84E7FC896C15EB5CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f6f0d6092880824ef0a95af605c88e8f467c3dffd97da21f2a17e1f7a074bf33
MD5 94b67f68e6eaeae1b79891969e37f8cc
SHA1 750d6135e2526da42821e796a6caa36e8ed95cc3
SHA512 cf112a4e323d704c6633707440c460f09752795a46afa701e38fc7137312e77940247ce85f78a5a525540a447fd3399bcd7b32e31ba7bda9225cfb4a72481f7a
SSDEEP 192:ARrnL/zv9sr9v7hpMPRpvli95Hsb+WNQNLPDteIrEKkz2r2T5P16BPyIsnAUgraJ:ARrL7S99gXErwqHEcEj2KCVe
TLSH
T10552E86EB910693B5CDBC22AF9227B17D3F6143125A42E84E7FC896C15EB9CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f4274fd141591f5cae06b98b484cd6c10b3be394a217af189147a8870e533fbb
MD5 921ff4720fcaabadb877d6491e85518d
SHA1 3989f6ef8649b2ebd6f270a6b15e3d8ff0703cdf
SHA512 cb59fcc3ed89312cea1d417b137a6a2349785af4cc2bf3f2e8e3639a797252d3bf9bd47a40a678541c924d4c8a74d3c42482a84de9f13a8ea4d474b49c357c64
SSDEEP 192:ARrUL/zv9sr9v7hpAPRp2li95Hsb+WNnPDtYYWekz2r2T5P16kVyIsnAUgtaJ:ARrS7S99UXRrwrZWP2Kig8
TLSH
T12242E76EBA10693B5CCBC32AF9227717D7F6143125A42E84EBFC896C15EB5CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6bc1ddd3c2835014fcaaa9065b30efc245933b458b6bc9e298b85e5e777b62f6
MD5 07d2c0c773c54b19cc7a008b00e3302d
SHA1 f5288bf8b3f53ead1ab53dc775c60de97abe065c
SHA512 210f5a9ef73d29cbb423ca07ac744b1b961401b3ab10733e83450018c719cd5320f448c956888ffa6eb4f394cc010c893feb483abd6346dcb6cd740576e3d224
SSDEEP 192:ARrnL/zv9sr9v7hpMPRpvli95Hsb+WNnPDteIrEhkz2r2T5P16kVyIsnAUgraJ:ARrL7S99gXErwrEcES2KCge
TLSH
T17552E76EB910693B5CDBD32AF9227B17D3F6143125A42E84E7FC896C15EB9CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b878bc47e151357300ab78d863d181e306a672864f9b7430427896c145f55cdb
MD5 e384e518cb484f49e0d19d3174face84
SHA1 94bf32cba257a87bd0573b8a3b62de5b07256ab0
SHA512 f254215946825ba637967a73954b7dcbd04758412480e6b015c5a9de96380048913a370b9fb6a2065edf2edcf077c08db4654cdfdc1965bccf11cf297a5cf90d
SSDEEP 192:BRXcBznL77VH2sewv7hwMPRpvH6ei95Hsb+WNQNLbIyBCIDeIrEMkz2r2T5P16UM:BRXmzLNSs9NXOrwqlXScE12KCQe
TLSH
T11C62E76EB910693B5CDBC26AF9227B1BD7F6143125901E84E7FC892C15EB6CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 b586505681ab1bb69103f5df256fe4c69e2efec6b37bf001d936744e6d84d265
MD5 1f119b6ef42a47b6def71d9116731629
SHA1 7bfa7c829c996d4f7c10125cded822f5fcd1f37b
SHA512 8c5dc10dd460bbc59214aa45a9bd4b7724d49df543add29555fa93d3500ec268e422b317063ffd31b3390aaf360473dd13b0d33ce99663a705fcf132ccbb0811
SSDEEP 96:F1mKmMNORwcnDh1JcsOyLXbXFXKXTwFXSXTr3XFXKXT5xhXsX+0XbXNXKXTiuZXa:F13/NBmDhEsnL1ajiCj71ajh8pL9ajlK
TLSH
T1EEA15D6EB509184EE4AE4936CD78571B6F69CF0C27FE3767A9DF8A0405B0A5701086F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 336B
SHA256 1fa90b8bcdd1f927d27ef68b878dba3cd00796f4c66eb845281afedce9767fa5
MD5 5b8ecc5f160e7fa3b9f18b16d86422db
SHA1 057fb59cca8be68601ca9b333fdde318e4c88e32
SHA512 a4ea57c994d1c83682a9941b395414d8ac1b05b49fc85cc7c99eaa40cda29a3379fcdaa0a8d3f2eaedf645a0cf50d898c50b507eed4add924cf2f899e5e602a2
TLSH
T170E026B0B5ECD9FD1CD6C00B0320A30DEAE4B817EFCD38822F84E44611C5E0C70A2AA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b5b478a62c7e9e365294bc922f061b3157759eb27b7d99ea7acdf346f896fb5a
MD5 460cb0583c707bff2dc2f4f1174a5cfe
SHA1 60153e6569944fef023347890f5e200efe77ef2b
SHA512 a5e4f565c3f8519b5d620cfbdc973d4738c26d984190d18bfe4ef546f742f072eae4543a74615c3fe62b4bf9fda0cbf5c43f43da146a2591f84e2f120361772a
TLSH
T15BB0121280415112C45202B411521488B1585F10E60E270143F86DA3E8251728414050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59cc9d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59cc9d.TMP
Size 96B
SHA256 27d51a47f033922d9312dede25adbbdf12f5bf78cc55ee290491a316875f2b1b
MD5 748aa0a8e79a3f5000c756b99c955e3e
SHA1 2f4eea77ff544f4bdbbf1187611275c9e0faaf90
SHA512 e276148f10d9b51d7478adad1629d7120db8608273d5aba549edaa85dcd746e477b1939d8f41a963d01f9427d34b210b75f16ddbd1f80d2200b5fc55e9c346b8
TLSH
T1DBB02200C283322AC02203F0208082CA3020EF20CA03832383E00AA2CC30BF20028820
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13430229833688951

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13430229833688951
Size 4KB
SHA256 484824f96fa8f7c85b23a0f3e7283f7535275b3192c571ac15881dfdad7ab915
MD5 567cbc59602c76c72e4f551b177f60ac
SHA1 f59d90da2097c3b228bbcf2fef17b9ad912a4376
SHA512 0ed424b006535b7b599d35ea16668071faab19e3f67aaaeea95640457e6f08777b83a140c0ec5aacb53393fc856283aa88bcbbf68669a52a55e98436a985dc25
SSDEEP 48:3QbK9o7ciSziC9UoEOiYSS+cXEAUTptpJSIkFFp7mPBhFeWunf4nq65Ec8bNy:3Qbs2x1cXEf9J5WWpneWufqqBbNy
TLSH
T1C2A1AB26ABE0103EE13F413995B962F5BA73B94171C28E9F816651184C227436FB1EDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b18368d0daeaf65_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\6b18368d0daeaf65_0
Size 63KB
SHA256 60e2116dd5a9c138afa8265b4ee531bc2eb0b8c1db7e5d16f7451ab182884517
MD5 f80173481012c4caf95a0591e79939c7
SHA1 21a329a6895796005d2bfad167321d7629f8bf07
SHA512 f70d194a50dbacc147a8c778a87ea1a8fd4fb5d165c24f47adfd6a45975b8f091f0ab13ffaa2dd5022384d52acfc287cba70855f71112c0f4dd8c822b125ca39
SSDEEP 768:5o7D6c61j/SAXPeEFfgoAaWhrJTt9/XTghUyqxTBXSD74+EACmiQsNnTBVR8noGS:I61j5RmtRXNyqx9XY4JuqdV6no83iPj
TLSH
T110535BA6337178B3827BA1B190AF170B713ED167B404C4F8A198EEE54A54B9A0177F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 92c3c12a8ba8d50e874901a61c075c6565bf30e9844fac137d38f8dce1838b68
MD5 65f04657ae0ca1f99745c69bbcd174c4
SHA1 a122b7393b9f236bd835b6bf86151f740379f4e3
SHA512 ecce8fcaf8faa944d42e8182d45383357f2aa52f28385f586edab37b6752906e739ee02db30dcd6fe7f62994b35da2a35ffe4796cfa877f7dafa83cb422c3cbd
TLSH
T1C2B0123441C115E1CE121A76FBC1A0C033244A100305070250D01264D3155460214A11
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 9940ee786d7756df91fc4d313c3e53dcdf848c4119619c67376811cace681cbe
MD5 26cc08b16cf94b8680289ff051d3e2f8
SHA1 1bcc02a552acad3d76eccf2bcdb1c3c6d3d929a2
SHA512 6cf44232589bcb177abe1bd88fb75cc4af4c4f88476213a2192f696ff8a0083abe906a63da99077a72ecb8d21ce73a78323346b75e4828fdd7561791191437ad
TLSH
T1F1B09208F750521AC8B925B023989FC06604E012606584528D49AB198A0A6987F40CE1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 348B
SHA256 4b9e741931a4b3f5c10f3b83ee466c32af5568cea502dd296848dbd7709d5eb2
MD5 8d40056ee8c1f4d921e2a03133e879d5
SHA1 c676a627f3c459c4b314f531543013c737a14ef1
SHA512 fbfff8250c501eaaad9c9b78c348c86870bc83c8e41bbbbe16ba402e4f27a1f38d230b82e5e8429f8c769ddb11477f6382f03aa6c9fcf2ffcd1557907b20d3f0
TLSH
T194E0D87076CD8EEE1586806F6310F30DC9E2B806EFDE54D12F08B04452C59087182A90
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 b844ae8bc96c2aaa5d77398337cbb50f5893e6db6f32ce9c1fd8ffb32f0c5e2f
MD5 ab897d0901c4dbf1200e0b7a50f881b0
SHA1 c8f23cf9fba249af0c21e48c7930302aa48a36c3
SHA512 62fe1e6df161da6527bc9651bbd4c8d5db3626726e20e3789de1c2efa4c6bafa81fb31bc2ec6d7d3b6bf2ea7dde060b3f563b5be0a110d2fced03e959f81f06d
TLSH
T181E026F0B5C8CE7D59C0C0434364B31E8AF0BC06AFC936C2AB08744171C0A04A1A0FA4
MD5 SHA1 SHA512 TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 990e2a47bd4778a56c2c06ec0493f65f984d21c6ec5ce6c5c54fb1bb2a4e8542
MD5 feb978d6fc6e78e2c7c0f54c733de3e8
SHA1 ff59a449a4a7d4159638fa119d7f7a13bad4e159
SHA512 04b02fcee7fc019bd0806bdea404beb3c91dafa52ae13a9ca212edf3f1dd9d3ee1318abce6b6a2139d88d76f386f1f982adea2ae72cbb05df0be0beae14c43f6
SSDEEP 96:f7doKsKuKZKlZNmu46yjUTdhXwX4o+XSXf9w:7ZT0nzXTXg4i2
TLSH
T17903408FA62890B3D0B5C43EEA964996FC79150CA323B9D111E94B354DBC037A1185A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 7e55ec36bff845fcaed547cb09ce2f22f1526f41f60827b613d83cdba96ce22c
MD5 841cff85ccaa53d5eadde3fc5df96d75
SHA1 7a16a464811258c2780a073272b647c9cb4cecb1
SHA512 287b0a08870320b97770fc1b62c5617bf6fb945f09c5bcfb126f21b228683c26fe48ef526de5474acfdc71f66e4891568951f99ed57a113c9a54010de2a8d8b9
SSDEEP 6:t3eik1NLZkUhAuGLatJdatjhs6Knu1cc/XKuqHKu42nhu6inyCc/mLEJOgLEJLkb:tOikn7hL9tJgt3dtXXwX4kmLULI1An
TLSH
T1B5025C9FB9059439E834043DC3DE990569670C987B63B8D112C49E0214B9227E00C697
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 338B
SHA256 e2eed9922e05db2f055751688f0a21e8340deabd5333a0bf1e784963d96a654f
MD5 53fe696be472c6b6d90f547c219224e2
SHA1 345eba6759c33536a330c91e3894410914b6422e
SHA512 d909fb31ea21be23dcae9b7297519667c6496a712ee0dca008be648e105992c2518dab6129843b63824087bf317c3777345d67893843864231d038f671d495f4
TLSH
T1ACE02680F8C8C5EF4998C0131264E34E8AD43806FEE82F823F10F9A463808447981A60
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 1f4d44cd80ae1850279d37456f213c658f9678ca1c2adef67d5042c43c5a4941
MD5 cb4df5d2951e808f087fa294cafc3aa2
SHA1 4db392ba019559ba72eff83740dab53074397859
SHA512 387850e009ad16218b5de1e0299b797ba6c6127b91be98c27f209c178beb18af355ba69dfdcbfdcc4c5465dbaffdc48490cc42f277a678d54dfa26273c009bdd
SSDEEP 6144:0iBS+mQYl+69lF1w9k7uFbFdM7l5rVqZ/ZLW3Exk:2l7KkKFbw7LpqZ/piQk
TLSH
T18D3423739FE26F339987D5A4BA331FDB26F788E54830A605DEEB2FC7084550059C6868
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 251KB
SHA256 6c000a72fbfe2a0b9ac2d533d3a559105608071ea1b0d646468b7a1a07448bd7
MD5 fe6f89a659237b22ea6b73662cd7a50a
SHA1 cb3c7bd8584520232b6bcd92747c631694e6638c
SHA512 8e6bae2d2b464a8c30d05b4ce490694b8a5c6414f2fe376e86d5c06de3edb463e106e42b3d2b194a42b802c7604d147cdd6952947b09110bdf6c55cbf7643855
SSDEEP 6144:Z4FqBS+mQYl+69lF1w9k7uFbFdM7l5rVqZ/ZLW3Exk:ZSl7KkKFbw7LpqZ/piQk
TLSH
T11D4423339FD25E33A99AD5E4BA331F9736F688E648309309DEE77FC708454501E86928
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 91035322aa7c138989a758132ea905403181705cd449f7f589f39a8f2f47ad88
MD5 020f90a5d4572d91d4cd3c9a52421233
SHA1 ce56529e6cbb68ef0a6a4c4bb13afd03b9f31199
SHA512 57307a76bf3d42175350f32e717a54496752d41cc013985e518e2303f69425f7505a36f8dc5963fe0fc68d6f1fc8951a1c81a163190a256a93d8b98515a4e912
SSDEEP 6144:WTBS+mQYl+69lF1w9k7uFbFdM7l5rVqZ/ZLW3Exk:zl7KkKFbw7LpqZ/piQk
TLSH
T1593423739FE26F339987D5A4BA331FDB26F788E54830A605DEEA2FC70845500598786C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 8cbe5d9fa1edf2524b3e5b3136b3e8666eb974bdc391a5a0172d9d0e53ac12d8
MD5 9d133b06fe57e33922743e09495a7d16
SHA1 b2254a55632db31c7adb9ede681330e798d719ea
SHA512 c3adcc1b7b6f3b40ec9bd783ec515e0f4474bc99713f55fb2071cc73e153d3f13cb6241698668d0af3b1bfad8a414b29cbc7c083c5edd1324cf29c9326cee568
SSDEEP 1536:6DyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:0qfd7NtZL8cHQRZEQ6Sps9
TLSH
T110C30237EBC25F335D82CB64BA534FDA97B644A99030D301AABD3BFB6C9345164424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 11996447a9092a6748d7021cfa45c55b4731a1c4a1f8067cda882eca9b30c6ed
MD5 f9bb2b6988f4d55a676d8932e436d393
SHA1 e04518a7e012d3050448f2e034ac580c1926bd84
SHA512 79ee22cb7a074904c40b87840b22c5d1d6dcaf0cdeb8ebc0cd2751c8a2371aeb70c077078e9834ac90c11f8a4bd11bb31b997ddabb18768a9f4f7ce4333a2e63
SSDEEP 6144:JBS+mQYl+69lF1w9k7uFbFdM7l5rVqZ/ZLW3Exk:cl7KkKFbw7LpqZ/piQk
TLSH
T16F3423739FE26F33A986D5B4BA331FEB22B648F4443492059FEB2BD7088554019C696C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 ee0c58baded584e5db3699f323b9c3792da5616bf256f36476ad5a56c424307f
MD5 753171e4bc43e15ed933863c80659796
SHA1 e7ff9eaa0bc6b51571912c82f05f96f7f2e4012c
SHA512 a223b53ec4a27f1471523d2009b991010e74029d6de9883dc872d4a399a287ab727201c9c28bc417f22ab4922e5e2f4d41ff74d25c6b51d050a8e3ad6826a277
SSDEEP 6144:0BS+mQYl+69lF1w9k7uFbFdM7l5rVqZ/ZLW3Exk:Ll7KkKFbw7LpqZ/piQk
TLSH
T1993423739FE26F33A986D5B4BA331FEB22F648F4443496059FEB2BD7088550019C696C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 257KB
SHA256 c69a3483611555855bcb6cdb96820c16a354a61c9e58429999175400943ee7e8
MD5 d82fe6f9d8a03685b62f6cefe39dcdf0
SHA1 88dd9276d4de4ac80fea8f95ca409ca0f059fd31
SHA512 dad575f162b5986bd4462ad42bd9bb06d83b584dc141b4e346bdd8ff0c40819d0f1485ad021a202c0bf8a5a404e5ba53163d8a21a9e880d3482351a2d6c2060d
SSDEEP 6144:A4GMOjfntnAFzvVMoi39CXBS+mQYl+69lF1w9k7uFbFdM7l5rd:AznyzvViPl7KkKFbw7LB
TLSH
T1054423D18CB56AF2658CD25AB53F2F4F31B3CCD50854BA5A87E21FC70245BC64B8A728
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 d9b93d72c3455955862ede4cde06101026a8ba1ca6c6c92edc2a5a595ceec354
MD5 2bd2347d3258b5f72034d2ffdfd82465
SHA1 2311b20b78aa3ac03103d7afd65a51864725ab53
SHA512 0a17dbe9dc29aa7350bc4914b7f2c9883dd5707f0318361f9c07ad85a6890b9d059f40a56853f836d19ea7cb856ecda9e1729566ef02080fdf2f8b21193117b8
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0J+:TkkhCU2QB2zbBxxeMRhoEy
TLSH
T1EB23BE4F2B5821E9E0E5183EFED24CA17CBE4F19CA2768D205D00C764CE14AE942F4BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1dbbf0b27c16d691ea1e22153fa40e8da22222109569bbef9df08137d281d079
MD5 fe9b83f7a646ed558e658f24ebbef75f
SHA1 457b3c60f07394e1abcf8695448ac35f7ca97f9c
SHA512 2658e005fece14d2b8d5930c884ade22b560f26c91b809643738d989d636b1a8a294a0ed1d9d1fc7edb2557e078e9974b96850c7f123bfcd3cab98e8e9a5e7ab
TLSH
T171412759A6EE1148B3B36F5AAFF6A5AE443AB9772E0A945D10010D4F0663E40C871733
MD5 SHA1 SHA512 TLSH

Submit Download

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
Size 206B
SHA256 fa198f1a17cf311c70370b2cd1992ce4c7f2aaf12ffd6686b8ebc48a4808b871
MD5 40dc342bfe2925ad59d25837b443d7be
SHA1 35c102492c4a4e677d4d737aff0b0d786eaea4ea
SHA512 e18adf660c7ba38a351b72dfff3d060014506f46a90d9a3a73166dd0855954583ddf868d7f78dd00633fd769e024e1b7bb6bae46791ec81027986b474c9159e9
TLSH
T106D0E955A6FCA0E2591771477A911E909A81F5470C4A0EDC674AE507FE969120D9FC02
MD5 SHA1 SHA512 TLSH

Submit Download

DLCTBL_FRTS

Path C:\Users\Admin\AppData\Local\Temp\bin\DLCTBL_FRTS
Size 111KB
SHA256 8288bc83978fe08ac83ef833a331ce32a3c6b13876aae200819692bc34afaf7a
MD5 4bd15bb6010dc5fe35a66693b8933d7b
SHA1 898ff5de27fbf24f94a205a176328e19b6f74233
SHA512 fbe5757b80aee63510b8204187691f8ba5e02180eb28c2de0f3442960caaf658af3e2977255db43eac406502a549550df8100e6a94ddb9cfebf137c430a7a10d
SSDEEP 3072:tms7SO04MZaAOyoDdNVvrKKFZvF4OIVRrSXO++1/u/:tmsSO0dRCt/ZveOI/Wq2
TLSH
T1A1B31245BF5FE2609989190E359C8E6270746767EC82F0D38B7947934A3BFB2D0CA10E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 592B
SHA256 821538f95a5e4f09c064c7d728996c049dba499973901d0ae5782c1d3f9bc09e
MD5 47817d940224a2b036542c21edf47dbc
SHA1 7e69f19a31031682718ceab560aa6406be69c4bf
SHA512 3bce317c81bf169c7f1e11660a29071a26ede1be0fcaab4e927c2385515a745198295337acd5a1a8fcab9c77f2d33afd85fb1292b79bf079245cf852618760c2
TLSH
T1E2F06DCEA8FD50AB0D83645BA527AC92C880F20D1E6B5FC19305715236D485BAD33E28
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 2KB
SHA256 c5af64e7d4540875fd785a79c83ab73397662a58de315bd19cfd9037cff9a1e3
MD5 6c750e59ae8845ff54d070981fc15263
SHA1 45c4c1f5fb16192aea7406114caa45c8d663d680
SHA512 d81d7b6b2aca625842832209c08c376ac7ef85ea8f628afbbcf556f29a195760976241677fd4df0e4f502b4b79dbe253e94c150779bc70d7b5bf41c7aa39f066
TLSH
T126416B8F98FED1660C92704BE6064DA2CC54F60F6E5ACFC4DB612046BB9180EBC37C25
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 3KB
SHA256 14e7edee87048822b9415e6a6bbbce4bdffa8c12b68cb6cffdcbced016e54656
MD5 e0ad171aecb50824797317fe4124b0cd
SHA1 49ed0f5ddd20783f252e7b51e41e3dd49e4605b5
SHA512 d7506caf2a1a090a9ba3fa759e72debbcbfe44f31028e5d1761b095f0c2ae850f422a084d5c69e87bcee65f98ed978d1687244a4eb10ea17598e64a2cb094d65
TLSH
T182719D8BD4FE90A70D82310FE2460E95CC51F60E5E5A8FC5EB61605ABBD180BBC33C21
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 4KB
SHA256 c1b6121608082c798d755659d128fadfab9fe48e9c4773891795f8b3e5765b59
MD5 3c696a9e56bb2c6ebce9eb645e3e4a2c
SHA1 fa7aedc52261bdf38bc15a515f9065a680b1b898
SHA512 17215a2208c6fa48505f1e319c1efdda97215f764fc3ce5c80cf7a88aa67067469f35c86cabe252f2a192944ea5aa81ed0e7147783663eddbf76e432165d25ca
SSDEEP 96:omR+fQp9SVbnesUbks4DF7mkV71u1PkleIUapD/Db:tRXp9SVTesB7DAkxljDb
TLSH
T1F19157CA94FEA0B70D92B04FE6571E95CC11F60E5EAA8FC5E752204AB7D480B7C23D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SolaraV3.dll

Path C:\Users\Admin\AppData\Local\Temp\bin\dll\SolaraV3.dll
Size 14.1MB
SHA256 5867c50c281aaee3bb5863548b53787aeb8eb895f52768d6656b36147808a8af
MD5 e764887cbd13f3dfab533b1eed7a5863
SHA1 0553edc9a9bb177ed41109113cd85d48f7ded154
SHA512 697d9eec732f94e7e4ca014cc88ab789c19dd2397e812468153aae17f24bdd3e312b6df8c6b7b0af7fa4c49a79a680eb45099d9a840d8e51ce4f71c9bcea11c1
SSDEEP 393216:0wS83kqL4CtTqThEMH2w5h6AF+DvzwH0G5lCy0:0S0qLptglsA6
TLSH
T14BE69EE734D950ACD426C579C793E63BC66F78390335D5E71664A2A20E23ED03ABAF01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 90e3c23095568b37d4268a7ef3fd3e505b0b89dbd7a28ce097c889b7b9d0525d
MD5 28a6bd122191246dd82c13bc2934e387
SHA1 40950d2d1c72eac41b9c1fa99f353b7c0c95533e
SHA512 2a1bb2deee9692c8c2f31cb8ab86386d5f3c2615fa6efac8e2646f0a1ce2050ab70f2ff13c61cd7aae197965b7a2241750d3fa6c51d321efb1a5afee4fcba269
TLSH
T112D01212761205F8C91021371002E2080400D20B50054001642C851D1B440500E03872
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 7f9ec4dc610a78f18f958e2c97e86ea41b73f7457cd1819aaa055772a3c97650
MD5 a645ccc6b7e76a77df3fd686748b8a58
SHA1 dd4fcf9aff2e964fac0af5d2e4db8a8ac849696e
SHA512 5c33dd97aac11a6e081b068acf7f20e5bcfdec30523bb72a24dda139144889afe608b651b0e8e091279fd6af13d9044d0adcfd565f62ae69fc2a870b9b061ca5
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 a57261f93317386d8ef7fb403069d2034e17941cb0e82fb088057e177c6b4e5b
MD5 48b9b3b706368ae091f4b49fdc53f503
SHA1 eb6148f7f35320072f24a9adb2e9ff98e25bfb51
SHA512 1c2aed327f7b42f90f89d36a12b6ed30bf16eef0dbfdb6fe8a8f97e8a6565624eefeed13ee2d8a2f335478fd5c49dd46f0c68c21394445c43bda40a33f98bbd4
TLSH
T1BED0C91491CAE055DF011DB91BC1C84970B5FE6C51471F8758B6C1795A1D39FA382214
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597303.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe597303.TMP
Size 48B
SHA256 8d046a89a5566c7df416a122b3d2c3030f16e61549480c357877cc0cb1a76ff7
MD5 f2eed894482c1250f475fc6ce2645090
SHA1 281bfddca625bd949d13e7bc0ea517520143719c
SHA512 74305c35da015abf384acf4aaa3bd32555347537cc88cf1a72e4fe5f15ed049f5ea04551f3a4fbef9d2426bf66424cd59ec618769ced5c25c56d3516bd04f966
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 97a292adc57beb98f3a6ad57c9aee54a870f57df288c8e49ca4b976bba2870d5
MD5 4f803907af182aad9b8278a98c7612bf
SHA1 5c3f571a78a89651a7a476954aaea6111d89c26a
SHA512 9a2ab67f61951d0bbb5c1dc4b1ef7ae719950da4e3161549a59a8947a139ad320eae644f38bacf83956cdc848046972fd4a4ce27fbd50c7af34907a46d8f51cc
SSDEEP 3:LstlNllkll/lcTKlll:LsX3lEtcTK/
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 7f7bc9d31a780c2f5bb7878af98f2d1c3d22e2c30c609eaf0d206935e08f7e74
MD5 df1f9545a107a04cf2c6da6ca1f0afde
SHA1 9976faa88f6ff37f8d5022c74c7cfdb6f47423c1
SHA512 0c13c89b43ceb2b784c04c217d4f48d6d8b168872f5f30659facf0979d13a62b0902a22a189bb675f20a223b9fb632a169f5767f4f5d7128b5247ac48b9e2d59
TLSH
T15A319DA2C7E4C67D894167E417307817CD2D0519A2287E27CEDBFBAA67D20B1E12124B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe59c058.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\Network Persistent State~RFe59c058.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity
Size 523B
SHA256 908a5008a3cc5e1a80c2024a37a3b3448d7578c030532334c9faf3d6c922252f
MD5 ac30e06e26e03938886d17fe11c66869
SHA1 cdaf77f6586b26f38ca0d06425da2d379fd93892
SHA512 f2447498a1f5f25a69976baec9f1bb75521bad39c377025dec36236539a3f68c3e599d118eac0970b97eb68de41ae173bdb192fcdbaa8f3cd97226c263edbbff
TLSH
T189F0C993C1BEB02A042E18771ED279493FAAFC38014258E8CB52416CA040EA6122B023
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5944fe.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\TransportSecurity~RFe5944fe.TMP
Size 188B
SHA256 f67dd8ff686ab7ce4916c1ae9db06c42f91d2aabb2b1eaec1e7c953bcd5dc190
MD5 d849663f700cd6f2527db88ce78f4e70
SHA1 fad708632d3645c4cf05a2d0e9b5db79793b860e
SHA512 3d915bdba65a968e84af9f55f97755132d29f1368485ab612975dacf3a14eab4d20e2705c0ae28f92fbdbf907278419c8a6a9b9239c6c9552f1d5661cb84c6d9
TLSH
T118C012A2407AA57674AD19252DC5AE856E7AA13501C198E89652456890901B69123053
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
Size 6KB
SHA256 01eba7eeec24cc221f48cf364d528e6118db86d2e4f3cdc914c153e8608d7757
MD5 234aae7c8746e88c5abf35f717081774
SHA1 e9f837e3fc72dc40284dce0a40e71f6d7dfca74c
SHA512 693b3b1080eeb7cc1a602708664b9fe29d4b55e8e85d05be38bf7e169acd5b7f8d43e3235ab4e24977905cc4cffff62cecb7ff8198f06b6ee722e93d1c64f645
SSDEEP 192:stD07nLGfCZ8paaB/S+WiTuPwxgH4fA3M8:stI7Cdn/Vcwx98
TLSH
T1A2D1C8029F6869778CC7E7197A36BF42D6FA102261D50ED8EBFD851C08E66DC620790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
Size 6KB
SHA256 f8058a994f03d65b3248cb0f8bf0b37b188c605d3fe4d4ceea3d1c3dcb387506
MD5 165849a01f272f01c5c24f7c5b76d4be
SHA1 1d6f2e8ca715451b0890a6d8dbc8a001f0e0ab47
SHA512 6a7043f5fb995c75041baf9fdb9a2730ddf52039cd53a9a6c38279d6e5b29e5daa51a38d977a1ce6ba38a4555d590c8bd1833705c302576b2ce7d1d9770497ca
SSDEEP 192:stD07nkGfnZ8paaB/S+WiTuPwxgH4wA3MC:stI7Vun/VcwxcC
TLSH
T175E1E9025E6869778CC7F7597A35BF12E6F6102261C50ED8EBFD861C04E66CC620790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe58f1dd.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences~RFe58f1dd.TMP
Size 6KB
SHA256 e29c1295e16e5d02c4713dbe38b34789950041b6261ccd6838feba498d84bd94
MD5 93675bafb7d43fd52e8daf9dea2d81c3
SHA1 bcdbb0270d7fddfb58393b579e123545cfa03ac3
SHA512 43b62575e975077dcd1f2cb85910ab3887b31a6c077bd20807ee5725c0cdb6dbeaf6ecad2369b560835a67f88c4c2f2613e43fb90030d1c8beecaa72d53738e7
SSDEEP 96:stD05lyRqOb9MLGffaZ8i0vhE3klm/7qx+WVHMSm+uecadQjl+gPA3MEB:stD07nLGfCZ8pat/S+Wi8d4dA3M8
TLSH
T1CFD1A7025F6869778CCBE61D7B39BF42D6FA202261D50E98EBFD851C08D65DC530B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 17KB
SHA256 8935bae777ff3acee844eb7ac3a20831b0e6bf502496d156f2effaa0bd0cdeda
MD5 d764f5cf06df2c0b313147984f085931
SHA1 44aa780b2b7fd98ea2c46af86f7defbefdad54b0
SHA512 78d20ea2999307abb02a8bd1751498ff49b2699c8c91824e1e9557c01602b542fb03c957fd17ca83b41e26ca786b03171864e3fc2ab3c0ac787b469725d78478
SSDEEP 384:zA+aQikB+z/xvxjg/qhEKNgz/43ufWg6m49zM:T/UxvxjgC+WJg6m4FM
TLSH
T15D828D36A478BE2798F3EA857A491B9BCBF5847240C55EE88DE91F0D06872EC0347D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 18KB
SHA256 faccf2696a57f5cd2af89476a29fd57afe220ebf9812e2954793e8b98540caa3
MD5 073bef7cee8c59fc4de65c99a69d2127
SHA1 2402d1b25c34d6f8b27c7d2b0ca2845ae27ecea3
SHA512 eca39450c8fbd762cd5e369382bb72d25421310ad99aa615421343aad6bea6d5ba27100f204e522e599ed108d0bfa62b182baa1ec17a3bc57cf9e2f78acf59ce
SSDEEP 384:z++aQikB+z/xvxjg/qhEKNgz/Zy3ufhg6m49zM:d/UxvxjgC+yUg6m4FM
TLSH
T194828D36A468BE2798F3AA457A491B5BCBF5407240C51EE88DE91F0D068B2ED0347D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 1KB
SHA256 2f32d0cec15abca3183e9c6104e036280fbef6bbaa8ec8762a79f59fc89c77b6
MD5 eebbc3c10e1b047490e457fc7bd5f542
SHA1 3d47d9418cfb435a34b81c25bf194895f1cb2e50
SHA512 862a31796111c50e7d67c7df290459e116b0e0dc953cc7b6d7b39c6df9cb5d2dc90be74751bb316beef7a4293f197b6bad5c515e949bc930e399d2afc3b3b045
TLSH
T172318572E4D47F365CC21A86B5826F471EA6003AC1308E5C95DD8B2C02D75EC9A2ED33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 2KB
SHA256 c56fdf2562c3c7a5566537200f78bb95b771d8e98065c4922519a09dc2aeb1be
MD5 71154742bef4eec3d24875a547bc66e6
SHA1 7a91e0cc583fc3a3a81df45aaad772a1c3bdfae5
SHA512 02883294aa07ef1512ef2f321d705ebcd9a952efcaec0a070cd87bd1426bdec9f7868e3407c0fd1cd8668f946523dbeaa15d25f0e8fd0d3aabfd8a0adeec95da
TLSH
T15051A533B894BA3B89E35E85B9463F139EBA4035D6612FA499DD0B1C01DB5AC2306C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 3KB
SHA256 7fdec00619431fc8e501a28be494da03e4fae5e7654b242b7c197f8ede3c1e7f
MD5 359e46b23c196c02973a4cce50af742b
SHA1 6f0512e2c372c0b8b20e30b555238bae58fe270f
SHA512 c5bf8585fc17e48b1149e3cb06b6a5a55e984ccf6a7cbe12d0cebf078eef7b9278f7f660e510a9ead5dfa59c14ff397b86f64906e1278d23985313207ae16f3c
TLSH
T1C371B82668A4F93B4DE39D45B8862F06BBEA4137D1A03FA9D9ED0F1C01D72E81342D17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 16KB
SHA256 ef4b4e8739dffd6160d53dcafe2f1060af7053062a7e2eedce648c2ce1689789
MD5 90bb8e72ad5cd76691bb7c75ee86f949
SHA1 25f0c33a4aef06d2260e2028bb77bcf538336e9e
SHA512 7d117831d8fc189c3e302e24a097c5671082cac7de3bc5ae2928dd4bac7bba1f1e05cdaf33127e313c5277671008061eaedccc86d25d225a9a8a10bff1a34cd2
SSDEEP 384:zh+aQikB+z/xvxjg/qhEwNb8443Qm49zM:I/UxvxjgC+hgm4FM
TLSH
T114729E2755787E2798F3F90579590F4BCFFA847280C16EB889EA5F0D068B2E40346D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 17KB
SHA256 5e21c29393c993eaffb03779c7605f3cbac1993c40acc29f574a1b6af460f80c
MD5 48ae6539803bc9867192137a6bc0aa36
SHA1 8c761cc955bb3b52de47efe8a9180a16f4df0cfd
SHA512 a513d77a3b46680d28c6b775fb4de3095929df6b162b6f2f32206cf3ad796ce54dcc0da856684287c1589f388164b9213726e3b501dfc7625a39e19f38d6f2c5
SSDEEP 384:z8+aQikB+z/xvxjg/qhE7Nbz443uS06m49zM:H/UxvxjgC+PY6m4FM
TLSH
T1AA828D3AA468BE2758F3EA857A4A5F4BCBF5447240C51EE88DE91F0D06872EC1347D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58997c.TMP

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State~RFe58997c.TMP
Size 1KB
SHA256 3b10e759a9e01968dd019d503200bd6963daafd84f07a6fa704ac010ecb1373e
MD5 f634265ee3d84bfca2f047d472fcc1e3
SHA1 d26ad6c58a9483debf535186ff792dc1e4e58234
SHA512 a629b256a2723cbd6afdc7e1b84ec62ef1c622a8eb5e032b65a6f3fd3918387182b1f4ea8d19a779cb744ba236fc2216991834cf2c36933126d5dbeda4750cb0
TLSH
T146216536D4D87E3A6CC20D86B542AF4B2EA5403A81309F1CD5DD432C02C74EC862ED33
MD5 SHA1 SHA512 TLSH

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 742390.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 742390.crdownload
Size 9.7MB
SHA256 6fe4e34d4140fd0dcf70dd5d489a56c3ca6b6de28fc19a6745a3d7eb030c6f90
MD5 b37da17b4c0f17be88c1a4d8ed38f779
SHA1 65f6b893ece9c5f0038ba2f3bfc08d8cd1133d38
SHA512 5659c01c11e750083d29b206ba1abc477e638920beef28f9180f7c8f148ff3c8f1d715b3e052e5afd43a776bbaaf99a69618a94a18aaf474150f3aa3ae6c8021
SSDEEP 196608:lm4L3+yKlLWA4MhfmsxfMgkjvJZ/L8Z4UrbW0:lzKhfmsx0gSvJZ/L5UfJ
TLSH
T130A6AE22F900C032E4D100B2AABD6FFA993D99341B7954D3A7D459BD59305D33B3AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/944-243-0x00007FFA155A0000-0x00007FFA163C0000-memory.dmp

Download

memory/944-957-0x00007FFA155A0000-0x00007FFA163C0000-memory.dmp

Download

memory/1208-144-0x00007FFA334E0000-0x00007FFA334E1000-memory.dmp

Download

memory/2944-28-0x00007FFA334E0000-0x00007FFA334E1000-memory.dmp

Download

memory/3720-53-0x00007FFA32860000-0x00007FFA32861000-memory.dmp

Download

memory/3720-66-0x00007FFA33110000-0x00007FFA33111000-memory.dmp

Download

memory/4624-1018-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download

memory/4624-1016-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download

memory/4624-1011-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download

memory/4624-1012-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download

memory/4624-1010-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download

memory/4624-1022-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download

memory/4624-1021-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download

memory/4624-1020-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download

memory/4624-1019-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download

memory/4624-1017-0x000001A69EB00000-0x000001A69EB01000-memory.dmp

Download