3d63ff558016cc9eea1c654a3d01f1824371a5c2d808f0360dd3d40a085a51d8

Analysis

user interaction
yes
max time kernel
900s
max time network
900s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 16:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Screenshot 2025-11-20 215729.png
Size 361KB
Sample260817-txfkcsvxex
SHA256 3d63ff558016cc9eea1c654a3d01f1824371a5c2d808f0360dd3d40a085a51d8
MD5 05a97bf563f2268371e60ee58becec0a
SHA1 930f39fe1888f7fa37725330b7943741052456c6
SHA512 2d336bb0fd25dee7d0cb0bb231fff4e0df9949b2a2a2c997c66c982f498e9f2e1818f8de5538b3dbe075d574fcd98b10ce9f9c2ff554c4e7fae7caf7ff3c3acc
SSDEEP 6144:7gm42AA2yzjXKc0MOhQNx9JRZpwWpFYxfbwjNeE+e+qoUY5DKJX2TA:km42A82MOhUDJDzxvFR2TA
TLSH
T1187423BE5D012B57C124385528352F38EF7EC8F6FA1F00782316C7676BD65A5AE8AC41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery motw phishing

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
62	discord.com
71	discord.com
56	discord.com

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
398	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	1064	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1064	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314576058850377"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{59CD6FC0-6A4D-48F8-A7F9-FF6A0AEC84D8}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4676	mspaint.exe
4676	mspaint.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
7832	chrome.exe
7832	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe
Token: SeShutdownPrivilege	3784	chrome.exe
Token: SeCreatePagefilePrivilege	3784	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe
3784	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4676	mspaint.exe
4676	mspaint.exe
4676	mspaint.exe
4676	mspaint.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3784 wrote to memory of 1592	3784	chrome.exe	93
PID 3784 wrote to memory of 1064	3784	chrome.exe	94
PID 3784 wrote to memory of 2528	3784	chrome.exe	95
PID 3784 wrote to memory of 2528	3784	chrome.exe	95
PID 3784 wrote to memory of 936	3784	chrome.exe	96
PID 3784 wrote to memory of 936	3784	chrome.exe	96
PID 3784 wrote to memory of 1784	3784	chrome.exe	98
PID 3784 wrote to memory of 3808	3784	chrome.exe	99
PID 3784 wrote to memory of 1784	3784	chrome.exe	98
PID 3784 wrote to memory of 3808	3784	chrome.exe	99
PID 3784 wrote to memory of 4256	3784	chrome.exe	100
PID 3784 wrote to memory of 4256	3784	chrome.exe	100
PID 3784 wrote to memory of 1476	3784	chrome.exe	101
PID 3784 wrote to memory of 1476	3784	chrome.exe	101
PID 3784 wrote to memory of 816	3784	chrome.exe	102
PID 3784 wrote to memory of 816	3784	chrome.exe	102
PID 3784 wrote to memory of 4112	3784	chrome.exe	103
PID 3784 wrote to memory of 4112	3784	chrome.exe	103
PID 3784 wrote to memory of 1640	3784	chrome.exe	104
PID 3784 wrote to memory of 1640	3784	chrome.exe	104
PID 3784 wrote to memory of 5064	3784	chrome.exe	105
PID 3784 wrote to memory of 4972	3784	chrome.exe	106
PID 3784 wrote to memory of 5664	3784	chrome.exe	110
PID 3784 wrote to memory of 5672	3784	chrome.exe	111
PID 3784 wrote to memory of 5680	3784	chrome.exe	112
PID 3784 wrote to memory of 6104	3784	chrome.exe	116
PID 3784 wrote to memory of 6104	3784	chrome.exe	116
PID 3784 wrote to memory of 6136	3784	chrome.exe	117
PID 3784 wrote to memory of 6136	3784	chrome.exe	117
PID 3784 wrote to memory of 2544	3784	chrome.exe	119
PID 3784 wrote to memory of 2544	3784	chrome.exe	119
PID 3784 wrote to memory of 5256	3784	chrome.exe	122
PID 3784 wrote to memory of 5256	3784	chrome.exe	122
PID 3784 wrote to memory of 5332	3784	chrome.exe	123
PID 3784 wrote to memory of 5332	3784	chrome.exe	123
PID 3784 wrote to memory of 4472	3784	chrome.exe	124
PID 3784 wrote to memory of 4472	3784	chrome.exe	124
PID 3784 wrote to memory of 5720	3784	chrome.exe	125
PID 3784 wrote to memory of 5720	3784	chrome.exe	125
PID 3784 wrote to memory of 5828	3784	chrome.exe	126
PID 3784 wrote to memory of 5828	3784	chrome.exe	126
PID 3784 wrote to memory of 6032	3784	chrome.exe	127
PID 3784 wrote to memory of 6032	3784	chrome.exe	127
PID 3784 wrote to memory of 4440	3784	chrome.exe	128
PID 3784 wrote to memory of 4440	3784	chrome.exe	128
PID 3784 wrote to memory of 3776	3784	chrome.exe	129
PID 3784 wrote to memory of 3776	3784	chrome.exe	129
PID 3784 wrote to memory of 2188	3784	chrome.exe	130
PID 3784 wrote to memory of 2188	3784	chrome.exe	130
PID 3784 wrote to memory of 1816	3784	chrome.exe	131
PID 3784 wrote to memory of 1816	3784	chrome.exe	131
PID 3784 wrote to memory of 3208	3784	chrome.exe	132
PID 3784 wrote to memory of 3208	3784	chrome.exe	132
PID 3784 wrote to memory of 2536	3784	chrome.exe	133
PID 3784 wrote to memory of 2536	3784	chrome.exe	133
PID 3784 wrote to memory of 1696	3784	chrome.exe	134
PID 3784 wrote to memory of 724	3784	chrome.exe	135
PID 3784 wrote to memory of 1696	3784	chrome.exe	134
PID 3784 wrote to memory of 724	3784	chrome.exe	135
PID 3784 wrote to memory of 1784	3784	chrome.exe	136
PID 3784 wrote to memory of 1784	3784	chrome.exe	136
PID 3784 wrote to memory of 5004	3784	chrome.exe	138
PID 3784 wrote to memory of 2220	3784	chrome.exe	137
PID 3784 wrote to memory of 876	3784	chrome.exe	139

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Screenshot 2025-11-20 215729.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4676

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:3012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffefbf8c728,0x7ffefbf8c734,0x7ffefbf8c740
  2⤵
  PID:1592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,11550712334514936519,8623404425691678316,524288 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2052 /prefetch:3
  2⤵
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  - System Time Discovery
  PID:1064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=580,i,13027108911641829930,10898280171099461072,262144 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1936 /prefetch:2
  2⤵
  PID:2528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,15539255642316448576,14630229560333573576,524288 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2112 /prefetch:8
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3148,i,2863184066917535435,14083541662061557284,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,5964966214621490936,11529646536313452409,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4228,i,10465328821536352968,9922266172099091905,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,14551290322004313868,2943870863767081435,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4964,i,364364319245375401,1892365000897405724,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3388,i,16243343117346884004,12231383618694914894,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5316,i,3227217304328221507,1892571066369561998,524288 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,4618163701324048818,11847983831482499102,524288 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6508,i,6397215311014475729,3726150660318440583,524288 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6516 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6548,i,10420065914296853834,14279517743566032608,524288 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6672 /prefetch:8
  2⤵
  PID:5664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6668,i,10239287318819137342,17521505901567460610,524288 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6660 /prefetch:8
  2⤵
  PID:5672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6552,i,13844864780818250281,12471390586391055747,524288 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6712 /prefetch:8
  2⤵
  PID:5680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4380,i,2052057795777997870,17736562631607807562,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4376 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6592,i,9272741095813478200,2868838807327050745,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4892 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5296,i,742277225626657904,17277454228003547462,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4228,i,8276713813459524984,14239404541152755621,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6552 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4476,i,7023700621731131893,9385194130955503574,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6660 /prefetch:1
  2⤵
  PID:5332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6596,i,3504215736962842480,3454317456221023211,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6812,i,15255849141917513038,3537923057195073664,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:5720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6952,i,15137419631703545374,15401910444611789848,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7000 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5308,i,17812544062376667985,16277900782442498467,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7132 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6988,i,11076532066645505835,17160767710257493820,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7008 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7088,i,5903264812605043217,5871601908810654988,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6740,i,8002571867066799345,5976200827522570627,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7200,i,2609161803742303532,14333965045382184431,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7208 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7332,i,15471882842181231231,9365372318220419009,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7344 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7484,i,7892147401672425852,2056407316944570511,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7488 /prefetch:1
  2⤵
  PID:2536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7620,i,14905013673337542428,323596609836366766,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7608 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7632,i,2092140718444624180,12027730084454374761,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7648 /prefetch:1
  2⤵
  PID:724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7724,i,11837031773511758186,3332086197976289625,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7668 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7920,i,13195177481957120616,9884752127949849683,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7868 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7948,i,16372259472481581079,429274308368539052,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8196 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7968,i,4487613410749164610,9898685009671783191,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8244 /prefetch:1
  2⤵
  PID:876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7984,i,13678885619802336282,16193863600051382186,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8260 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=7484,i,2783561008434711405,1655748048748893930,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8704 /prefetch:1
  2⤵
  PID:5724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8912,i,9491458901202006651,14909982914864247490,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8940 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9076,i,18056955209826564392,11418983711514177571,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9060 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9308,i,16384952217274018251,8570260080605074975,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9292 /prefetch:1
  2⤵
  PID:5372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9416,i,17901448267090092815,3107914986844434522,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9424 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9568,i,8367478349329148682,17030802659769856698,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9572 /prefetch:1
  2⤵
  PID:5384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9708,i,18195481289298029663,6080603637571346895,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9720 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9856,i,13981494969512286125,2079662561822308178,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9868 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=10004,i,1634797787921382508,17128510316244646465,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10016 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=10136,i,11836491403218482886,4008466633731318439,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10172 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=10304,i,13955206091046397715,13281136965854533500,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10316 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=10352,i,1493278216052668408,15348091924364222394,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10376 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=10908,i,4655397694451338070,15256151972303757044,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10732 /prefetch:1
  2⤵
  PID:6420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10816,i,10337703015750727253,12572728405074172799,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10828 /prefetch:1
  2⤵
  PID:6428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10956,i,16731660852806326718,15439714023263831423,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10968 /prefetch:1
  2⤵
  PID:6436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=11076,i,2123916647559612836,575858035627531461,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11092 /prefetch:1
  2⤵
  PID:6444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=11240,i,12418655714005499871,10653706604737989039,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11232 /prefetch:1
  2⤵
  PID:6640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=11364,i,7633609527542302409,3417894126330986972,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11380 /prefetch:1
  2⤵
  PID:6648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=11400,i,15240526460638376935,2861829564423265418,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11532 /prefetch:1
  2⤵
  PID:6656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11656,i,16602027237507236376,7177093356753163906,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11664 /prefetch:1
  2⤵
  PID:6664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=11076,i,289167169459443355,12454306511477191455,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11816 /prefetch:1
  2⤵
  PID:6848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11504,i,3076433810595428689,11568578151457009521,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11812 /prefetch:1
  2⤵
  PID:6888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11076,i,11647718184374345529,11248290509937291020,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10804 /prefetch:1
  2⤵
  PID:6956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=12076,i,786085059334320191,4889191682119008027,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12072 /prefetch:1
  2⤵
  PID:6980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12344,i,6810485354501030422,14778786182305604755,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12348 /prefetch:1
  2⤵
  PID:6988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=12480,i,1298858881161413178,3160256819999761013,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12492 /prefetch:1
  2⤵
  PID:6996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=12792,i,17577429081282345947,16478800203382499879,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4504 /prefetch:1
  2⤵
  PID:6392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=12900,i,14734440809805108138,10506933264336128005,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10992,i,14757816571702902124,8109912405669010246,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11336 /prefetch:1
  2⤵
  PID:6640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=12536,i,13132474847112928456,13777624703565365046,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12368 /prefetch:1
  2⤵
  PID:7336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=12624,i,375228293054562732,11505514122599059544,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11244 /prefetch:1
  2⤵
  PID:7344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=12640,i,8009929720163464099,11791963597743751270,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12112 /prefetch:1
  2⤵
  PID:7396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=12348,i,6238551861399560243,2440422081159549587,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12224 /prefetch:1
  2⤵
  PID:7448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=10224,i,6260201592265567818,9887597476263292860,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12664 /prefetch:1
  2⤵
  PID:7456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=7480,i,15957275480893920812,7764850162667356255,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11096 /prefetch:1
  2⤵
  PID:7536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=7476,i,5720202187683200640,16975570514192018669,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7328 /prefetch:1
  2⤵
  PID:7636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=12080,i,6869254631003415948,852410764818970569,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11792 /prefetch:1
  2⤵
  PID:7688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10888,i,7965304237132107784,14925290418688982865,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10856 /prefetch:1
  2⤵
  PID:7740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=13084,i,10082176767103284544,4331716112256047514,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9996 /prefetch:1
  2⤵
  PID:7748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=13212,i,16894252243940842177,9176058694951549250,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13100 /prefetch:1
  2⤵
  PID:7768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=13228,i,14899079246231202716,2228321834558171715,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10768 /prefetch:1
  2⤵
  PID:7776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=9536,i,10804755992631346789,2766392807467089333,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13248 /prefetch:1
  2⤵
  PID:7784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=10848,i,16481137633111648620,17857883634560098858,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10940 /prefetch:1
  2⤵
  PID:7792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=12680,i,17728318127131595281,10643754827579624966,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13408 /prefetch:1
  2⤵
  PID:7976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=13520,i,10220125144273754535,13387098121724694450,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9896 /prefetch:1
  2⤵
  PID:8028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=13636,i,88245277691292994,17917102223379294685,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13668 /prefetch:1
  2⤵
  PID:8080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=13352,i,2890091109269446488,287530132708490709,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13224 /prefetch:1
  2⤵
  PID:8132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=13916,i,12584025358320847052,15891137494371996159,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13912 /prefetch:1
  2⤵
  PID:8184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=14028,i,15324348681814786804,897229942453557772,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14032 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=14216,i,2325873449818898544,5658755827236335796,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14232 /prefetch:1
  2⤵
  PID:6220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=14348,i,11676810333013613865,3005582664107150521,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14368 /prefetch:1
  2⤵
  PID:6516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=14164,i,9636991596602448106,15682482171777348563,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14496 /prefetch:1
  2⤵
  PID:6216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=14656,i,15302560095488091111,1766461724459708084,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14628 /prefetch:1
  2⤵
  PID:6940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=12756,i,4611769367017071645,15054740566317602755,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13052 /prefetch:1
  2⤵
  PID:7956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=12044,i,87327204369196528,10545511922223512036,262144 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11884 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:7832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=12492,i,13978826045098079136,17950595477365394104,524288 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11956 /prefetch:8
  2⤵
  PID:7256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=5056,i,12709424960310242900,5135772369402204564,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3952 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=5036,i,3755909032861496808,12235445378653962425,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:7476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=3328,i,13930361044324853606,10881696860542602068,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11232 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=4820,i,5444590387702519318,16187310089814945498,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=10184,i,7786581578264110492,11509033191088235827,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13052 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=13504,i,3908933302375440444,2065892363882570056,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11224 /prefetch:1
  2⤵
  PID:7040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=11332,i,10112324007414671415,11182822824345499037,2097152 --field-trial-handle=1940,i,11001303989539837691,11110587338124620986,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7532 /prefetch:1
  2⤵
  PID:2824

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1744

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bf7734a434e9013caf33f4523f202b34e49a6aa747b528c3cf766a019bc06748
MD5 129cc07234d553dae04cd0d3b1418cac
SHA1 a26f920d27f51f60c26240b40a26b258f3567d8a
SHA512 ba90caecd0f9f7c5d1fcc71d1037e89fd3eef181d9385d80842e980cdc686897e7040ab780a1f228c37b66725c7158cc14ecc23ebbda4e70ea926251e6723b23
TLSH
T190E02BA9C821AC2709FD2B2864504A46E74503173F90C98F3F3DC20C8FB5A3B45AAC2C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 71KB
SHA256 3e3feae8ee4c6b2a9e3d614847664f7ba9fd1517b446fedce19caee08f409f3f
MD5 482bd2f4782f1ce7c01780a76cf53e23
SHA1 e8416e4acc981bc1ccd4905ea9401686f83608c6
SHA512 538997f10e965bd3a76f663120b5480f2f9a7b5314ff035b53d58845442a9f832137ee49067bcf05a0e43a8c454c0ac303b863055f850f72d6f0a16a4b4bc9d3
SSDEEP 1536:/VuOR3aNs67H5NUCJY/wHZn8m6+yfyMl7Zl6iFF3cld6EQjFShwG2rN:/F5abNUK1oKI7Zl6ibs6EQRShCrN
TLSH
T1A563125FA7AFC5CF5E983CB1597CF92B20C5014BF2B0B33CC04A70584A69797A8C6256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 86KB
SHA256 75ebd0ba936007f8355463df2b47bcbacedcc0818fb7ebec5df08d3be383de9e
MD5 6d8cf9d0c1335132793c16840011687c
SHA1 db51f052cfc80f1204cdb761dbbdf94467597777
SHA512 3a5dc86c128a393bd83762409454b798acb6c6986d0ea92afa4898075497b63380db4f86c5fb2725e81ddee46c9a704fe6461d80dc64fb251ef852db34f0adc0
SSDEEP 1536:vAZjaMkLxmshBbzebVFBs1YUIba+etCnSGPXF:q6HbzebeKUga+etqSkXF
TLSH
T1658312E322B8A816815FC04E2D1550A507752FCFF9FB8C50F71AE6AE12C5672EC0B16B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 514KB
SHA256 a0e9b76f14b5e34fa2ab32254bdfcea9bd553d362dbe696b91a40c681873e6c6
MD5 20374557b1bc33bc77545992bfa45343
SHA1 8ddc1ff98d9f0b435d80475f46ddb71a695c9790
SHA512 c818ad0ae13606d9691d8c42fbf4d66fc0bb4c7deca59bde9639a4cf932508481b0973d21f26749edafea0d7b5181ccb7c6f57a95e8603583ff93b02162e6d93
SSDEEP 12288:MqQyMkVvqHLsSrUHCgv3KIoltLNwGIgpF2DAXeDv:MqtTvqrfsCgKxpr2IeDv
TLSH
T18DB423603BA7157873FBA688F490596EF812797DB06CBA0CE98518087CC75A4E4CBBD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005e
Size 21KB
SHA256 151dd6171d7986fb905a5f0487ff272ac7993d19811d817ff1fc7471bbfee6ad
MD5 3ecae7ff78465c4bdb52977f083f1510
SHA1 c7a371cf5eb0e9d757254b0f78e429f61ef562a7
SHA512 a7570ca40c09786e5b85d55fb1130cff307762a97d25196b66d2aa082831c662973c60886bd3db96753de2a33ce28b57c9b29cce1520a9b5539b26f7e40ddff3
SSDEEP 384:QrugOBuYJcpM5E0zbmm8zetsxpvlBBGNIH/1b8UdUVWWH2Fhl:EuZsfoEJmeeq17Euf1b8UdUVWWHMT
TLSH
T1FAA2D09BFA830D40C8AB7B6AA62F0D8B1950E553F176BF46C49871AD58BC491B302D3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000078
Size 97KB
SHA256 6e9619cbffb6bed8cd7172c3bfb896f170dd8aac932a3f1ff11bc035b9d53e6e
MD5 7d4f7c31059a29d5ca4bcc8c3090edce
SHA1 1ad0961998e6fd8a57ef2ef6ce4bdee9fbd555f5
SHA512 c283558d93643e09adf26081eee657f56f1699ae7f25a26c25ac19bd6372744b983751ef58cb88f632c1b67394643fa2ef8e6f8d61bfa39887ccbd8ae2f951a2
SSDEEP 1536:c1Ah0NShqi8NjZ+0sw9S54zgbiEvgZXRkSr/TSg:cvN19v+ZwY5liEyS6TSg
TLSH
T1C7A312EE8B71C246E90D57294D20724EBE7A834417C8AD26FBE1F713C6C4091CABD746
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000089
Size 100KB
SHA256 1612ba9b45896783e67ff0421120e16215cb84d6874c5a23d27ee0de058d057d
MD5 da02aa867f81f529a03fa6b85c99e40c
SHA1 ab54f2f268af090293cc65aaa10df8bc52301f1f
SHA512 eff2d27f780006d1b6072027887d97b0dc991100cf2bc485421cad9bd6a3d1b4127867782ad2210b7ccaeae09bdf92500774d8b5391a20db2306a0851e88bff3
SSDEEP 1536:RAoV3Pez7FqC6fVPqF32w4tYNVpBDRchoiNlSGcqpvBHcdLoW:2oVfezV69P22F+n/e2iltptW
TLSH
T1F5A3F07A3385FB87D2482B78C302441B6C737E19543ED984EDD694B284763A8BD71CE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000091
Size 67KB
SHA256 7c0693df55e88f1c9bf9ed0c98b375c1bd5bd07bcf2e755152a198b9e14974de
MD5 9d5b11b008cc7951b85993ea6e1d0247
SHA1 9c74c2565f09d8e604978f8515888bd395917d55
SHA512 44cff67113cbaf9a6eb542885a42381f508d8502d917a70f04bfb1a4c2e5ccacda43f5321ca56e1e3a30fbfc89a110fe1b81c8c422738b8bbbad58a9d5c8d966
SSDEEP 1536:So01PiBKUNgjRZyFYZ+6XqIgmF0SoGC9euck8KNKoaIwa:So0ALeye+6aIg2oSJ/oqa
TLSH
T16C6302CF883C10596193F0F7FD7C972751F36014A8AD5913EE03C6A7A60A90C59EE5AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 e4c390b9d3fe3d031be8060d5ee4daf2a19f8d1bfe130c01b8ed9e86c2bbb254
MD5 86484e263ecee039936d145012503a5d
SHA1 a6f950f985c2d5d300fdc37ac236b4b95a8f1115
SHA512 ba1e24363783561b88f4448fceaafbbe7d82979e2e62e0ac538890269b4b9e2c1d2cd5e9104913e994e25d254317645ec3c56d2813910a31ac05dcfada0ac6f1
SSDEEP 192:OVKrZQtZDMdilOlU7Y081qT7XDfijS0WQHQndp6EUMRJhTssPb1etYzWiA+MO/Yq:OV2QtZDMdwyU7Y08cT7OjScwndpBLRJJ
TLSH
T100E151E573A08685CBC71EB510EEB99DB430497BA6470F3607D58CF59A93FAE3E02008
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 42f40f6885c86f8ca57c1d815aee264d73f9c46063c9d72d29492b7c1e6a583a
MD5 5ad8a546795dc246831a996707c45f6c
SHA1 8cea9a6ab96f47be3e8f1add9ee2c8c81f1d1c99
SHA512 c44bc87e4a8329ae85900c6762224c7794c1686715fb4e474c365a6f9b9842beabce879df627b7475c48c4f11219ea4dc16510deb58c40145745f45763130caf
SSDEEP 192:0VKrZQtZDMdilOlU7Y081qT7XDfifS0WQHQndp6EUMRJhTssPb1etYzWMA+MO/Yp:0V2QtZDMdwyU7Y08cT7OfScwndpBLRJs
TLSH
T16EE171A533A48684CBD71EB410FEB99DB431497BA6470F3607D58CF59A93FAE3E02008
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 8590dea59aec75054142c4baaab8f83a1b35dd86ab0a8a1ade5c61208dcd54f9
MD5 710fe86cbbb1c25bab3ad36f7c477b18
SHA1 d2f455431c014ac85ce74fcc1954fd142e470172
SHA512 a84867fafea270df1014a61fb7823ec4b3e28e04e03522691346c47bc7fa0b2c871e26b101f3f5af53050be9ce91d7cc7df182aa433241016de2ee4376a7784d
SSDEEP 192:CsJJSZQtZ8MdilOlU7n98xzqT7tDfifSkClHQn35enAUMRJhTctPbA9tNzWjA+Cu:CsJcQtZ8MdwyU7n98xGT7cfS1wn351Le
TLSH
T10212D7A073958A90CB9B1DB095EDF85DB432493B56070F264B92CCF19AA7FEE3E0500C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2b1d22963ebaa388521ff9010fb66fef2691e49fd051064ca725c997561edb14
MD5 b03709ceb1290600a11fdb4ef30a46f0
SHA1 8050e69265f1bc4ef5c6640944f42bb440aac5a5
SHA512 bab4d73c642993a3a7cef646c24548d2af6dcaa1c1dff55a5a27e0b64b68a6c92ab9c8df89fb0d760a3eb6c767055f08fc53d8f59df0b3ce46feccc8e59c1a66
TLSH
T1604148F3C7D8897D890156F8AB192F2FCE790E14536C3C5A89E5AE0B53E1871E24058F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 60KB
SHA256 4f1f71e18d47bc6c9c68d78420cef9b2d1dc0d2b0d1bf6cf75bb46ba0ce8390c
MD5 670f438ebcd8e6629a113c675d1ac8bc
SHA1 d8f78f24fb59abc8214b7eec34f24ae75933f2b8
SHA512 11ba66a4329f7fcbc60c22c0120c914a27906e8ae891b831e8077961a511bb759ef336bd3ad5a7e8b88d403337cdd712515c3063dbf12e438a842f9cf9e9d504
SSDEEP 768:bA6O3mLnVxLmRX3W0iHttNzlswl2O4BQswfN2ZzYX:fzOo9W7BXwt
TLSH
T138539DF793F0897DC91266F09A145E1BCF6D0469031C7C7A8AE47E5793E6832E29270E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 42KB
SHA256 6bcccf602fd844abe054282f17ed331f7110a4404c7851805c413becabfb46a2
MD5 8de315e6c0cb1b7d11210801bc69fb6d
SHA1 a6b3c78f61ffffabc9fcd8b26b16dabd09ca4b49
SHA512 d7d578523c540e6de4cbaaa6083b2ae2bcd1f05b4429987e2183df2f6dd389b478a6ab27c09dedbb95f9ad5900f36ab73275e41708fb8c6d7db71815ae6c9fcc
SSDEEP 384:DtvAhBAbPtJBUJZJLlepl8e+DJ6TqiJfHYYy1EQn4wsBePAzXaIl9XIr7ryQrRrQ:qP5yFqLBVOS9tLmRXvq0RU+xPddie
TLSH
T12713BDF793E4897DC91266F09A242E1BCF6E4459031C3C7B8AE4BE5747E6832D39160E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 68KB
SHA256 f2c5791a8f004bdd358858fad903d8112907df9ec7cf1d710949aa7ccff551e0
MD5 cd958eb818c6e94e10ab9b3bb68675fe
SHA1 68d95b4cc18ff70c9ca282c2b14f9d690ee5dc89
SHA512 7fa663785d9852d2bb387a8fabc0de75b057b0ec309e77a159a8041154d4af197a52613b7002ef3a883d8b773b699aec91832dd872ab067037b922c438552c93
SSDEEP 768:NP5yF9LnVxLmRXvq0oK+x2Zr6E+YYP+kELcZwZHYS:4zu8YeX+PLn
TLSH
T17F63E3F783E4897DC91266F49A146E1BCF5D0569032C3C3BCAE4BE5793E6832D29160E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 64KB
SHA256 f953a66442486bd6f3dd86aacbe5ee33e45e3510d8e7ab2591cb56a9ab574e55
MD5 66577f815be4b5753616d47875483ace
SHA1 b1128847979c0375dc95cb3fd8df23e666517cc1
SHA512 3b24829aad5f6f983dc78784f5eb96a22ae2562976fe8802483037a401f1ec6a98e4351e92c2ec0efed56ec31d710217c200da3317a8d82f672d99e0f10fa0c5
SSDEEP 768:bA653ILnVxLmRX3W0iHttNzlsnl2OP+kEuA+bZh6g:6zOo9Wj+PuR
TLSH
T17F53AEF793F0897DC91266F49A145E1BCF5D0469032C3C7B8AE4BE5793E6832E29160E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 12KB
SHA256 a002eeb36a346bfaa178d1a5f2497f9b4235b0aa38419996ea876c1e0580ce82
MD5 bc04a8126300ace4b7aaa78efb7c49b5
SHA1 d0189425319a9e6683da880cf2bbbc28bb9343db
SHA512 62679475b575ee58e3dc8aaddc6874c0c302036549cd91be626517970f0d764e412e312f85bb9ef7011ac9f9f2351cb0042fd8c57e08293b2edb6a8725c15f5b
SSDEEP 384:B7KODzYAVE5ZqogAazHEYDSvVgSj/NtSOf6UFsheFHIak1VtoCINIfNLE8EwKfKz:4R0Zf
TLSH
T1AB4279A7C27EB8AB20394DAB0E45BC0A69BEF83D125168F4DF96C16DF0854F34707466
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f67802f42a86c2c3711339afc6c78a093124b28cadc13c5fb6fb2903f448b69a
MD5 42ffd1eba974ac572f58471be785588c
SHA1 df5518df5ff970c1c8144e9c2c6977be2db69fcc
SHA512 8581238790b03fc5fab8646314fe2ac0d6063fd70a784125f79b18ea7f7643a3eb932c8f9f7d12e6ea64087d2a4f8ce399000540da7fd0b85ff087e9b59cffdc
SSDEEP 192:ORUcBzj19AYWJlV4v7cpAPRp2qFBTg9BHsb+WNOWxW4wx2RekOK2YeATfVyIsnAC:ORUmzjXAjVkwUXlArwSl2R3OK2mT5e
TLSH
T1CB52E82EED2069BB5DDBD21AF9257B17E3F5102226942DC0FAFC892C15EB6CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f1ecd74ec91f69e2f0c3608ba605c6efa8d9ed9d35627f5bd5ee94b223565124
MD5 a6f7531d5737c9cec4552d60eb109f76
SHA1 f9fe32f96315e58bdd85d3d0af9ca97358fa5883
SHA512 490e13bcf5e10c2017349bd836683d0d3605898549c57a06e4329f3948f45e8cdc416d7d2fa211f84fd4cc7b4630f18956d2303ca3e8afcd11e1fd9c167ebc2e
SSDEEP 192:7RUcBzj19AYWJEhv7JpQPRplqFP0qcoz9BHsb+WNiujnffjz2p9Y3ekOK2YeAufN:7RUmzjXAKxdMXIBrwDnaY33OK2muke
TLSH
T10762D86AB92029BB5DEBD21AF9617B17E3F5102226942DC0FAFC8D2C14E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a2ca44b3fbe1b1d10e84d0ca8e2cf5f98b32d34a0a1b7d945f1dcb196bdc98ff
MD5 a5036f74aa7db99fc1d2d71695b64274
SHA1 6fdc7eff850e133eeb3f8afa6fc1bb0ca2d60172
SHA512 283c6f4bfcb09cc8844372260074be444f85bf48cc0102debe1ebd0ca9640dd3f3c98e8e83e8c02de3840a89294babf6d77436dd92b2c9b1e4b37db6d1a50f93
SSDEEP 192:7RUcBzj19AYWJEMv7JpQPRplqFP0qcoz9BHsb+WNiujnffjz2p9Y3ekOK2YeAufN:7RUmzjXAKYdMXIBrwDnaY33OK2muke
TLSH
T1D662D86AB92029BB5DEBD21AF9617B17E3F5102226942DC0FAFC8D2C14E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6923743ec65121ade0636e07221535e48e55009e28e697c4e4fe86b7895021d0
MD5 8042b5f6d522c1d04cecd8684461c98e
SHA1 3f31f56dba163e34288e7ad91fbd9c1a2964931f
SHA512 1dd39458f48c4a84750575ecd2d3495e040c2338c096cf62d36046ac2eee13fca30d3d3244904b0a61fe68a69a61745c395891a6f76041b66d95404c0b257847
SSDEEP 192:7RUcBzj19AYWJEnv7JpQPRplqFP0qcoz9BHsb+WNiujnffjzpeF+p9YiekOK2YeB:7RUmzjXAKvdMXIBrwDnqSYi3OK2muke
TLSH
T11562D86AB92029BB5DEBD21AF9617B17E3F5102226942DC0FAFC8D2C14E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c8186fb7f0753e23c366c5183fb371f1b506f80ba5ca84ac88c94df0899f98d4
MD5 f256988f1d0be4dcc1cc4fce8a2f3ef3
SHA1 960fd09559a64720ff2ff3a674d729d0c08fc396
SHA512 082979ea00f1c285a5acc5c3759ef9013e7e210829e459e243137b2df97ebe81005c1f1977fd4b4abb392484b0110e01857b4ed050b391d2e619179e8c5658ef
SSDEEP 192:bRUcBzj19AYWJuGv7JpQPRplqF6T4z9BHsb+WNZ+bMdvv4IxW9ekOK2YeAuf8yI6:bRUmzjXAwydMXI9rwxp9W93OK2muke
TLSH
T12262FA2EE92069BB5DDBD219F9617B57E3F5102226942DC0FAFC8D2C14E76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 df263d1707eea7cc750487ac129a9cab8992360c3f02d671d3ac2248ab156b1e
MD5 6ab18d87d8b21fa2367513c7101609b4
SHA1 9102183a04cf4757c4c23b52d72393c205848204
SHA512 c19138f7ba2b19482e6aca6aeb2c2069d53104137d8178df0469d004e77480c8852e02939f3351af3b01ed656870b2098c06f73f53f4f80916e06ff72c3981da
SSDEEP 192:bRUcBzj19AYWJuV4v7JpAPRp2qF6T4z9BHsb+WNZ+bMdxx8+IxWiekOK2YeAsfVK:bRUmzjXAwVkdUXl9rwxK3Wi3OK2ms5e
TLSH
T14A52D82EE92069BB5DDBD21AF9657B57E3F5102226842DC0FAFC8D2C14EB6CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d6a634d6aebb2714a972c11352df52c0d765829919abc7ea88a3e37f07625324
MD5 865dd15ada69405a7f61a8f1793f95f1
SHA1 68fdbb5693f7205f6c2df8ba7268da1730317496
SHA512 99ef081499a354c818f0e0847332761be8a4bab893f4afbcc5ad09f6c067ba5d884996bae9ab8d3de08bed613052c9082f45807792c60e708d6a74f65ce085c2
SSDEEP 192:7RUcBzj09AYWJEUv7JpQPRplqFP0qcoz9BHsb+WNiujnffjzpeF+p9YiekOK2YeB:7RUmzjGAKQdMXIBrwDnqSYi3OK2muke
TLSH
T18062D86AA92069BB5DEBD21AF9217B17E3F1102226942DC0FAFC8D2C14E76CD3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1cece697a899a11d1e45d070b6c2d66f11efdad685acd44cd51d92de882f873b
MD5 6a37191f0cc2bf0ee54b27067f2609bb
SHA1 589ab2f45b3f5b31f9e6906d4c2240e66e53b303
SHA512 9de20017271337da61eb92999ae7f03ee7af43f773134d3989d28858c0038e3c241f4a81a0b9346b5cb52c6bb107782535e75299a1980f820f32f4d11cd7971b
SSDEEP 192:ORUcBzj19AYWJlV4v7JpAPRp2qFBTg9BHsb+WNOWxWOxx8+wx2CekOK2YeATfVyt:ORUmzjXAjVkdUXlYrwSP32C3OK2mT58
TLSH
T1B752E82EE92069BB5CDBD21AF9657B17E3F5102226942DC0FAFC9D2C14EB6CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 4b69e9385dd89e154decd4b99d0ca597c3810f7d85719baf943cd6254c553af2
MD5 7fdfce6d38b2f451598100a1712fe29c
SHA1 a543de9993ce742c413255e27d5fd15bd0c2fc8b
SHA512 b62145b16708c0d91c9d46ea0e136c8226f5c255bf98adc00cf5e11c82b142812b6e70cefbf743f4a64d8cd660d98a820356116ee05ec66701aa8ef17ccb29f1
SSDEEP 192:bRUcBzj19AYWJu+v7JpQPRplqF6T4z9BHsb+WNZ+bMdxlgIxWvekOK2YeAuf8yI6:bRUmzjXAw6dMXI9rwxt1Wv3OK2muke
TLSH
T1E662092EE92069BB5DDBD21AF9657B57E3F1102226942EC0FAFC8D2C14E76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e796aa283a689c195ee42722b058ecfae7e368306a10156790a510e8ef033f1b
MD5 1a046162112f4734f45e488fa5e9bd4d
SHA1 7fac84bb1657df5aa1346319ae4a4e8b36215047
SHA512 336453b6e06034b6b50a2bd780beed6c8ec96b732d954e644d2a9f3148615720e1d723b4080900cda4a03cf4c0bfc006f8833e8c2e341a086286e76dc7b5b2b1
SSDEEP 192:7RUcBzj19AYWJuhv7JpQPRplqF6T4z9BHsb+WNis+yyOjz2IxWWekOK2YeAuf8yr:7RUmzjXAwxdMXI9rwUi/WW3OK2muke
TLSH
T13862D82AA92069BB5DEBD21AF9657B17E3F5102226942DC0FAFC8D2C14E76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 81c6d276d616a708b65d250da3160b257484d8c711232b70c3114a84786308a1
MD5 2ff23d8ae2f1652e30946710461d784a
SHA1 bb2cf2b9bd257868078958e5fcd95959456430c2
SHA512 a0349864a5d48b7a7ce04f7d9b48cab35efcd5db7249eb61b9f28ff22fc88dc7cf75e9ff84e594d0eac877c31e0da8681301bf01e114e01e004aaf3b62b3c157
TLSH
T1FDD0A71BA0650490FFBB8FD1155219DA8A157C890495D0DC5503042D1E54A5BBA52F67
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 840fd97696c93c82c0994c3a3182b5d046823f53fb056eb86307b37a86f1c7b9
MD5 1c4026fff8de0cfb288c68bfae8549f0
SHA1 b1af3adfc6f6a4d79d62584e82ae5c5013810efc
SHA512 3bc59624c9380afb567a537c2b851e3b51f34bddc65138dcde4c038e7acffb255e60dff7365d29ec89d9f93acc0ddc4d5989576ba600f38a24a9e43e1b0b6322
TLSH
T1C7D0A71BE4650490FF7B4BD255611ADA8A657CC90881D0DC9503352D2A74A47FA21F66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58f7d8.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe58f7d8.TMP
Size 138B
SHA256 4aa6701977f6e5a6950869f2c14de12cace85fa48a81cceca03bbf00c731a273
MD5 7963d5fd111d9283e89730f9b8c2a265
SHA1 1ce38fc3687d1a290620ae001ae9a712d2018dfd
SHA512 0297d75c8fa1187d36d6b094d95aa7076db83362d598b45d56eac2d1a3ea8816e8cdd776acb893c1f4127aaf5a38397d20d7f1f22582fdad6cf426a4dbe4aeab
TLSH
T196C02B67B0540450BF1143910332198D83112CCC0CC1C0CD700338682570E137501FA1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 3bbfabeb1332c279840f46b6bb369bf0b775389aaf0afbdf2dd933c125a622f1
MD5 15fd3229e8d2c3c1bfbff779dc91c253
SHA1 0b7903ac19188d91d59bcb3421a6cec00f0b0c70
SHA512 68e599470b958ed156d55ed5afdc1fa63aedbc8e200b3c1393dc038f88c8424996a44200d0174bbe3f010910d414bff7b246640dbc44e3c52b63c29189812d65
TLSH
T1A9B0120080017501C05206F011C3E888711C5F2A9B0A7702C3F06963C8291718019050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5918fd.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5918fd.TMP
Size 96B
SHA256 7455fc5906518760ca006f14b2288f972ed3f225bce17867375ce9e8e9f4bf15
MD5 0254ded79393d88bab6bff54ff1b372b
SHA1 d9222044dbc2986452e52e8f8bcdb9767aa2f643
SHA512 c36f5dce38db970bee6ba82b9788422c2df792584d27a663c2aa2573e34e80815af2d5488223bb7a649548af51e2df4cd98e3b91b2b490e5c76b4d8921d73404
TLSH
T1CDB02200C3023222C80303F02288A0C83220EFB0CA03032283E00AAACC303B00232020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 976ef597a44d8eee94569079afbcaafad0ddfc0b8e289d59211e8f0fae691986
MD5 a725103dea8e5666b1f056335790f4ba
SHA1 1646742b881d823fd83ffc223585f24dbfffadbf
SHA512 b14af4920c9a8cc4994e2e2f3af363785d31a2a83541e02bf708a1aa5208956f209640ab322386a892e4c5ea0cc63ec602a75a9b9a2157674276e504fb5d5b68
TLSH
T1C7B0228803802C0FC00823B2E2CB2B2033300CB002020223C2A80CBB8C003C0CC3A880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 899dbdb2cded9cff279b5fbebfd332bdb0a3d490ebd99847d14a22a4d0961635
MD5 4b4933b40aa1ec1945b569b82446f9c7
SHA1 b5a5b85909cff41e47f38929099d512a11b9fb16
SHA512 718bc2af777283fcbe222184320b8d264a1ca1849d1384d595fdfbfcb1132316186d7dd56187ddf9a7a63722f8a04e054724066bd39a0f2d4f4d9f30b620d4c8
TLSH
T161B0128456400E02C08E173951C80F5437244C292085030781541C5CDE000A08D35D85
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 91B
SHA256 b2868a378d48dd2d0a8b1f9f0fc91fc8f6c51510152ddd8707ab7b30272eef89
MD5 ad403f8db487fae66b9f95d5a7cf2f31
SHA1 354f27b34d9531c26eefa59b6c81dc46d3fe2673
SHA512 741c8f89f6e54c7633753fc28270d9c6bbc7eb2e3a63f7078085b297e5c4f6a9e3908a302535c490bd5fb81f5df7323e25b8ae15652b36ee10afe2013af09dd8
TLSH
T1B8B002BB504259D51F7534F7014732DDC56633CC9C85DE8D94721058321457F2001C65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a8733.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe5a8733.TMP
Size 178B
SHA256 f55782fa644c4dbaf74fead24f58ffdb39ef7e48d4aa25805d9cd9f4ee4e93b6
MD5 a3bd5299ab8e0248f2687c3231324d6a
SHA1 b9a8bf09acbdd68fe2f895f9e21705119ae0572d
SHA512 9148b2cd7d92ad488936809aa501436aeb04a0b3a179d3d487c4c256efa8850801b7548e66895605d17fb18a1a1a96b466b3a58c30d45bd277848e31b0d1b67d
TLSH
T1E2C012B710A186933E3928FB124A33C8CA3A3FCCACC0EA4C986634592231D6B2801970
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 5b8f93b67bb12f50aa39180286e5c585b333eca6e2e1fb84e38c8be2fcadd978
MD5 14e3c72d3fdc23c27d1262d1748f40a8
SHA1 0e668eb7d41daa7614dbdc3916369b2b829fe4a5
SHA512 2fd3dc9c94788b3f7964c372d0811cae3cbc43835a5c4f8ac58df0a98bda1ce63b279561f993826a076d80a5dbfb6b85100ad30b1919cc94a86386ecd6bf66fd
SSDEEP 6144:PTeUkDnicGZTbLMn621DNaKzxZNrIFmUi21rSm8uUVNSlzYY:bPkecGZT0nBvVbwfi21b8j8zB
TLSH
T19A34226159B7F9E6AF8421AC7F5E63249CA8094345D6C10493A3AF527ADF3C83B22D31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 7b2ce6e002ba939575c9e85f888ea7bb475a943eefdc4188ad9a0afe74bd4629
MD5 be0e36a21d8d7c303d3d2cf9252a1022
SHA1 457a5c076b2c2629af2a172d39466a1ba448dd8f
SHA512 48fcc83afa327585e21755f31bb3eff54104aef15f6e5347b14157409dec4f4290f8c02dfbbd86c5294194e25508ce5c734cd368549d3e5dca0ef1454f99c8dd
SSDEEP 3072:S1FUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:4FmUi21rSm8uUVNSlzY/
TLSH
T1F6C313007AE3F8F2EE5930447BEE2A145D6C0D818291C6415673AD419DEF3C71FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e72ff1b7062a3da11f36e23c0b664c07bd418183a5478847964fd4e13356d5f8
MD5 752e2a50563e5c9123009c6f4c9a59c5
SHA1 988bfe4123f4faac576904518551bcd987333520
SHA512 5155e436c9e1de261758b370abbe62704b649f31fd82da1805d83844fd5d15620a75958967b6d2abd68cfa046f762df204c167a4c1af6f6eeb580d0fbbc7331e
SSDEEP 3072:SkFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ6:TFmUi21rSm8uUVNSlzY6
TLSH
T1A4C3121079E3F8B2EF9930447AEE3A158E680D818291C5415773AD459DDF3C61FAAF38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 f7a7e644fb1dfd6acd3f1ce7f3c4696ee55b03f97d55d1170c99e015ed73b1d6
MD5 d0856e8d751da944c30cf77d60ee688e
SHA1 c9c5cdced98dffc3abac6521475359f5450aca6a
SHA512 2843a2c7c3efcb00cefff36505119aeb021e47028dc21bd324b02b19257b4cd68a07e8e629dc48e0990a693d4c8bf6d2fe160f8bed639b561d2736a41748c87e
SSDEEP 6144:2eUkDnicGZTbLMn621DNaKzxZNrIFmUi21rSm8uUVNSlzYY:2PkecGZT0nBvVbwfi21b8j8zB
TLSH
T1A134238149B7F9F79F8421AC7F6F5224D968095201D7C10193E7AF52BADB3C83B22932
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 0e448a02df79962b4242f121ee25c9d41e14357a6b344a75a0edecf7e42364d0
MD5 2cf2b0011c6e80e2a9680d39e991f855
SHA1 1aef321c5a65f1a22765f765649f08584f2bdd37
SHA512 855f268ecb22337e6d6c06f0ffd5eb351c605eb072bb4dace5b656d7d01d00dedc81fde285cdfbd179150332dea629391f548a8f7222aeed53a608f253c4bfd9
SSDEEP 6144:zeUkDnicGZTbLMn621DNaKzxZNrIFmUi21rSm8uUVNSlzYY:zPkecGZT0nBvVbwfi21b8j8zB
TLSH
T1D534238149B7F9F79F8421AC7F6F5224D968095201D7C10193E7AF52BADB3C83B22932
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 c481751484a79a5a3553f5b24cabc2a2cdf4f89e0ff8e14cfabb0559c987aa14
MD5 46c2a483808840d8fe633e51f66a2b1e
SHA1 b7436064bbdb034f1fcebec11122d36891b00fe1
SHA512 fee7e7d853276d3db3a5783ab6a1e06ee88f2e7f7b5b2d798185bb1be6a10ec19afe4413cfa27267e4da79c37d51210942ae1fdca071a76ff0860c36e3af394f
SSDEEP 6144:pTeUkDnicGZTbLMn621DNaKzxZNrIFmUi21rSm8uUVNSlzYY:RPkecGZT0nBvVbwfi21b8j8zB
TLSH
T17D34226159B7F9E7AF8421AC3F5E63149CA8094349D6C10493A3AF527ADF3C83B22D31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download