hxxps://thepiratebay[.]org/description[.]php?id=20414705

Analysis

user interaction
yes
max time kernel
899s
max time network
883s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 11:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://thepiratebay.org/description.php?id=20414705
Sample260811-nmv96sysgt

Score

9^/10

discovery persistence ransomware

Malware Config

Signatures

Renames multiple (52) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4304	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309215126227116"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
5648	chrome.exe
5648	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 62 IoCs

pid	Process
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe
Token: SeShutdownPrivilege	4956	chrome.exe
Token: SeCreatePagefilePrivilege	4956	chrome.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe
4956	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4956 wrote to memory of 3548	4956	chrome.exe	88
PID 4956 wrote to memory of 4304	4956	chrome.exe	91
PID 4956 wrote to memory of 5964	4956	chrome.exe	90
PID 4956 wrote to memory of 5964	4956	chrome.exe	90
PID 4956 wrote to memory of 2380	4956	chrome.exe	93
PID 4956 wrote to memory of 3344	4956	chrome.exe	94
PID 4956 wrote to memory of 4984	4956	chrome.exe	95
PID 4956 wrote to memory of 2380	4956	chrome.exe	93
PID 4956 wrote to memory of 3344	4956	chrome.exe	94
PID 4956 wrote to memory of 4984	4956	chrome.exe	95
PID 4956 wrote to memory of 2852	4956	chrome.exe	96
PID 4956 wrote to memory of 2852	4956	chrome.exe	96
PID 4956 wrote to memory of 3160	4956	chrome.exe	97
PID 4956 wrote to memory of 3160	4956	chrome.exe	97
PID 4956 wrote to memory of 624	4956	chrome.exe	98
PID 4956 wrote to memory of 2628	4956	chrome.exe	101
PID 4956 wrote to memory of 1584	4956	chrome.exe	100
PID 4956 wrote to memory of 2628	4956	chrome.exe	101
PID 4956 wrote to memory of 1584	4956	chrome.exe	100
PID 4956 wrote to memory of 2328	4956	chrome.exe	104
PID 4956 wrote to memory of 1616	4956	chrome.exe	105
PID 4956 wrote to memory of 2328	4956	chrome.exe	104
PID 4956 wrote to memory of 1616	4956	chrome.exe	105
PID 4956 wrote to memory of 3896	4956	chrome.exe	106
PID 4956 wrote to memory of 3896	4956	chrome.exe	106
PID 4956 wrote to memory of 3656	4956	chrome.exe	107
PID 4956 wrote to memory of 3656	4956	chrome.exe	107
PID 4956 wrote to memory of 2040	4956	chrome.exe	108
PID 4956 wrote to memory of 2040	4956	chrome.exe	108
PID 4956 wrote to memory of 3060	4956	chrome.exe	109
PID 4956 wrote to memory of 3020	4956	chrome.exe	110
PID 4956 wrote to memory of 3060	4956	chrome.exe	109
PID 4956 wrote to memory of 3020	4956	chrome.exe	110
PID 4956 wrote to memory of 4476	4956	chrome.exe	111
PID 4956 wrote to memory of 4476	4956	chrome.exe	111
PID 4956 wrote to memory of 2832	4956	chrome.exe	112
PID 4956 wrote to memory of 2832	4956	chrome.exe	112
PID 4956 wrote to memory of 4148	4956	chrome.exe	113
PID 4956 wrote to memory of 4148	4956	chrome.exe	113
PID 4956 wrote to memory of 4340	4956	chrome.exe	114
PID 4956 wrote to memory of 4340	4956	chrome.exe	114
PID 4956 wrote to memory of 1036	4956	chrome.exe	115
PID 4956 wrote to memory of 1036	4956	chrome.exe	115
PID 4956 wrote to memory of 2284	4956	chrome.exe	117
PID 4956 wrote to memory of 4272	4956	chrome.exe	118
PID 4956 wrote to memory of 2164	4956	chrome.exe	119
PID 4956 wrote to memory of 5608	4956	chrome.exe	120
PID 4956 wrote to memory of 5608	4956	chrome.exe	120
PID 4956 wrote to memory of 2636	4956	chrome.exe	121
PID 4956 wrote to memory of 2636	4956	chrome.exe	121
PID 4956 wrote to memory of 2040	4956	chrome.exe	122
PID 4956 wrote to memory of 3256	4956	chrome.exe	123
PID 4956 wrote to memory of 3256	4956	chrome.exe	123
PID 4956 wrote to memory of 2284	4956	chrome.exe	124
PID 4956 wrote to memory of 2284	4956	chrome.exe	124
PID 4956 wrote to memory of 5408	4956	chrome.exe	125
PID 4956 wrote to memory of 5408	4956	chrome.exe	125
PID 4956 wrote to memory of 3572	4956	chrome.exe	126
PID 4956 wrote to memory of 3572	4956	chrome.exe	126
PID 4956 wrote to memory of 1000	4956	chrome.exe	128
PID 4956 wrote to memory of 1000	4956	chrome.exe	128
PID 4956 wrote to memory of 6112	4956	chrome.exe	129
PID 4956 wrote to memory of 6112	4956	chrome.exe	129
PID 4956 wrote to memory of 5440	4956	chrome.exe	130

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://thepiratebay.org/description.php?id=20414705
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffec7e3c728,0x7ffec7e3c734,0x7ffec7e3c740
  2⤵
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1604,i,9251396833311740184,4845075122465118465,262144 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  PID:5964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1464,i,15980881809126009948,139742984769313375,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2212,i,6513720554421763916,15938773238691744505,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:13
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3036,i,116759734509528084,6881786224691542634,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3040,i,11083515646634017064,4344589649796844774,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4664,i,16391798071002550270,1805934275198333162,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4872,i,13139380948360782731,9413936448819215,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5520,i,8367338214518955284,2914232716083082614,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5876,i,10184900287325861730,9719614584477497746,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5848,i,6352010888818157757,11301879264507024524,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6152,i,6446970560834240884,12927520412018251359,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5712,i,896667394190876695,17547922289873169938,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:9
  2⤵
  PID:1616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5860,i,8848437868147466746,15935164278490933100,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5800,i,3604389949328213639,6429371678856985743,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6224,i,2521433283566379756,11363293378761656529,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5620,i,1686801551101758634,10238894889321688413,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5640,i,7410784993249546386,8770260777759754,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6496,i,5042403367949946232,3055040983052623283,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5528,i,8469395558551481470,12012850343630228,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6656,i,12800033133860673585,3792922088569137871,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6732,i,10660336911369095029,5948019947437852413,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5548,i,14407355428137781324,18315330963284608378,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,9092682320028496469,8759394302865087268,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:2284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5788,i,17146143215045607681,10027808996433903839,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,10986508821651936023,15096646943597955877,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:2164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=4504,i,10649958296251586680,5782586737838598789,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6820,i,14877232761654352233,365324398495166970,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:14
  2⤵
  PID:2636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6340,i,102000017379680282,14904106076785971839,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3016,i,7736002515885061356,746140571241630102,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=1092 /prefetch:14
  2⤵
  PID:3256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6340,i,15566946547292577086,12395798447406864461,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:14
  2⤵
  PID:2284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6924,i,605723814818256690,7286708093024224531,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=788 /prefetch:14
  2⤵
  PID:5408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=5548,i,15956821773394910228,4561178412675966322,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:9
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6408,i,10130330038310741272,15852268443105535693,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:1000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7148,i,15885909453119654288,1358634301590836231,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6696,i,10130299590286696391,5742627355607215956,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7144,i,359454873332651664,5499346535365484569,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:3552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7012,i,17751197986444594649,3405322322829263165,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=4984,i,14424250737347186106,4711301532017992419,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=7100,i,12360985825196950278,7327852212035397464,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:1312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=4788,i,9887263403045153614,5000907512788691268,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:1
  2⤵
  PID:6080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=5764,i,8851809167329822301,2101610462649298914,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=5760,i,4503083818929198196,17944602955897994635,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=7076,i,13670071523405518959,2037473751718098222,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=4836,i,12409622238166896872,17856436803809654018,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=4800,i,2303156778494461550,8639878497872093008,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=6120,i,8395503421036591566,2360645760164118970,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=5800,i,16530148809640716380,5023714019979653998,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=4724,i,14597155322571782981,10582124260922743858,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=7064,i,13206191021816298500,8630103930643350924,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=7012,i,10129174662174957366,16639092790402329428,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=5688,i,16882654523090542693,9904006842917677575,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=4948,i,11081984009983257587,4650488813789335411,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=5976,i,8162384367203659098,2547843991823486795,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=3916 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=6388,i,1967492398753006764,1300389042449801815,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=4892,i,1303475274951772341,4538213607898462687,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=5688,i,11168779492413642306,15461872009982336446,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=5624,i,2310504455831394842,2336580904187143963,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=7116,i,17789033718162620666,13315924719776486991,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=4796,i,11999122254001270623,11979719625807757037,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=3916,i,18181334301846210626,3181104933954860306,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=4960,i,835793473248534909,17300560267876306361,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=4736,i,5932516836437618065,1409084528196258708,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:1
  2⤵
  PID:620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3016,i,7232887235453716829,11576367751074622610,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7056,i,15440445254236040714,608773537523527431,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=5540,i,14004680340079281793,4895978473959958408,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=5668,i,465949430770434297,1507468717639196857,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=7084,i,5940117069589186256,1051955292855112430,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=5648,i,14703438163354033673,14703808475941044500,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=4896,i,7107629362494346886,1561251963097715310,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=6652,i,8078589005926674107,15748760004874835298,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=4844,i,16845413224788071256,217776346510930701,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=4744,i,503657643532526307,17831601902166355211,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=6720,i,9164928674595889493,14942669788691622500,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6420,i,14774028860739432880,17450203800877731793,262144 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=1016 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=2860,i,15046097540638158646,16803702967298756460,524288 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=1492 /prefetch:14
  2⤵
  PID:2528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=6468,i,10284282959232579541,11081474370758355268,2097152 --field-trial-handle=1908,i,2485687935130864015,7313942066281053334,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:9
  2⤵
  PID:4608

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4476

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4676

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:1908

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5576

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3700

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 53KB
SHA256 351ba345250baf98ce325b4017ac9b96c9498f6644937ef558dc5993af676f2a
MD5 1e2d4737305eea41ee9198e3fd3f59c2
SHA1 abff05d701173ab7eae355be60ad30cf7f63536b
SHA512 469723131222dec7ea745b528fe62586da62d02505b6904a4b97157259dd37c26bf0d7012538ec6ab999c4a82d44f97ad7a1bc526cea9e8ee1cd30ff218fbce8
SSDEEP 768:aE9HsQuRLPPTiTRi06pYSINz9AdaTV7n5qAsVUdRwRuIDzjYTXqq2emOr8d/cNPk:aE9HsHPPR06bIhedCaAb+u2veJ8KNad
TLSH
T1354302A0446EF3CA3E6FFD7D9F225D5124E22A354838CAF6103721793F58B959CC1A88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 39KB
SHA256 15aa84e0a850ae9167b380a8bab45cd0d9e63c2a38bf6c3934c9ecd65f9ee9b8
MD5 dcfc9a4ece98169072bbd76ce65cf0de
SHA1 4672c62fe7d68e91c51a23a89e29c42d28f81a8e
SHA512 6d964d35379e1b6bd204302b4e8130b1bdbeee37d659c5900e38b31bbd86a579ae13bec36f742811b07f16b5e2155c1dfa458c205dbc8d56bef9189f1431f990
SSDEEP 768:cGSIdc3+XQ7md79qZ4K1W7r67l7K0fUFa/M10EqhJq1UQ1/g0VRppO+nyj5abjoP:tSD3+XQ7mp9O6rmlWPD0Eim1/fVNOJ8Y
TLSH
T1EB03E1587725A8830DDC16CC1CE0EAA41B5DFB4A40AA93F452CE5290EA53B46ECD9F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006b
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 a504eefe6f57c418379f18200bb6fb391c53be28cc4688fdc1ef97dd5a684174
MD5 741dfd02cb39914b42e32b95103fe129
SHA1 dddd591d2abbb425be775939dac12bc8497521c8
SHA512 9b048c8bee039624f93012eba8f7b6b836ca9594efcfd6d2dd10b79e380c8eedb79b8c31cd7e86939fe8847f7b69fddacc69540ddc973d37004f220360a0dd93
TLSH
T1CC21EF8954E18492D787D8302989AF84F5BD864B50D39FE35A889EF3D06771C1B34B80
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 dbf80032eba9ff66db9ee570c0649a1dd5bb96617a1b1bdd8c68dacfac5a7ca9
MD5 ca8771690561634307012b71c57c386c
SHA1 0c1a8e0fd0984c513994cd4032b3bcb1768b5d61
SHA512 875b6abe0f7d25efdbd40f5a0642de11eded6a4ea6f68f8702fd9c731bdaff7db5a8a94abd2099ad1367715abaa4bcdb84fc8e89d7cb234ed4f9d9a17c3796b0
TLSH
T14A41DE5414D35282DB469A3214989FC0F8F9818F508FCBE3A5455EF7D0672880B30BD9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 16ca8572014b2628b57d0a52c0094e5ff4a49b5fb41dd2385fac1b8c153b1037
MD5 603292c6ef5ef9aacb3b490d45d2880a
SHA1 1eff6772af1343588cc2673de1988a58e7ba8bc4
SHA512 cb16e792cf64910ef02223d10b0174819dda892490ee1369127e5a1396afbe70f3c2b947f994f2c5bb8e39cdbfa11f0cd108681cce5d3cfb40f05be6b9bac834
TLSH
T14441F15854D39641DF46AB3364989FC0F8F9858F509FCBE3A9465EF3D0572880B306C9
MD5 SHA1 SHA512 TLSH

Submit Download

12b5ce42-4f48-4265-8459-b38406ef4239.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DNR Extension Rules\gighmmpiobklfepjocnamgkkbiglidom\12b5ce42-4f48-4265-8459-b38406ef4239.tmp
Size 116KB
SHA256 7d20a595bbe2af265f5af65348f78e113d0a3e68c067579f8a559d1a0e114cdf
MD5 f7a79e5e0ad8cd8aba98e7c560c9a360
SHA1 e0ec795681a4e0a5aa1d772cb2be1c2e71d0ed7e
SHA512 7eeb2766fe26a43ec247d2170e50a0edf9f5e4e5e1ddd43cc27582262bbd0130ecdf6c2387883f6e7faa0dce708f62927dec8f21428efca50af15c7b17bdf3e4
SSDEEP 1536:CuYHakP4rUOUtIGUOUtICUOUtICUOUtI7UOUtIdUOUtIAUOUtIaUOUtIGiXgSL3a:hUOkUOIUOQUONUOfUO2UOsUOYaB+kaf
TLSH
T1C2C3B5134D1C14BA9ED902D9584B7C0485FC22279358CFF1AEF8D61E968E745B08BAFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rules.fbs

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DNR Extension Rules\gighmmpiobklfepjocnamgkkbiglidom\rules.fbs
Size 59KB
SHA256 2f8abb34fe56802e7f25a2aef85090d9708807d074b0e3dd27cfd87774d3e863
MD5 766ea668b36fb14648aa59535d6d931d
SHA1 0d21d5922e41049cf70f3015bc5e4ca96999326c
SHA512 dd1a05c1498976e441ed6831ef03a47e4b12315b3ac68d7094d2a9ccf19670328803c063d4e88c881a630a30fea9e3534df26ce6130113754d55422fc79ff3e6
SSDEEP 1536:zaY2GgkSG2AW9+3AxnelyxPKCFAVlsdJiECV8cXtdR4tCVYGcxaXKo9ccDsNB56y:zaPGgkSG2AW9+3AxnelyxPKCFAVlsdJF
TLSH
T1F743E8B7A5EDCA70F0F92135885A473606033302D094EDFABD78854635876F137AAA6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rules.fbs

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DNR Extension Rules\gighmmpiobklfepjocnamgkkbiglidom\rules.fbs
Size 69KB
SHA256 689fdc7155e780df536b7df2f70b63838b5edde4e16600b2214eaac32456ffe0
MD5 ffef7f0881d86b8f3a31af5dab438a38
SHA1 c1a78dccb65967412f9e3bad0032b9f675389964
SHA512 9fcba3ab836c3507415b4bc0da332bd6e037ef6927b568179da2ebf6ef78852c23f338e5ecc4a9b5c499ceda1071dd5f85c011f860ae783c1eff7352c3214170
SSDEEP 1536:8DOn5M2uogx4aY2GgkSG2AW9+3AxnelyxPKCFAVlsdJiECV8cXtdR4tCVYGcxaXy:Xn5MOgmaPGgkSG2AW9+3AxnelyxPKCFn
TLSH
T15F63C777B6ADCA70F1F9113584AA4736021233419480EDF7BD78860A354B6F137AAB6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_gighmmpiobklfepjocnamgkkbiglidom_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gighmmpiobklfepjocnamgkkbiglidom\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 f3aa1b7a264ed2efa4568ffbd770cdf1b29ee3be9eee94a1f3383a70b00b2843
MD5 9feebca5f06cf77e4acface3c6c6d35b
SHA1 2db22bb485a7a46de83cbd18fbb1faba3f5bde4c
SHA512 8b32abd424924aa1c6b72008aaa15eb83d09f0f6fe1f089dd347e0fc22c526040369ccbc0205fe681f49dfc0e8d04634518d6cd89cbd7364b4875612498ae512
SSDEEP 384:Dk0uhq6aq3E/UtqwTl/l+GwyytKMEjSlBNqUet1WwxqzLI3TJqqKtkjyiLlxH4HX:/a1Elg+9
TLSH
T19552DFF783E4862DD90191F4DB15AE2FCE2D0628032C3C76C8D4AE1B93E24B2E25575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 3b76a7e8f05a226af426b940dcc22641bf83fbf72ed4703efd18f2bfe77c3822
MD5 68194cb3132ab771629f2a5b12733140
SHA1 9e2cd0941d7c4e1dfa856475a6cd9d53507d2ff5
SHA512 8c3a67cc180f5371115fc629feb141b5d92bbcf695667886dba1df6fc568fcf69ea2352c1d9d77c4db36506e6156b3130904bcffc8ae2929f7681cd957c73915
SSDEEP 384:DdD0ttlNh3hJYCXwNEcwwnV3yn78r9yUUqYt1Gwx9zPIBaJjyHJboZtCxrJIltl8:h2SL
TLSH
T11652D0F7C3D8862DC84212F4D7256F1ECE2E1A18432C3D26C8D9AE5B93E2471E25575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 35018e6a83bf780bc74a28d57068f1303a777cfd2c09904b9fa6e9bac35b9bcb
MD5 3a4bcd097a2def704498183ae3fefb99
SHA1 6b72c131571bbad80e5f03e45dc1f2a39370ed8e
SHA512 ad61610557ae994130cdbad6b72966299cdcae306554f1068582b9de55715a3dd0c8bef4862c2a5f1ad8a701f763f98706a6753f10fc0241d57d31268c1f89dc
TLSH
T187319CF7C3D4997D890456F8AB157F1ACE290E18531C3C26C9D8AE1F57E6872D20064E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 008273b885ddc90c8bbdc282ab1f06400b3a3620cedce1668a326f036359105a
MD5 ca19eb85ada2cd65a17ed850a3806383
SHA1 a26a0521afb240c4753a9027303ee09958388a4e
SHA512 34961a25e380ea228a2127d387710b3fe31413945c007282595b9a151a769a5a3faa4c9dfb69e48a2a71b0f32484ad91c3edde29277a3ccc3dbe71db52843cd5
SSDEEP 384:Dk0uhq6aq3Em/UtqwTl/l+GwyytKMEJvFNqUet1WwxqzLI3TJqqKtkjyiLlxH4He:saSElg+E
TLSH
T13352CFF783E4862DD94195F4DB15AE2FCE2D0628032C3C76C8D4AE1B93E24B2E25575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 585fa03402cccb897a59048dcc9072f2135cd0a92961b91529e9002bbcd79450
MD5 201843c4dc56b7fb603932edb47c4de3
SHA1 44cb448c5ab161ca8d00a7e60fdc22baec9ffb09
SHA512 bb3d8b0e6c1d09a3e7f73aaf39e841ff29011c9696350493b84e698c339ad1090d840c76cbaf1b02c2e33e04f411a59247e4dec0d0c3e6d8dae641d2a9beb187
SSDEEP 384:Dk0uhtlNh3hJYCXwNEcwwnV3ynHKbaJTNUUqYt1Gwx9zPIBaJNGboZ+rJjyiLOxh:RLkKTlDux
TLSH
T1C272C1F7C3E8862DC94255F49B256F1FCE2E0A18432C3C66C8D8AE5B93E2471E25175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 031a2fc845cd650c8f9428207005dbe10c4d6a7c6435912000bdca6815f814ff
MD5 3020b1117fca350c0b6422509438602f
SHA1 9a10d2b8b6cdd3283ab116007da220075abb3d1a
SHA512 999f0976b708dd357b38bb730a96510e3092c61a23e4f0e9f6eb1ca9d5c1fb8d132b7336993c3cd4c525fb17610a0f2f9b591dd2a6cd064e97507ed2fb07e0e6
TLSH
T11B4157A78A7EB8AB306C097F1D45784E19BAB435024265F4CF6B817CB0C99F72F12423
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 4c2f779c9346c1da958ace47caa6a3b1a61d32c8cac1bdd7ed036df515d4fc01
MD5 e0636360f1fbd144fdf22a814df5c2ff
SHA1 eba7fb2db9729113b4fe9f8ada198fde6318f900
SHA512 5bf4380d156b25004ada5975fe55765721d76b7a09ffa5e13a09d9daf811ad6dcf298ab337e204d04599091416774f618c8f603f31f024d97b9c8b4470663f72
SSDEEP 192:aRGxb4ATv7sAPRp2X964Hsb+WNnLH0WO2sO9vvVyIsnAUge:aRGJTrBXUbwb0t2sAJe
TLSH
T14132B53EBA65697BACCBC219F9217B53D7F5102224942E84EBFC992C14E7ACC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c6f97357469009133aeab436b534bbcc08714e0fc0ade87b8f58930eb746dc89
MD5 58d1c770e01697a062f47027349c972b
SHA1 86fbe8adc8e36307a1623e9fb1c1a331b9d3146b
SHA512 8a62ec1ebeede71eab07f839152b0bc01288c5f84c05a661b4f44ea28f3093cd20f6d12bcad24711ea23ea11b9094b0e2bfcc810b977a5c7eefd5bc3ff22e760
SSDEEP 192:aRGpbRykAZv7szPRpf06yYi964Hsb+WNeEXv6LHn9lx0vLn0U26O2sO9Xv8yIsnv:aRGRRyH5UX+bw9qLxI/2R2sa0E
TLSH
T1ED62B52EA9602E7B9DD6C229F811BB56E7F5502224D02E84FBFC892C14E7ACC3213517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d2a62427b202c7cefc74af822f27a33997c58c942d9f418873512118c9a4d797
MD5 5cf891104ee4cd188a8d68f7aba5c5a1
SHA1 c231d551cd0f6cdf6740fddf8feb33bba37a4e2b
SHA512 a369bf68b6c29894fe010a2bbcec91efbba492e200e80f93858f87cbeeee96e41f4f41e6ec50300185e6276b02b5800ede6e92dbfef7c5e8f483e808a4f9216a
SSDEEP 192:aRGpbRykAlv7szPRpf06zi964Hsb+WNesv6LHn9lx0vLn0U26O2sO9Xv8yIsnAU3:aRGRRyHVUXgbwrqLxI/2R2sa0E
TLSH
T1F962C63EA9642E7B9DD6C229F811BB57E7F5502224902E94FBFC892C14E7ACC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2a7d804606f2ccac007f124ae0010ce48e30f1f24f88bf889abcf44793125d4d
MD5 ac0f9445bdd4eddf23722f5cc265c3be
SHA1 fc2fbf475f0a65a2de2750c673fadc4e99ef9b99
SHA512 9e153dc1e66ad906264f77016e6e50f99bc3ce396e2ebb389dc66b0091590d44870edfecb6b148d77ecff503419147eee431a81e244697269d96ac3817da6bd2
SSDEEP 192:aRGxbRykATv7sAPRp206zi964Hsb+WNesv6LHn9lx0vLn0U2nO2sO9rv8yIsnAU3:aRGJRyHrBXhbwrqLxI/2O2s00E
TLSH
T11752B63EA9652D7B9DD6C229F811BA57E7F5102224D42E84EBFC992C10E7ACC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 da7893f6a700a3555765c6811327846bf8da5d2f0427bb0d05789911dbfa8fcc
MD5 da21a54bf59a1427d15da25c14e3abbf
SHA1 f83129dd6b83e4c22b9fe09aad9e66ceb8ef9dca
SHA512 3e4546f3e84de6c53fe602afa557070df8dc1ee4a1cbd1d31c3e7b9b994895e6a9569ec494b7cc62e3fcb06422512a241ccc3ec3feb6089af56eda5956cfa4b0
SSDEEP 192:2RGpbRykCZv7ZzPRpf06eKYw964Hsb+WNXgEXvhJ9a69lx0vLnEjWO12XO2sO9Xb:2RGRRyf5NXxbw/0CxI0l2+2sa0E
TLSH
T1CB62B56BA5602E7B9DD6C229F811BB5AE7F5502224D02E94FBFC892C10E7ACC3207517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 953192bbdf400e248b2318fd49c353282d883a1078508692b68a798cc17fe46f
MD5 07edefe8f13e56d92afe2cf942e390e1
SHA1 39c2634920c6c9af3f0be0bbba052675d41dc288
SHA512 65c318799141a72a745c58b0b9b152dfc894745a0cccd80dbf6ca18b5e989dbbae4021c913369bc223ccd361cc8fc20c84a15f8b2c3b5aff293c06c076fbb652
SSDEEP 192:aRGpbRykZZv7szPRpf06yYi964Hsb+WNXgEXv6LHn9lx0vLnEjeJO2sO9Xv8yIsv:aRGRRy25UX+bw/qLxI0ew2sa0E
TLSH
T17A62B66BA9602E7B9DD6C229F811BB56E7F5502224D02E94FBFC992C14E7ACC3203517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 a12d0e67de837ba368bd14094a5901ee1227139375889d659569620f3d2c8d14
MD5 6e4d2eb41fae4f81cc4c9e4a5ae3c684
SHA1 25309b876f117e6fe5924676cb0d4c94f0664903
SHA512 c5224cbbdb5135fe506f0ca87ef62928678557e1ac14052f39849d6741ad987a5f9348e9c10ceb8633d46fa41139dcb9359f94a7886792f766ffab73b2e7464b
SSDEEP 192:2RGpbUykC7v7ZzPRpf06eKYc964Hsb+WNXgEXvhJ9a69lx0vLnEjWuVE3O2sO9Xb:2RGRUyfDNXtbw/0CxI01Ee2sa0E
TLSH
T1BB62B66BA9602E7B9DD6C22DF811BB5AE7F5512215D02E84FBFC892C10E7ACC3207517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 658651b9c0f939eb64d30d97ec070eded625871b98b88ec8c8d93c524a150068
MD5 fdd677552c3347317ea92fcdd1a75cba
SHA1 320e6ffb73523ef865d782e7d5105aef4eab1935
SHA512 01912e9e5ce172982d6826f82f44303e7360351fa484239ce726e644adb5ded3bd6f6715191fd58113db65d77fb031bafdfb552fdff34b9392c1e064374fe389
SSDEEP 192:aRGpbRykjZv7szPRpf06yYi964Hsb+WNXgEXv6LHn9lx0vLnEjeJO2sO9Xv8yIsv:aRGRRyI5UX+bw/qLxI0ew2sa0E
TLSH
T1D462B66BA9602E7B9DD6C229F811BB56E7F5502224D02E94FBFC992C14E7ACC3203517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 390b2d3da343041b4bb8f377de5389830979e5acb4b3a32e271d3fc5ca5a1343
MD5 f1d1ecef56c7515367970c4fb9982059
SHA1 f06f19e7b260ec45dd7c1a7473c6305622fd3c3a
SHA512 a5481cc24a9c749706ccf1c802022ff66c5e4d682f43b0c45ac900e833baffe27ddc9adb95fce5e8f155b66a2304931e49547d326b46f4ed7e1b489b5b41a529
SSDEEP 192:esz4K6mQ7KxkXqK4I40pUZNCgVLHrKHfFKslEZESXzKD/pQ+ErUkKN93jCxBRq2q:lzjxQ7KxkXqKf/pUZNCgVLH2HfgslzS4
TLSH
T13232E827A48E9A3F0FD8D51CD8136F4BADF5425262280D2496FBAD0803E97CA115A5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 192B
SHA256 1ba312b641de34080812c8b19d772d43cfe7e9c8adee5d5c11ad3c52b96564fd
MD5 f15c4d1e99fd01e227fa3e637c4d35d9
SHA1 676485614cdcdf01aecbd012b98e6162478f1ba1
SHA512 a9865c0a8d865c4a88d01a136693d5f16a6f72e7e06fcd3306d5424e9a7f81b17f608a9998e6d6d24ccc1951cfc29f9124ecccc67423502031acdc6446a7d8c1
TLSH
T148C02B0240196140C40942B42614404A1B065F33C12033955BA871A84C660A380B2D42
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 3fcae062042bd5118399b70dd604bb0fe1692ebd02668114f12e156bc2f8d963
MD5 ab6e1620b4e074c7c5c0198bb43990f3
SHA1 eeae839a8997ee93129e737b9551c49b8af4c217
SHA512 7e18330d18f65cf4c5b026b32ee04dfcf611f80ef9ea0bbbbdb4ab23f1db5c089d40de7669b78cf46a4519fc9c3324e17f51fcc7d165a38699ded802184baa88
SSDEEP 96:ibJ0d+cAOIt5aDVmufj79cwSl8h4otop558DMB6/nGov9JLAQDozRNC39ISMVNQH:it0LA/TE57NiU2UA8GELAQDozu8GJx
TLSH
T10DC108B0A46D6DBB4DB6A495F1037D83CDB8916B69263E989EED1F0C00D31DC2383927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 40KB
SHA256 8ddc28bf3be46ad61497dd3e34fcfab71137642b7c273e6ca05cfbf4a9bbcc05
MD5 38d6fb9f76ba11e4f657d4b5d769035d
SHA1 842de9988d833df8eeb9745bab3bcebb65c799a5
SHA512 bc7685fb85eb2564b0e6c80d9421986e258fbb87ca72989a4e99f8f2a22084591869e88653da591e66ef033531bdb4be58fb28684c12089f3326dc111cf76ba3
SSDEEP 768:kGSsNIAzZ3Pd+PBmi8M4BHl/WAvkSvviVWuTsD2vKrJm:ptIJBmK4DWAsCviVXTsKcg
TLSH
T1A413F132E9BF8EDE5CF5232EB053BDC3E954218162F2BD9C6DEDAB2941EA0543354211
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 a579249eb5ff44ad2b73f6fc45ce9a491981b9ce0325b4b6b46ce390dfaa7da8
MD5 669a76bb204e9de45a1a8e31fc40a84d
SHA1 1f65e1a8d03f813b3538b8de078e82ba967218cf
SHA512 aa722fbecc03dc2b6c0b6b7b3c6be8b7ca5a13f8f4a903c3c23a422872fd0b8f63d2dd65ccfbaee69fa3bbec0e71c83e302a82c631298a6860caab306d94216e
SSDEEP 96:ibJ0d+cAOIt5aDVmufj79cwSl8h4otop55SDMB6/nGov9JLAQDozRNC39ISMVNQH:it0LA/TE57NiU2SA8GELAQDozu8GJx
TLSH
T12EC108B0A46D6DBB4DB6A495F0037D83CDA8916B69253E989EED1E0C00D31DC2383927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 411d2ed5f2dd22577da25c75b71d9d35bbbcd7c352ceff98b9e2e875fdb804ec
MD5 96e67e2b99f5ce0285c64136ea3e5136
SHA1 cd3c438a2a7eeca05ce42a96001ab54401eccc1e
SHA512 e7626ec2afb50445a8ce385fb39db58a195e55d682033d15e990063ec136f30c2c0d1598cbce284d739b850f3af56a08e74450c1658f9a1e2dfe8f4605e099f3
SSDEEP 96:ibJ0d+cAOIt5aDVmufj79cwSl8h4otop55rDMB6/nGov9JtFiO0AuSwRSDozr0jC:it0LA/TE57NiU2VA8GEtFGSwRSDozrU8
TLSH
T122C12A70A86D6D775DF69594F543BA43CDF4E16BA9226E948AED4F0C10C31DC2383A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 7b2945bbc934272d80b72dda6ec5748f9f74dbf0295a17b2fdeaf55f3718c28f
MD5 949af0e7ef4f1ed8700711b55bd8909a
SHA1 3a3064b7055420716f9c6c0a3d000fff84d5f148
SHA512 187973438ab67a076b883ed8fd876f43b2c83506dd6fdd90158b7904e3c9661bb8588ce0c2b2ec64ffe563d0e08f6f0798eab2e37fcb3e06c70c2d8a409adfdc
SSDEEP 96:ibJ0d+cAOIt5aDVmufj79cwSl8h4otop55SDMB6/nGov9JtFiO0AuSwRSDozr0jC:it0LA/TE57NiU2SA8GEtFGSwRSDozrU8
TLSH
T146C12A70A86D6D775DF69594F543BA43CDF4E16BA9226E948AED0F0C10C31DC2383A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 c13acfeb19a1e42c2913e0820069347edaa82f773333fefa7c83e4242cab54de
MD5 0c67bea948151b845592e793e47daec9
SHA1 b8c2e6ff0aed05f390c0645aa49388a9b32f77f7
SHA512 7f73a1221e6768023bcdcc1cac7e0e510c5368235c2603aef963ef2041f2ac734c9dd6fb4b92f9ebc9b8eee13c6fbe7f7a3c80a864deb2392b1831b16054c990
SSDEEP 96:iC0d+cAOIt5aDVmufj79cwSl8h4otop55wDMB6/PGGfv9JtFiO0AuSwRSDozr0jC:iC0LA/TE57NiU2oA8PvjtFGSwRSDozrn
TLSH
T16FC12A70A86D6D775DF69594F543BA47CDF4A167A9226E948AED0F0C10C30DC2383A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 ca121ba5f621c1d96b0e59e1ac8cb7c7927b8fa3175a194808ccf11a66796625
MD5 716792b06642a3d289cdbedef4f4ebc2
SHA1 2085276226de1ef2728dd132341dee583f1aa7cd
SHA512 b0a2a3e4045f27dce5bf06d8594c81440c9929e0b096900e5e96f4a5d52398c10adfe5e8e93cbbb690db436a5485a21a948884144f6db6662ef5487d2c09c612
SSDEEP 96:gC0d+cAOIt5aDVmufj7jcbRDotok55CDMB6/dGyv95Sohbb2Jv4a:gC0LA/TE57cDUDmAUweSohbKl
TLSH
T1FDA10771B8A95EB75D768584F4827E83CF68E163A9226E84D9DC1F0C10A70EC1382A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 39b1ab2cb55ead7c94ce8d131f244201fd7aa9cc764a6681ad8d04f6409bbea1
MD5 7d36c519a2a779a91e0f63cb045ada4e
SHA1 d228c707beb639a0a86db80452d77f949c58d165
SHA512 32f8386d47f2f695f74b1a481a65448760758c12a83f98e2ca811b5c62b10af39d5e93e21cb82b28fe3343643e5fbfe7f1ff83a78f86ac3e5562fbfb28c47282
SSDEEP 96:ibJ0d+cAOIt5aDVmufj79cwSl8h4otop553DMB6/nGov9JLAQDozRNC39ISMVNQH:it0LA/TE57NiU29A8GELAQDozu8GJx
TLSH
T1A3C108B0A46D6DBB4DB6A495F1037D83CDB8916B69253E989EED1F0C00D31DC2383927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 7d75fc9eb7e3f0b81405c533120aeb6329d6b8cfec718cbafceb07dddfef1067
MD5 c1a6ac91b3c380ff7af4abf932dda8e1
SHA1 799c08c3600635c8608564c93e812cb9918f7b19
SHA512 7f021a588e6daf2e1e37c71b396e33c9998aca668fbee5b8edcf8a43d76868ed963eea00f645041245be16b32d355591ed38eb56c510e8bcae9322494c1c942a
SSDEEP 96:ibJod+cAOIt5aDVmufj79cwSl8h4otop553DMB6/nGov9JLAQDozRNC39ISMVNQH:itoLA/TE57NiU29A8GELAQDozu8GJx
TLSH
T1ABC1F8B0A46D6DBB4DB6A499F1437D83CDA8916B69253E589DED1F0C00D31DC2383927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 b0ab5f1c288f6e6df7073bde0f2034f05b66536855c0971dbef932c12c6cdb3d
MD5 5c97ec8b3c5fb8063f9d4d2b513dd8f8
SHA1 f7155c893fcf54690abec1f2617f18d2252c7823
SHA512 8650062530edb088334eba6b3131f3004cf19d4d99c7ed0b3233500b5f8e4499964c51a81f5219038a1012d1e799b55204f004a0b85188a07de6915d91773281
SSDEEP 96:ibJ0d+cAOIt5aDVmufj79cwSl8h4otop55/DMB6/nGov9JLAQDozRNC39ISMVNQH:it0LA/TE57NiU2hA8GELAQDozu8GJx
TLSH
T1DFC108B0A46D6DBB4DB6A495F0037D83CDB8916B69263E989EED1F0C00D31DC2383927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 0bb260874761a54dad9787adc06ccc3b8372e9b842169c87da494922a0f167b7
MD5 380eff9e98e408f9e6b2d39ac7c290fa
SHA1 ccc6852db744aa9ef03fd12478fd9e764058dfb4
SHA512 44546a0ec02d9cc3c31819f702614638708242348a75d810d02bc0301d40959c07d4adf2de63e4b632b34fe3bd49352bb7af31686109c89f69bc1bb5f1ad552d
SSDEEP 96:ibJ0d+cAOIt5aDVmufj79cwSl8h4otop555DMB6/nGov9JLAQDozRNC39ISMVNQH:it0LA/TE57NiU23A8GELAQDozu8GJx
TLSH
T1E2C108B0A46D6DBB4DB6A495F1037D83CDB8916B69253E989EED1F0C00D31DC2383927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\_locales\en_GB\messages.json
Size 140KB
SHA256 f43472ee8570df2828b4ddda49f20c049e5a5df0e540d585199cc3eb3ad17e74
MD5 beaa5c270a2c284c9f31123d9562d147
SHA1 8265120a7a4b4b4bd26f1184c848f4e8ae6d2faf
SHA512 19cc3cf1b422e35a4f58b8c05f83bfabdf4ff3f4ca7e5e7967e1ae947a54960e534916c0805b9e3c9768122c0d52ef7e3a82f0dbbc336e54b0da958cd760ad2b
SSDEEP 1536:TLHREOwazWfJtMD5egebt5EG/KuLl01iHFuYreg1FTVHgpu2:TLKOh2MD5Ct5b/KuLxFvrn1dVHc
TLSH
T1A2E37706C9506E7B01F60226BCA97254F76043BF6201A85B7DBC915C4FB6EF3C5A3B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\_locales\en_US\messages.json
Size 140KB
SHA256 a58dbd2ca2e60fad97323a028ea7f2827403f34237003a6648718dda7046ac26
MD5 d6a7cb42e39ff0c060388ba8975ce5d3
SHA1 08915c403d5d9d0929a6ac61d816deb3b86fbd56
SHA512 be537cbd985de8288b67ea0a9228b466019fb419f6aaed7d3a29315990935ef4c9d6dc5d2eb44b95c9dceb9ef4dec9c13540feb617960620e52b94b8eb65225d
SSDEEP 1536:0EkIibqfibQyrBxs4G9LgAmpJuEIacfPiAiBAisFaajv77COz8:0EkIibxHrBaLGvpFIacfPiARaaDfCO4
TLSH
T197E38701CD606E7701CB01767CAA7154A770479B2625BC2A7ACD905C1B8EEFBC5FB38A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adblock-button-popup.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\adblock-button-popup.html
Size 9KB
SHA256 ef420582e7dc43f4e7cb4247d34312489f5207621d0c4897103f77d68346f61f
MD5 d2114eabf5a9906d9f29844e7c1b036c
SHA1 345476658550c65adbc8e347abc139d2bd89bc1a
SHA512 b760ec4fb32f185719fc32de3910e9412069ddb185733eae0fa7b62b850133683fba567822fff84b15be2fa7917f46328f658d2d303f5777d604b988f99b8890
SSDEEP 192:gicLDQQLZtITGcqrXfP1nxLCjhbJmQs5hAUab5:gnXQQ/ITGcqrXlnNCjhbJmQWAUaV
TLSH
T16C12625098F47AE2519B40D279E72A076C90C24BF26A501079BD87E90FDBC96ED1B23E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adblock-functions.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\adblock-functions.js
Size 20KB
SHA256 ab18936c1a6e5876de4bdb5212a154bfa8279878dfb69fe01724505a16a2d81a
MD5 9d29563294726e65f2ce0f097ec86532
SHA1 98c3eff58a3b8479927ee6a59644897ac03bc1af
SHA512 3721f39c060413c86ec2feb69bae5c8ae0f29dd9f20ed42cd5f942b509f7ce8909a590a23d92cab0eccd90bb76c2d2191cf696c7e9b24f1ab9e4f193995cdf74
SSDEEP 384:jP2hXNxtjrj6ithDoI3/SJxwbwVTs9s9UjuhIDzBYDrZ:jP2hXZjrj6shoIALTs9rjuhYzerZ
TLSH
T10BA2A60C34F211660A6720A67A4F7055B6388067329CE9C8B4CE87552F59DB892BB7DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adblock-getadblock.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\adblock-getadblock.js
Size 5KB
SHA256 52111b1fcc407314a49d0dca1f341823fb550f475fdffd5336ea2218d69a5ff9
MD5 8a50b5f653553833f4b9a239358ba8b3
SHA1 ffea52d940c9384891c390369f76faa0842d69b9
SHA512 49ea1ba782f1da55c011e379b549c9807f072b723e75329cddbc293019e6c67de911c2ad634f412186cadc3a6383806a18280b63a6e4704dc0706d46ad524c84
SSDEEP 96:UPBidSRa5evN56K5oEM1OizOE7VOiyQGi2UMvyVI06VtT06O24qynAI:UPkkakF3fiz6iSixMvyEVty24qyh
TLSH
T10FB1934916F710F9892721AE5FCBA2E5B33480DB1188D9057DCD8B888F4C5B989F2FD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adblock-options-themes.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\adblock-options-themes.js
Size 7KB
SHA256 cdf5695ea0e51aeca877b23cb7e630104ff84cd39b0342f5618d22e058e6b613
MD5 7eff6c045b895497ed8d5cbf6376ef03
SHA1 b0482d5c796426e5f5fb711c7c69fd3f638f46a5
SHA512 df7faa2ed751b5d4c946cee59e30d3857f5e27fdc89284cb735a9fcd1746a640526730c78b0af81e22a5a6bde302f22d6c8ce218f75d946e5792219be302eb89
SSDEEP 96:UPB6Aa62y7HyDBPb33z2R8yNzh/Nzni3zIRo3z2R7kn09R6vjCvC2kagElqlozIz:UP0dY7SDBP7ONt/NyxSklpx2HDq0y
TLSH
T1ACE1E024A0B3122184AF51E91F9740D5633FB727B264CFA4FA6C43D90F2D528C6B665E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adblock-picreplacement.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\adblock-picreplacement.js
Size 27KB
SHA256 819183c259b071e07f66e4b815d2b8b7801d15665cb28ba49d3a88073a6d183c
MD5 fb03bb3094b31ca71dcca7367dcc95e9
SHA1 dbf2b4c44995de4e91ad232719713cc667cba1fd
SHA512 29b4c908f5fd2a1a62e9834bb394863b54f56dafb286515ef79c3587b5e4823b40f779cd13274aa3060f0e082a8b624c55b89b0f03208292015b813ca3bf3dbc
SSDEEP 768:UPdp8AacFk5n7IvBVsjmtFBXrgBAyTB/3zAY0FVWGLnJvnBLOX0aIjWpupZLur7n:UFp1acHB2mtFdrgCyTB/30Y0FVWGLnJ0
TLSH
T11FD2A5093EB31272955B61AE2B4F1149BB709057620ADF483D9DC3186FA9C38B1B1BDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adblock-uiscripts-rightclick_hook.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\adblock-uiscripts-rightclick_hook.js
Size 1KB
SHA256 d12eb9430e3da70ab47ed11e8dcb4f1dd607a0c5630ff30ee734b7c5fde4f2b3
MD5 69c203afe05ab9e5921773756312cde9
SHA1 8d1e5f6531b02104c700cd42fe66f2a3c9afe297
SHA512 590c3d2763e2705b51fd17069956b0bfda211fff65c3ae6370e8f4fc338e0d9a91ecd35f4db4dd395a00d28f28f4402898fbed98f61679e4d3551ae8a1e2f395
TLSH
T1F521052E26144A37195042573D8EB3EAF32782E363A9E55080BE43565D4D8BA11F2DC6
MD5 SHA1 SHA512 TLSH

Submit Download

cookie-confirm.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\button\cookie-confirm.html
Size 2KB
SHA256 29187c51b26d755513f5df165ac2dabf55fae31f95e6d16363528180d03e5575
MD5 77b9f5cd7f1f1852207831f72786b4c1
SHA1 f68a006b308ab5a2303f980e9689ae64b9feb7b6
SHA512 b4d85bf705e220beb9d8beb99c1273f86f78d232353c6f78fe91b421f21585420bf7c8e60bb94db7cc527b47864b1c6dda6c96208b388a278983812fa3f73713
TLSH
T1F641B64978F0D97702000EE27D13B04FF4A1EEC7E29D6444389E83B60F59AE24D6786A
MD5 SHA1 SHA512 TLSH

Submit Download

distractions-confirm.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\button\distractions-confirm.html
Size 2KB
SHA256 ca663807f876fd936560ffadba59d1081614d07c6aa0892b47ddfd69cd32552e
MD5 471c7088a89fe812f884b06b616eecf1
SHA1 555771b5ea56d8788715dc1ea16131c6c085473e
SHA512 d353e15dcb8c00ae27384096bf6de93eb79c01242975393d22a7ba902aa8153ee1f68345b6574a175e1f0fbd4706c9fcb8b51deb6218aa13a31ab311b3df9f43
TLSH
T1FA4179497DF0EAB2018109E6BD13B14FE4B1DAC7F25D640438AE83B50F6EAE24D6745A
MD5 SHA1 SHA512 TLSH

Submit Download

filtering-options.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\button\filtering-options.html
Size 2KB
SHA256 d5d4ee4c61b6f88859fb00ead8e14461d69355fa5c1832b5d86a2a43f9098a4a
MD5 0d6533b3beecc51e860b400f8f741f18
SHA1 0121897e4839228f22c5a5a100b5c7bb27b5f00f
SHA512 953104caa0516e2c558aa751cb8fb3bb1e31fecca833f9ddef524355b6eefbeee19fa6acd30126fdb454dd85633cc88bb10d3ee97ee0a05725256af8ff263892
TLSH
T16B51538868F0D5F611450AE6ED66B10BF450EAC7E25C384434AE83E10F45AE088E785E
MD5 SHA1 SHA512 TLSH

Submit Download

undo-allow-confirm.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\button\undo-allow-confirm.html
Size 2KB
SHA256 432f9fad05a49e722fd5cfc8102efca5e4c51f8a3ed0a3cd3b35552f3f5a5d47
MD5 3533dd2360e79b52604858bebcf3b19c
SHA1 44d39b410b75102b919676c37e7e28842339ad7c
SHA512 327eb08a49f4396511a7cf38fe0c2d5a45fa88b83b9bfdf5926530f6a6f7da5a7c3bd2321fb785ba6f72a8f0c9d79343a0f4e60d22e8fe4ac8d90cbc284ca89b
TLSH
T1F841858D78F0D9B311010DE2BD17714FF4B2EAC7E25C6444389E82B60F5DAE58DA786A
MD5 SHA1 SHA512 TLSH

Submit Download

contentscript-loader.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\contentscript-loader.js
Size 746B
SHA256 8616f0c10c5f6851830631aca112e0bedcd54572a16973b56b843ee747ebb2a9
MD5 7a006d98a7fd5ebef1516ae71a23b538
SHA1 331fe03c5049f301f8d2234187d91c6d113b0752
SHA512 0121b1f11eb27de1f60fc5406f79c49d268ab03820cda3176bc7167e1abc7c408d5ffcb399b017db45271763541de65b78325fdfa069271f432c88dc6bfdc80b
TLSH
T15601B1091230D6FBA84403E17A4661DAE20B66F726EE6081404ED36A9D0D4F616B1CD6
MD5 SHA1 SHA512 TLSH

Submit Download

0798B6A2-94A4-4ADF-89ED-BEC112FC4C7F

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\data\rules\dnr\0798B6A2-94A4-4ADF-89ED-BEC112FC4C7F
Size 9.1MB
SHA256 82d9322b05a679b2502e5d71f3767e38d752a07849b958025405e037b184880c
MD5 efdb5f09017c4c40ebd89ef11dbf8cfb
SHA1 8cc4a7f29f8da188eaf1ccc048c67ecca52065d9
SHA512 88536b72adfd05911140f35cf19bc45f0eca24b7c21994eb05cf9e0928f7b236134004a0b14cd8b3c40398c78ed2eec1d7ed1241ec93bbea1d88eeb9dda595e6
SSDEEP 49152:N44IG9+NKyEU62esYAouC00yVpM3BoPUdZ6pM33pM3Ktfs1UWUITpM393lURVpMZ:5
TLSH
T15CA6D8138D1C057B5FB803D8688B3D0854BC162353A8CBF6AEFCDA195B8B7497056AED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8C13E995-8F06-4927-BEA7-6C845FB7EEBF

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\data\rules\dnr\8C13E995-8F06-4927-BEA7-6C845FB7EEBF
Size 6.0MB
SHA256 88865c02e58956166f9cdf7be074000a7ca72c57caad3ed456d793cc1b68ebea
MD5 3f76324ea6d768ce74f458024efbdab2
SHA1 1050a70d2058ac2a3cedb9b944a65c7c4860c60c
SHA512 95b24396bc6fef9e587c889341c79ff3190df5b66cb72cdb4341c7b4de1e598c30cdd9eafc02d1a29505c07dfe739ab114195c8f0ac4b7e49db1d6a057eb5ae3
SSDEEP 12288:lfUe8X2GGcABMWYNlytbxp6277LSLkfblFtrnGlsl4xTtJT9KyTqEycyr1ZBJC+e:lcd9Gc6YNf2TSI9+T9d2Eylr17g+nlvI
TLSH
T1D156B522482C94BF907B269167837C4264302F5587981A6179D5E87CFEFE4E9B20F73B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D4028CDD-3D39-4624-ACC7-8140F4EC3238

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\data\rules\dnr\D4028CDD-3D39-4624-ACC7-8140F4EC3238
Size 262KB
SHA256 4e7aa848a3ca95ec58f6e1042fd4d5e435870cd532a6c8881571b9126fe6e3b3
MD5 64fc3679e1c9cd584bcfaa556c3c8965
SHA1 3accbd90c44f4e5214dff8f8f093961b9c3a4368
SHA512 56f9444886a3475662803372d0a9abfe65d4a170498a075b03f37463819688d29bbd6ba1c6e8b5c95621c00c066d0313616f39a2975c69046fdb7eed4805795f
SSDEEP 1536:ZKilsytsyVK/4wZOt7oSYqJxCpvdKNuIfNDY5yKTXwuZ9pLJJCEgITpJ1RfO9jDl:NITpTo9jDsPAoZbaeB8
TLSH
T1C944AC328C1CD4BB95BB5A40B2837C0254301F4247844AB16DD5D93DAEEF4E9B25FBAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

common.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\ext\common.js
Size 1KB
SHA256 9dfed1249a7e0491c3ac55481427f03d4fb2017d2e5d9ced6e15a5f6c0162e5f
MD5 7f5d97a9e2d55ff32e63de48d555c0de
SHA1 4d7369b20806f535cff45c36922cb12f2c6f0a2b
SHA512 882629554cf2188a771b57ce61eeef6d357305fbd0e3f7fcd732e1f19da829e760aca0467920b877b6551da3c9bdb837ac2800c060a345bc01ae619f76fc8ae8
TLSH
T1A03110492AB056FB81C503DB3E0766C7F20AE1F222DD9061C149D2E9AF0ADB415E2DD1
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\ext\content.js
Size 1KB
SHA256 17b10e992ec5e181497b178357762a5f0e5502c60be9fed824f82528045d07ab
MD5 3f6f0e0850a411ae1e29ef3d7118b171
SHA1 25fb4f5591a85de690b3551f22a51617ca534a2b
SHA512 c66f22f68d2dce1a9dd1c9e3caee3c4b7d8d2454124ff9b2a480a7c75fe098e42a43d09dc781b44ca92d6a3876c1ca7da52590cf0a52594d8d1f7da82141c67d
TLSH
T1223165072D654ABB6D5201E23B1E75CBA30F41EB13EDD050F08E412A6F086F241B2FD6
MD5 SHA1 SHA512 TLSH

Submit Download

lato-ext.woff

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\fonts\lato-ext.woff
Size 22KB
SHA256 1670565574aab8aa0a287a4cd8f49cf0d8b0959ebe344f90ca8af696ede9c23b
MD5 f1a4a058fbba1e35a406188ae7eddaf8
SHA1 e5e25503a9a6976e3ac4b1893a767c8a7a72eba0
SHA512 c0f3138f59034f26f89a7bee8a3a0af749c4dd119997ca121121ff19a35e690098ddd6e4d022d86a81783837fea39aa66d47cac1b19127cda5a0b1355714fa75
SSDEEP 384:w0BQL3MGpIjNLz2yxpph0Z/MNcj2EMAULVrjvaMR7e6ZqbUrnxf7QWfwLLTGC9kb:wNTMjNLzp4Z/jzURfRe6Gonxf7QJLCua
TLSH
T1A5A2E19364600217F3792EF8B0E37B5B0032708DB2FDC3A9E5091EA5D7775E2465AB12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

globals-front.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\globals-front.js
Size 199KB
SHA256 ab4de46837382d48e13ce159af995e6b9c8ad27994b5fb9ed005066868d48866
MD5 874e30e248c30fb8be1f350cd3f64546
SHA1 782ba25c47bc5b3106f73bc5bad292c7179fc7b2
SHA512 29e4b3240425a4af752e63875d21c03f2d731509457d7182bb0962d5a8949e1faf6d9e802ae892c2f83c506e9515a91bff5bcde56900e34eec3d0ab74a78661a
SSDEEP 3072:G5ClIuhMO5ClIuhMpYM0w6oOBqBpTZIyomb5ikENF71BA:G5ClIuh/5ClIuh2Swg8pTZrbnENF71BA
TLSH
T1E714F90529E126738497907999CF52CEF230C16BA525ECB47DCDA3A81F0DABD81F2BC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beta_logo.svg

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\icons\solarized_theme\beta_logo.svg
Size 13KB
SHA256 202004e80e352c614b6f39af7690c5d3845dc1067edc8a41aedf0048bcfd91f2
MD5 2707992d56d64bc350a78982a290390b
SHA1 5e590da3f947733b759c78302ce65e35cdee868e
SHA512 a016450407e359267d18533ac772d1f93073fe84af6c53c216a86afde543a6628a30f20551e0bd79b33d83b80eabca67d89a1976b2d8c107c3067731d14dc0dc
SSDEEP 192:1RsxwlPr+QpZIagLhj8CltLTKJAiUdtOPFAaMIC9VW/yz5BPj1u6GW2/w5twIkCy:1i6qhJ8CltPyMYtykfW5twaLML
TLSH
T1F952E8DC3BB897F8F491F1FEAB2294F83E4254FBA7484D01C7195E18A54241C4E2A8C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beta_logo.svg

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\icons\watermelon_theme\beta_logo.svg
Size 13KB
SHA256 efb53dacc47ac89f52da9750776cbf565ec406b2cd357a96c7202d0cc0997c77
MD5 cd2cea899bab7f9c4876634665027611
SHA1 c186221e2ed2824a78120f5b76966862f9a44cf2
SHA512 0b87b9f0684ea50011a6d1caf5bd027276a32ffcc1d07f07c9f094867800baf36af3c0447a629964ff8a58716a3410d36d550a9827ed0b7f4be0fa9a1d39fcc6
SSDEEP 384:1F2S3x8ClOiNOfTvkdmKQj5bykfW5twaLML:P18qHwgdmKQj5dus+G
TLSH
T10C52F8DC23B993F8F855F5FEAB23A0E47E1324FFB6499905C3596D19A54201C0D2A8CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.svg

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\icons\watermelon_theme\logo.svg
Size 4KB
SHA256 69e6d7d92ec8d2871680141a85b71a50e35c5bfc1ef5e3d56a536cc99ff2f11f
MD5 851640aaa7cf36540d3825bf9000736d
SHA1 8b995258e2314dec96b4548c1c3c1b26b996afee
SHA512 53295c282cf86927a365c4659fe9ce32b60ced7b8dd1a19a27747f33f7216dbd7c30c6ff073d521e37017d48f65c5d8430b3bc49021d5dcf950f2a75c57fd2e0
SSDEEP 96:LgaVwarRFy4Wa1QegZRq1S7PMnoAW/y8lxMhTMumy5kI:LtxA4Xy3osLMoZMIskI
TLSH
T13FA1A6E6A7B4D5EC54E79D9EDF328469270FA4BA3E1681C0852EDB085097DC4EF0BC00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

premium.preload.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\premium.preload.js
Size 4KB
SHA256 29ad0f12ca0b0d933a9a404eb1d8f8fd40a2a7c5d6ac430fa073b9c264730616
MD5 3c639a6cb6b365ff4c07477ea2051513
SHA1 a7b6159354e93e1cef54d0f67ac61b1a0a7d1673
SHA512 168078941fda86b0831a3265254e976b222586c3ebfe068ddb05695283f165f7ecdf61219520ceebe8ef7efa307b342e39f5584ba3e23f8b31abce1220ec93bc
SSDEEP 96:UPBzdukOCUNSEgc1at1Z059EBvjQg52VZE/59:UPxAaEQZ07g0xVZE/b
TLSH
T11D91858583E81332485B217C6B5AD3C37738B0D7366B6462399DCFB94F4E96045B1F92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reverse-trial.preload.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\reverse-trial.preload.js
Size 42KB
SHA256 441580e186256eace381a41792a3d806faf4ee721f7b8095ac2c638a437e182e
MD5 c65e5436274bc71e56f4013f74aae22a
SHA1 af176d095780b9b34d81249dbb99443375278fb7
SHA512 22556fd0d80720621d63e7b0f50e80ca21b177fe974013e00ee8b26113559584b5ff8be6c7ccbb39b7ddc2ff850965897d9af67774b7d20a8ac2030abbcbb6e3
SSDEEP 384:b3DuvuVPnmc4++SmDMNVV7EkhuhNGLi5vAb9nuJ/qR43R2PVLHXnxLBG/PEzdJZ1:qu5CFTkhuhrvAb9JE2PZXKS6SB/bAsD
TLSH
T14513650A35E61B32C596A03EE6CF67CEE261C1772814DE7C39DCB6A84F1AE5C01627C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content-main.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\vendor\@eyeo\webext-ad-filtering-solution\content-main.js
Size 116KB
SHA256 6c75d8fcf268654faaa18dd8dab0a44e7bf900fc988908ee6f4a875c298024f6
MD5 1a656bb16d6e25ed61b32431c462b60d
SHA1 cf72e8f0e41ca22c3ba5e4018cfb5992a9849c9b
SHA512 6e12f9c4feaea20d1291144f91ec62e2481278655090b8b6e95baae4a22fe55910743707215b4d751ac0839a666733f8959f624704dbc2a9316739349f6c25be
SSDEEP 1536:AqVnk94qNHkRyncME7M15mMfoh8XoH8YbHVGVC5F84:AqVQHUynct7MNftUt
TLSH
T101C32A9275E2B0B203E514EA41772101F3380196702DD490F2ED96AE7F6E91A86FBFDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1901212802\CRX_INSTALL\vendor\@eyeo\webext-ad-filtering-solution\content.js
Size 114KB
SHA256 561b2c3319a4d2cc7baa8459ad8429515acd925d2d1f2471897f57e32357a81e
MD5 f211d8eeb34b1ab9a91743b11f541706
SHA1 19b37097cbbfcfbe3c2e72f55aeed23e13782a4e
SHA512 786633f49a20d0201129b8c4f06aec0635fcd1c98199587944d92dea8e3d029fc6d13d239cb8b0a7379a581752824ac466d5a15063ff251f01a7d9572bd13385
SSDEEP 1536:74xUexkrxxRcJKPio9IPE4vKv4ILYrUSv/zVK54wgeZxGIcP5vWq3aCWA0v00cBz:/DgUST9AG75EC7rBl
TLSH
T1EDB34B063944F2728BCF015F6AA5920FD77083B5B5228160F6FC85AD2466FC291F3FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download