dc0826657a005009f43bdc3a0933d08352f8b22b2b9b961697a2db6e9913e871

Analysis

user interaction
yes
max time kernel
396s
max time network
399s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 18:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VencordInstaller.exe
Size 9.9MB
Sample260822-w92pgabl2v
SHA256 dc0826657a005009f43bdc3a0933d08352f8b22b2b9b961697a2db6e9913e871
MD5 1b8ee61ddcfd1d425821d76ea54ca829
SHA1 f8daf2bea3d4a6bfc99455d69c3754054de3baa5
SHA512 75ba16ddc75564e84f5d248326908065942ad50631ec30d7952069caee15b8c5411a8802d25d38e9d80e042f1dde97a0326f4ab4f1c90f8e4b81396ca69c229a
SSDEEP 98304:jmPUf5A91QP5oToUsbeRwcyHekFeSpc12EKw+KVktWHBLmpTN5huJd3kMerGpNTt:SqqQP5oKswpLi3gOW
TLSH
T13BA65C47E99241E8C4AAD1308667A273BA317C151B2427E72B90F7382F77FD05EBA750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL 2 IoCs

phishing

description	flow	ioc	pid	Process	stream
Email address	121	[email protected]	4220	chrome.exe	809
Email address	121	[email protected]	4220	chrome.exe	961

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
309	discord.com
310	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4220	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318975019495450"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{C7716D8A-7DDE-4EB2-9D7F-5032182218E7}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
6124	chrome.exe
6124	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
660	Process not Found
660	Process not Found
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe
Token: SeShutdownPrivilege	5008	chrome.exe
Token: SeCreatePagefilePrivilege	5008	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe
5008	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4216	VencordInstaller.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5008 wrote to memory of 2140	5008	chrome.exe	86
PID 5008 wrote to memory of 2212	5008	chrome.exe	87
PID 5008 wrote to memory of 2212	5008	chrome.exe	87
PID 5008 wrote to memory of 4220	5008	chrome.exe	88
PID 5008 wrote to memory of 2304	5008	chrome.exe	89
PID 5008 wrote to memory of 2304	5008	chrome.exe	89
PID 5008 wrote to memory of 1976	5008	chrome.exe	90
PID 5008 wrote to memory of 1976	5008	chrome.exe	90
PID 5008 wrote to memory of 5064	5008	chrome.exe	91
PID 5008 wrote to memory of 5064	5008	chrome.exe	91
PID 5008 wrote to memory of 3608	5008	chrome.exe	92
PID 5008 wrote to memory of 3608	5008	chrome.exe	92
PID 5008 wrote to memory of 3552	5008	chrome.exe	94
PID 5008 wrote to memory of 3552	5008	chrome.exe	94
PID 5008 wrote to memory of 3160	5008	chrome.exe	101
PID 5008 wrote to memory of 3848	5008	chrome.exe	108
PID 5008 wrote to memory of 3848	5008	chrome.exe	108
PID 5008 wrote to memory of 4116	5008	chrome.exe	109
PID 5008 wrote to memory of 4116	5008	chrome.exe	109
PID 5008 wrote to memory of 1172	5008	chrome.exe	110
PID 5008 wrote to memory of 1172	5008	chrome.exe	110
PID 5008 wrote to memory of 4384	5008	chrome.exe	111
PID 5008 wrote to memory of 4384	5008	chrome.exe	111
PID 5008 wrote to memory of 3752	5008	chrome.exe	113
PID 5008 wrote to memory of 3752	5008	chrome.exe	113
PID 5008 wrote to memory of 5188	5008	chrome.exe	114
PID 5008 wrote to memory of 5196	5008	chrome.exe	115
PID 5008 wrote to memory of 5204	5008	chrome.exe	116
PID 5008 wrote to memory of 5428	5008	chrome.exe	117
PID 5008 wrote to memory of 5428	5008	chrome.exe	117
PID 5008 wrote to memory of 5484	5008	chrome.exe	118
PID 5008 wrote to memory of 5484	5008	chrome.exe	118
PID 5008 wrote to memory of 5584	5008	chrome.exe	119
PID 5008 wrote to memory of 5584	5008	chrome.exe	119
PID 5008 wrote to memory of 5600	5008	chrome.exe	120
PID 5008 wrote to memory of 5600	5008	chrome.exe	120
PID 5008 wrote to memory of 5860	5008	chrome.exe	121
PID 5008 wrote to memory of 5860	5008	chrome.exe	121
PID 5008 wrote to memory of 5212	5008	chrome.exe	124
PID 5008 wrote to memory of 5212	5008	chrome.exe	124
PID 5008 wrote to memory of 5192	5008	chrome.exe	125
PID 5008 wrote to memory of 5192	5008	chrome.exe	125
PID 5008 wrote to memory of 5216	5008	chrome.exe	126
PID 5008 wrote to memory of 5216	5008	chrome.exe	126
PID 5008 wrote to memory of 1980	5008	chrome.exe	127
PID 5008 wrote to memory of 3424	5008	chrome.exe	128
PID 5008 wrote to memory of 3424	5008	chrome.exe	128
PID 5008 wrote to memory of 5420	5008	chrome.exe	129
PID 5008 wrote to memory of 5420	5008	chrome.exe	129
PID 5008 wrote to memory of 4456	5008	chrome.exe	130
PID 5008 wrote to memory of 4456	5008	chrome.exe	130
PID 5008 wrote to memory of 5804	5008	chrome.exe	133
PID 5008 wrote to memory of 5804	5008	chrome.exe	133
PID 5008 wrote to memory of 2052	5008	chrome.exe	135
PID 5008 wrote to memory of 2052	5008	chrome.exe	135
PID 5008 wrote to memory of 2500	5008	chrome.exe	137
PID 5008 wrote to memory of 2500	5008	chrome.exe	137
PID 5008 wrote to memory of 2652	5008	chrome.exe	138
PID 5008 wrote to memory of 2652	5008	chrome.exe	138
PID 5008 wrote to memory of 1964	5008	chrome.exe	139
PID 5008 wrote to memory of 1964	5008	chrome.exe	139
PID 5008 wrote to memory of 5180	5008	chrome.exe	143
PID 5008 wrote to memory of 5180	5008	chrome.exe	143
PID 5008 wrote to memory of 6036	5008	chrome.exe	144

C:\Users\Admin\AppData\Local\Temp\VencordInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\VencordInstaller.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4216

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffdd529c728,0x7ffdd529c734,0x7ffdd529c740
  2⤵
  PID:2140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,6296045544659474524,8785127156078224134,262144 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:2212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2264,i,1047237425822524796,13127506353428535781,524288 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - A potential corporate email address has been identified in the URL
  - System Time Discovery
  PID:4220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2424,i,5516004201199191412,14512409757495665766,524288 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3192,i,3248469435500853853,3266657780318846768,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3040,i,7028616746615880101,15842910035640721681,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4304,i,9101771562429078590,5850015078824049436,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:3608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,16845061652886843526,5631722708421939296,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:3552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5496,i,10066239896783056325,17811474398525828077,524288 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5764,i,380450184218724792,3020980940763173839,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4868,i,5849184329336347134,16325962574958583857,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3372,i,16615641017735219350,6200986047446438000,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3916 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4616,i,11086852764977778844,12327213972579481582,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3256,i,2855322686121283816,17909985769256301416,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4900,i,7589583973426070153,5346972112902422793,524288 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:8
  2⤵
  PID:5188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3216,i,5267727915894886826,2574547847323361314,524288 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:5196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3188,i,15990030635640015508,7329918929729080388,524288 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:5204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4868,i,3353974891581086267,2057341875744862417,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6356,i,13157624133422492696,2890719596748837143,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4892,i,5145882792336490220,956050841154123513,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3408,i,4617450037809973662,15602433100576562331,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6360 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6540,i,7646225846078622436,6885787455688622859,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6572 /prefetch:1
  2⤵
  PID:5860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3420,i,6583496764743731802,6093723230552362104,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6708,i,9874928467982694852,7137732827246422119,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6536,i,13952701585261645387,18286329894609732981,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6856,i,8851865275810203692,14073118333199186629,524288 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6880 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6844,i,5094247182426926687,13518542584310974694,524288 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6860 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=4400,i,17413768501262043385,2046722470558756280,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7052 /prefetch:1
  2⤵
  PID:5420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=4372,i,11318893133107540650,1762885383212578034,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6352,i,12601815902626327017,14616724552142201317,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=4616,i,14589228764674347543,11982539991566495859,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=3288,i,789939115403241379,16440025377057907259,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7192 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7352,i,5198824759448287136,2680521314948171692,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7348 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7456,i,12625774401190539797,14028708799306770506,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7472 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7864,i,668673685407273970,664549770559799864,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6276 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7980,i,7129439114461770088,5740774606915912049,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7956 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8096,i,17193255350339955041,13116952416031455477,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8092 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7732,i,2665841894578954772,14017285942876387217,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8148 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6508,i,14853101146128831921,13709820241731526375,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6472 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=4408,i,6651592980743845037,5175004873237769866,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7204 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=6744,i,7459645984282587543,3993452552418491520,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7228 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=3320,i,18025664864260243490,16149945237509882746,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6488 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=6824,i,5166771800250626310,5009683437933285591,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7336 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=7764,i,16105020870741214706,5935933572210982311,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7880 /prefetch:1
  2⤵
  PID:5480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=4416,i,1574003484321542256,11331766346942346527,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=6756,i,3282061163988321011,12144493445625022298,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7328 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=7400,i,7273229933146683058,11623400697736014122,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7428,i,6191225715026828602,10040110915549917620,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:1904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=6824,i,15110874253690597272,18038513497754176073,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=6740,i,16349270393690279668,10918526465187492183,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=3276,i,9080958260632807820,15637870184821176182,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=1276,i,8882701067874637911,14046854234746722410,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6772 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7460,i,14072032104150208391,4293948190079962452,262144 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7888 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=7952,i,9761029295001651211,6826675628280765947,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6504 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=3276,i,3027997755375905740,11559985771153038285,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7476 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=3928,i,10673162832628530993,12630489460660792898,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4396 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=5944,i,16647831906930304,6149689051395307770,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6408 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=7280,i,7856440485282318666,7941204525770871340,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8124,i,948128274430841997,16256906993561669973,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=8132,i,379720496430433106,5377355832987553182,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8128 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=6696,i,1777680852567874147,105980953465139737,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7728,i,454845135599313886,7152756313967793322,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8096 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3444,i,17129882674128491428,5058170858984205627,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7664 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7112,i,14127247043258045045,3776357008497616799,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=6696,i,7574472080867640327,1436343668485606796,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7104 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=4356,i,10672604252844738589,4944578854524654055,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=7800,i,14727768427737279539,5862494808863041710,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7600 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6760,i,2045860619674169416,9055828504230669439,524288 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=6600,i,15980905097188859359,17216929102300193243,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6444 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=5496,i,11786961680028415794,15866353626245702883,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=7400,i,15068451679684838978,5433845838496283617,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=6288,i,3290734127180474737,8940236477643498038,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7116 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=7100,i,5332705083392458311,11788670792370317643,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7300 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=7440,i,13999653514633799047,8001254881836567917,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=8156,i,512246327768006602,8874792264889394991,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7400 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=7128,i,3657077482706986910,12480667975282530190,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7532 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=7048,i,10133579408993265706,4687316092841053104,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=6620,i,3477000539001929863,13955892288835856515,2097152 --field-trial-handle=2012,i,3022947540888974120,15934861151213935763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:1900

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1772

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ec63f43640e778b2a3d001e890e513809d6478d41ea9992f0ebb42cea338b14b
MD5 aa49f52731c2c99fce13ec07f32320c3
SHA1 37b73d6e491b49fa726fab29bbd788d4d39a6f6f
SHA512 fdb89f6243ecb301d5531834edf6e1eb91db15491a4bdc9c0a9e37614c5ccdf65e2ab42292e8fd7b0ba2cb7b58a199717573fd984e7090f6ea19883f7bf848fc
TLSH
T1BEE02B9AC925AC771DFD075C50A54B46EB5513272A80995F3B3CD21C4FB162A8186C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 53KB
SHA256 e7001353e2b255331445c47a71da5ed55d3e3a5b1b899c67f8f90a8ae40b3a73
MD5 01ff5187d8dc77625cf753c9e6afe751
SHA1 b07f693e9b68c0a6c3c7ea5dbcb0b2e00e48323e
SHA512 dde8f43d5f7e8030d389ef318932bcad87325b303648977a6e6c55ddf6de3cc373d1833dbb49f743ccb8a59acb861b4637bae597c97db2ba3db2a62a32136286
SSDEEP 768:lQ0MPCEFP9SQWr9sDtw/3TFXNP//rNpg8JESM7TRbEBmM9yj3UD+OsIhZXVLZOJ:0PCwSduW/FNPHzNSmBmM83EuIhZlLZOJ
TLSH
T1843302B6B4E3271017F4BBB6D0D46AA98B93A79550239C4BB0B65B03324DC4B2FE5487
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 55KB
SHA256 2deb6ed6ff2ec196ffecea403783f7547ce170f90e6ace7b8c4b4234d731393b
MD5 a4f6f31be32767426dc6b0d759cc094e
SHA1 e70a3aa604b664a2c9ee239b7c04b077a0cdcfbc
SHA512 fe2db47da22ff7ab70dfc8d38af1da95d0babdc69c27c0b09ed2481496f09e77e21e6f97289b2605cb3d1f908ebe4ce4b783abfcd84d0ce591cc30385440f058
SSDEEP 1536:8yqjtDvHi+sAFvm7cUb4Yug8oyqfJpJUPv6h:8XDvCZuaFuuvUPv6h
TLSH
T1E0430298B4E1DE4D0943D6B7AE8D602CC4F08755524E1E87B4749A9FF2D348CE0299BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 37KB
SHA256 c3c0179122c67eb0ce601ac8400537cf9378f207b3975a4f68eb60a84c9381fc
MD5 bdac4766ffd95e2987122430021c115b
SHA1 02ac0a3b2f8f8bec98a5c4145197d74428c0df48
SHA512 5a359fd7b3fb9563defc6e97957b02bb81a67d3f78dec82e89c3f278b951dc99f380b9a310b2595c4e5925af7939333cf38f0dc8031b1ae0a6ed8258f6ea3450
SSDEEP 768:JqA4W8z8V70yuFb1BIAMQ8b6Xa2PpWQ4WYFc4v7hjEggANEMUGPcX5cL97o:Gz8RjIBBIM8b6/WR84v7hjEggBM7PG5v
TLSH
T159030144C3C293DA2B07355AB7DFDFD3E6C9E31B8842BD598255C31A706AAE4C486234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 31KB
SHA256 6c18d579fd87c3776be068b762cbc83fde3acb543d49eabd3ade842eb987e887
MD5 fdf9c509a8095ffa556117f486a94a8d
SHA1 d8a316f7cbfa46e69876c925e58fbf7b7c1abf0d
SHA512 1da75065bac5582eb357a34e82887838f2e7acfa53df36a7a6a32049aad18d26cbe15b12de3987803a3747677e0e222a964444f0bbca3163c686469729ec667b
SSDEEP 768:3kEJ6k5UQdhzhODqcJnoGp9OFjIWQhvOWXFgHV8zpKjFOpiPyWwL6W:Ik5UQdhzhO+cAjIvvO9HOKj2iPyiW
TLSH
T1D7E2E1A8DA90DC3BDF6653F4ADE7105EB1FA7BB4897108E1DE12FA6D89D12C0C4144E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
Size 168KB
SHA256 f5e1a314456b1fb76e863aa48c6e2166e69254a260178d75cfef62a75eb930db
MD5 71f6ba3bddc8dc8946c82fad31a74068
SHA1 10a8adefb79403035c228dfbb7b1ba484cc7e4cd
SHA512 17f7dd5f58bc45dc43630ec5a6a2f91c59ab30fe197fd32537f0282356983b266b1ee6a6458fce7fd1a5a07791738ba2cd9f9ea02ef2190cf6af9f588fb6823b
SSDEEP 3072:xVkasjNiarXChLukdHwUQMle/6/UVrJDKKn2EH39cUOJ8I2l5+T4dI:xVkasNyukNpQMlARJGZg9j88tl5+kG
TLSH
T183F3233CF854B4D43CA2BF341B158A07CA96A05859C25D3122792A9FDBF48C1E7D46E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 42KB
SHA256 1ace2b9e12798d1c1c555b6d647ac908b01aa48adf6ce6eddcaabeeff7632dfc
MD5 157100b6c79c833da28371a9898ea036
SHA1 8033acfd3278cd594e56d3854f9484862689073b
SHA512 8a1523dc9fa079ad72eeb7677c04f526a0d0424d4a006a3540db82a1594c8f27cb8a9949e67a9920d78b2eab935098a5474ce63358e76f88d555d6e778a63aa5
SSDEEP 768:Ez5f5haHCHSCRKNvKzjIXXQpX45Mul0E6Mdslon7FEaJB0z4/Ld8l67SN:OfDaiHSCbsgp45Mul0E6MSlo7FEacl6i
TLSH
T14613E15C921CD887E53F552ACC9010D2AA77B4E9BF53F809E312EFE5A11407927770BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Size 162KB
SHA256 e5b37aa2a77953677cabc120028ae6f635e3a85eb27954c59db0f07262d28ead
MD5 d2a531eed2f50298c95c7b9938eb0b2e
SHA1 7f13cbca8ff1711be27ec03beff087ae545f8e0b
SHA512 23128cefdd8312c98bd59fc27d78bc5543c5b9879f4036d4eb0174c6149c82b1492bc98f87c9ae9260f3f9d6af978d81fb71e5b70b63c04dbb8014eb52076239
SSDEEP 3072:qWV5yoBGtlGnJ2wZrUgmIp7cwJB1vWMxDXxxuppmxeVKLZiyfpRpjHkrgZEQSh1u:BV5VBiGVrUg1cMRXxx46eoDfpniYtT
TLSH
T17EF3129FDDB71F958E06862FF9740AEC45F4511E8B285C234D88BF24EA1227460CDD8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 248KB
SHA256 0e3a963088435246da808b9014767e9ef8408dd4b43e80291b17a1482d570600
MD5 bb4ee33ddbc249f0f6691239aa39a996
SHA1 5c200e5d4d7469dc48c3105cdf44d2cccd0d04bd
SHA512 3351df74ffca97621ce95e0f2e2f6e32264243811e5e3e62f689b162b5651fc1f8ae0141fb951afee44ba9faf472bca6ff6b8bb9c3a881cabd1612ceee474172
SSDEEP 6144:00trq7CBExjmEasg6MxWzpLi7Esh+6EwWenBFo6Th7zgM/bYpi:9xyUsj9asg6MMz9i7lh+9enBFo61/DTr
TLSH
T1DA44236476B2CFB502E7BD7E9A93902E06744004B3919F3BDE0EA25AB61703DA8D3754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 41KB
SHA256 58cff18e18080ea989c3422bd44246c5cf8b40a7a571cb345da5c8dd6966e9f1
MD5 bccf13c8f6c27943dca61ca97c6ba0c2
SHA1 1d4e20d4d9d8f8188fa217f13afeb62cbb8a065c
SHA512 52e6ba79492a392342b95bf65b945e3fdebe0c03987c4dc2f2f5e8f98eb11007dbbc85a5d59fcd53e407b868fffb71675cde7152a143ab46656f32989909ac8e
SSDEEP 768:hQ2ooxreftgRDoKfW2eoqy4H5LuEskUkhPALE90q9Fnf6d60y8Dj+yV1s4Bi0SGr:G2lxifeRDo8W25GHy8AL/o5f2NmyLsgN
TLSH
T1D21301400E5A68B5C7C8AEF28A21F5523F736404950981F2ADFD3E01B5DCE5E41D072F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 312KB
SHA256 0b6251fd38152a7a7319d54a8e993417dfe359650a9581c135c3950fe5704861
MD5 932d4b5eb7460fda1f102de6f7149790
SHA1 fadbac31c043b89a72bf3abf502f9ee53ccbf86c
SHA512 eaad89143b37482972189a3ff86698a7ae3332c42248d177fc74e0ec6aa9e1756a0699cb77d3b83cd815e2651df267c0cca4e9866d7a59a26d0dbeadb060189d
SSDEEP 6144:Y87U1JYBYrHsCcjPUrsgrwz9Ot6mjoSF7SI/5Czsl/sfz+IeJqJi:REJYqaQ8QN7p5Cz0jqJi
TLSH
T1786423C8B9A7916BD9F3FEECE0C64958B3FE733433C684798421915B87122D882E45D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Size 384KB
SHA256 48eeb2a19b2bbf314ffbead8e9d1433bdb64a5b619f5ac1bafac29a769f99644
MD5 695581f84fc3adf522d82a1549733bcb
SHA1 a157dcb18c81087a7e52287bf477086edc469ba2
SHA512 52cd5b06da108cb9ec4e1f599cc50039abfe15c3ff1940cec2c86aad1405e47ef423ac289e478e6d30077299ebac4a589dcf60e88d4b8cf5a18c18893e32cb63
SSDEEP 6144:fFoH6/FH70TO3TKlsQhjDNzun6YnSz7HGXskZQBQ75xci2jsxRCKWXaQM7AY1Emd:O+QyKlzhAn6YnHskXXci2jsxE5qjES
TLSH
T13D842387B1B33E81BEC35A70280E7A3DA6018ADF2B5763E28DE2B04734B5C451D93E15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 196KB
SHA256 5f4858ab8e0095392edba33c45cb65e244e638d922ce3ce6be6fcbff12f91844
MD5 7b1b36dbdafb3d513b2bce7dd388f45a
SHA1 20d57e8f531b273c76437664514c85bde8e5d137
SHA512 3f0cd3a2bfe0cff4e299405e34eec613b59e073fd974fdcb3f8cd438f5e788bd305c555c81e2db318eed641386b2cd15569d26e5e85f6e09b241281f21ee921e
SSDEEP 3072:Rtrw3eoBc5bRxMuxsLt7eXSl8AenAspB5QfkqH61BwIPHoo3f323:Hrw4bRjs57eClLgAsT/DUyHB3fy
TLSH
T1641422F7E891A4A351BAFF448C9F0748818BFE26229A7CEE13891118CFC654435ABF51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
Size 16KB
SHA256 3f62545833484b23cd8f7582bf0cd31ceb2b9bf115e8aeba937d1043d85557ac
MD5 9076d9a3555a470e351c3e3268c591e9
SHA1 6322595e41d9b081ac7fa516af3d17979c9453f9
SHA512 77fdad79a20dff76115626de200b34b625d752242fdd8a44f85fd44aeff1a05fa9b3f7654a97f1a95e6f08cfeb5f7f60821a10c702f51466d4d22ac5def0a622
SSDEEP 384:U6MKHsBC3ZGP6KpTUEjUAhwfAK7QFGssBFV7rIPB1av2IvqftF:RMDCbKB9jnSAK7QcsDf7
TLSH
T13772C0A6DCE63B043A0555806407D2FFBC5E5778482AE3A298B124ED1A7BB2C0A7066D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000022

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022
Size 65KB
SHA256 988a699a2cf5e012094d41998234ed69a89562aa197837df6159e7f3aa4f9207
MD5 8ca0e6926d121f7b5e1c2c1d114e0d1f
SHA1 00da6fc685d30610ff1d3a97e301033be95c37ef
SHA512 7df3cdbfb5467e5972632e0a762f3e97cfcc61df247819d9fdb4d48413a4d2001e9c20d97d130ae5ac5fe84c0a84832020ef4448df7986015b7818476b1c28eb
SSDEEP 1536:9ow8BOLZmygph7Rm5mXQbAjcRwzfBhdNudUqg+cVBW1geN+yi69:9584Id/7Y5mXbjawzfLdN59+cVBWc0
TLSH
T1C363022FEAEB1C887DD34B16901D6152BCA583DF50D20A854D97A980DE863DC91C7EF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
Size 73KB
SHA256 c8043430b14ac4131646da23a62dc6fce6d0944dbf1c8e07ac69c4c40ed8a67f
MD5 9ba3c4d5d5171672e895b8c124b89489
SHA1 8df232845179c211b3e4891a6e7f6f9be49e335f
SHA512 3413f3a6a3d780d51b891cc0eacc80364cc9718f0d5aff8a599df32552fbe378e3cc3e76e6ef98efcb1dea665ea586a6c986ad0852081fa11d49dea30b8c1d05
SSDEEP 1536:gJJpWKEN0+OUU0C2XYIyfDqHbs9hB09CfZlKMVOSUFV+qnCQaPKuSeUJ:cjW1b1U09DGyQPKzSUFVXCQaPBzUJ
TLSH
T1227302860B8A47752A27E73C9E1D9851B7B0C4B1B15FDFC7A2B8B15E712113861C73E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
Size 59KB
SHA256 71dfc8e7beb7509da8c314ef938701f4cd9a94ba8d4d23568b46bca917fbcb04
MD5 2f7a1f29a152d52c3f7eafd952244b99
SHA1 966e8d81c1613f4bad3a6126aa20213835059d7f
SHA512 7e4c8537356a5cd78a27347349928e2e6a33c96cdf519ae1bcb41bf4892e045c6e07cb468cc5996f93ef1dcf82a3e8484a309cb9e7b6cc307570392812f66b14
SSDEEP 1536:r+OGyPyI0nqNqDJi3Yv4ltGiFa3QHtjlhDJMfGv1uL6DB:r+O56gqDkIv4lt9I3QdXDafGvVDB
TLSH
T18153023D32B689DB35B5B75D225B81A585818AFF807387803CBF1AAD309847376D631E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
Size 21KB
SHA256 2613156d2238148dd896af4abd9bfb3c7d4800d2db1a3f919f570f55f3ed2c63
MD5 db2e225a9ab76fe404b715887805f9f9
SHA1 fd05395a97ab4e231e4bd05e75c540d354d32e1d
SHA512 4757edc8f0532ea33fb1f0be22a494022ced88e302582dcddc6288e8115ea2274232897da7ebfedb438008a78eb27837bb370632bbead92ed78cb7c46664c98b
SSDEEP 384:9RgNsrH2qE7kqf9rYbuHfAq5jyuYWSIzyxnjb2V0dCtzUBMrBRgu0pesIdzqGVo7:9RgOH2qEhtHfHjKsmtb2ydCt4BM10DGE
TLSH
T12FA2D0F4B46AB670E70CA329650DB1F1FFDF9229E0DC59B9C9D110F0C8AE18214B8679
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
Size 62KB
SHA256 48c663bae89c6c535b5297ae6ba8195f8e730ac1cc91f3360af028b6e59c9f1d
MD5 99fb086f72840dd7fcb05b333f96a037
SHA1 45fd62ec48975eaf9a0ee710d0b578aaa1449b45
SHA512 479fe5913cfffd47afa27a1a3180dc61c7f0791747d4ae242a99878dd1831303b92c112b3245533e0cdef2d373abe40bf9574ef6ad9b301b448b41f4f18723f9
SSDEEP 1536:mXPI7rkkzxzCH6NGIJ01++XgTqIidXFzl+I/7VaB92Rauo:swPzCalZ+midVlPauRauo
TLSH
T1625302F30E6EE0DE2438B64AC20F768D4E79558E133E302E470D5F9476BDB97816684A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
Size 26KB
SHA256 36250903708876cc2617dcc76da8d6c531e31ab39bcdecd8a1e2458a120a8a65
MD5 87cc649acf3da73fd887182bf1e3cbe5
SHA1 4b08d2979356b9594351cab67f4a3274b6dcf0ce
SHA512 79a68f8157529ba14f0ce1a3f5731e6df1ef3f3030abc6a02d0c70aee969dd00d21fe661bae0a635ee52839b31e41c8255d998648a3fa462d0337a68b3eff32a
SSDEEP 768:59fAcV4jDtsVnvx35VgSnpveZMMDXDAiOfW06PkdqdD:598Xtsnvx35bnpWyMjefW06PJJ
TLSH
T1C3C2E002A7AC9F510660E372C5D6731FF061B3B5288AB9D7FBD81260A644A11D2BFBC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073
Size 400KB
SHA256 881343ad6ea81041fe837f2ad3946ce51afec69df0887157833c8dc91f40f85d
MD5 d5a5f049f16c295dcd4934220b1ae6e2
SHA1 a314f406dbb6852229a160140204a29595a6ca06
SHA512 7bf76c723d9584dcf8b85b37e5ee991eb015c8d7823d4533f4ceab1a55a8d43ee7cf612eeb1441eac45ed4d46ca959ba02763e8070e10b9048d2a34995743b8b
SSDEEP 12288:cU+En00WlYnTKY5IYL1ex9nY+QjuByOwaBK1wgeClR:500WlQb1I9iTOwaZgv
TLSH
T1CC94230C913BDC6521BAEAB587BF8B8CA77760CB4510534277AEF2290F5C985D5CA833
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3559e0960647e9d6_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3559e0960647e9d6_0
Size 305B
SHA256 1e1763ad9a28d66f3e39d24898f945e76796573d35887f4afa0320b135a42ab7
MD5 683d2dd8c9a6720de22b51ed62cd4048
SHA1 8ed5e2c51944cf658118b5ba58024effdb30d298
SHA512 be17e558f49622cfe9e7881890adadd59d10ffcdd813e80c1667e3f8378d9979602f64df2dcc3f0a197f61ea687f588e03bf7210b5ef7dd42bf76c7d5ce3d5c2
TLSH
T19CE0EBB30CF12F08F8AA8EFE88D86A998333FA844D3481D0015092E6CE414F912C740A
MD5 SHA1 SHA512 TLSH

Submit Download

6aa9737a75d47840_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6aa9737a75d47840_0
Size 119KB
SHA256 a6ef6f62747168a3e1f1e81ed78a477c7136644905b3629fc4487d2875e11e1b
MD5 d44c983eb0dfdde59ce284a17d84c66c
SHA1 cf69116730aee2984c35a384ea57165b0bcbfe65
SHA512 fa4465f9d30fd662f45d741b0ba198872fe6299f316a9dbd619cd85ace77b3f7240e04d4e037bb3bf0cc450db4b7e5dc7683cfca037d04ed113ce6e54bf769e9
SSDEEP 3072:QHE+t45hCGm37u473ZfwH5hSbhBABAU3WC4VYFtHKQg8Q633Cb0bXFUtWzuOyeqx:QHE+t4hCv7u47JfwHGqr3X4VYFVKN8dE
TLSH
T137C372102794899ACE7357F6629386AB733A80043FD7D30716E6F3692C583F6584B98F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2e176a9a3a2d9e1_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b2e176a9a3a2d9e1_0
Size 58KB
SHA256 8875cbd89334a2e74be88941c5e81670b27bae14a50198f12f5f980fa8baf8c7
MD5 ec8b8874052487ae7577ae03a086adc5
SHA1 83809725b4a2c764c23e49f22359d110907ba727
SHA512 93e41eed795ba129d8fbca1e8e0cbc444084e1f95e28fc90bd3ad7c901b361586238304b40734c991fae7e7536e8f40ce20980137dda854b1f51ecb8295cd69b
SSDEEP 1536:g9pflOXhDB5TLwZPxwnmwtqL2t/m6qaEiqZ:KGhd9LwPwn2tFiI
TLSH
T1824308DFB2D27336DCE361F14097410A92BE660A1CA4085F7915ABF45A34D8BA06FF36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c14646f34690eed2_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c14646f34690eed2_0
Size 314KB
SHA256 e010e67af5557a4d8adc8f162c7df422fc790ed5b55565b761f936fc63f5bfff
MD5 bbc82d3d844281194b51b8464529b870
SHA1 a7334313c71e4042f2bc3a7b55041e64f194ba96
SHA512 cbab5c352c4c1504732ef3131f2bd94c464b47f5d0ac117bde15b1be37319b328436c49a59e5598a38b26bc1b20b7c6b9528174f53161ca3509aadca05014226
SSDEEP 6144:gX/9zh/f7yjGYFoJfTB4J3+cPqIEMx14O:Gxh/flJbBm3+Cx14
TLSH
T1D064A50457859E36CF6BA3F581638966723245583FD3920793E1FB392C163EAAD82C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe8b7ca011cc9644_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
Size 301B
SHA256 b5f85b7c1dcc04cb9b06d3623a156255c4c77641d15cb97b2dbb30b832dd2be8
MD5 f6f5033011a6c9f63e2293097a844b79
SHA1 66773a82ed18cda99cddc88ad48b0a8e9c88a4d1
SHA512 f8d807f23c11ab44a04c8b187f3c47ef57514574cc7f3e3d86a587578e1c9b77dc5cdc1f47094be22764c49a808ad2d09ef413affc64a065d09df6ea59e97197
TLSH
T148E0EBB3487E0872CE0A81B1EE2B72049703E24C00CFC080AB2820B3E7428B51085B30
MD5 SHA1 SHA512 TLSH

Submit Download

ff12c2fda33299fb_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ff12c2fda33299fb_0
Size 247B
SHA256 3434c6f54e2d9123716c8b1f721c217b420355712adc2b376cc1df264f713482
MD5 51d7e70c5f2db10c2fb4f1daf7013033
SHA1 bbafb9cf81b95cb7e8b5d566bb63dc372cdafe64
SHA512 8d2bd8f577652c0015da3ee1a1693b753d911b18e8b6054a43c1c8bc3b2aa6980999185aa93f983caa715de36ec6cc3a8f2075a5ceeaaf79beec6e4afecd8486
TLSH
T105D0A7D7843575C0E04582F0D76733E9F723C2E42D0D90B891C4BFA276489BAE5A15E1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 cae8363dd0f9297ecd508f893036501a51559eb443aacf02c5121e229bb9de87
MD5 035ab9c2d977ad758ab52dd44ac59ec7
SHA1 88f96a7d9e6a6b007a67225abfa963eaf36042ec
SHA512 8a9c0071455b9ebb8d824e125587eb7b4ce40bd74548228c053a8efa30cf58125c3ecff130125abb4633ad5406f6187ef0c6f574ebccd125209fe0eb94ae4cdf
SSDEEP 192:zDqui1z/ZFr6m7XPYolS/5cFLj8126Xcc/fI9v1H:/qf1Tv6CPYGSej89XRo3H
TLSH
T12432C32CF0ED6562EFAB1E32ACE90D7D34B9E20188533EDA484DA9F79703B940D0D845
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 1c670f674f4625a9cb31f8e7f48812a3c2cdc9c0ac8fb19ce02bea1f2bafabd0
MD5 ada7af33945ac6a01bf4242c25eb27a3
SHA1 509e1a7092369fa8e370ffb3ba40f8a42f3101f2
SHA512 f0348cb07a93ffcd7bc66dbc746042c59d4490e2abb22fbb81b6fc41261a0f7ca2cf2583fa65854e857cc1a8c3403242c9296f429106f48a7bf1e091e3726b80
SSDEEP 192:sztuL1WLkeTsm6mY0Dagg9/Ygd5Ukncj812bWXcVBAs092ji:ati1or6/4agg9tcj8tXqWei
TLSH
T15F42E52CFAED6126DF6B0E71ACE90D7D35B4E201145B3EDA489CA9F397037998D0D844
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 2cb511c9354a8b246129a347303eb99e35c6baeba12bd11c2ba1039cdb938547
MD5 d110ea5b920ca9fd7ac8de62e7346e54
SHA1 a7bb3727fc85f4d70872f711738102db4e4e57f1
SHA512 d0713fb67083dcfe2c0566e9995a32225d71042a0e2c0812951989a0b73c0111c031dba89ed7bdba0df00c0ad71fc87e6950bbdf559ddd9e28af4306c0728556
SSDEEP 192:2quL1zX186m7Xk8lS/sXFLjh+0+y9901I:2q6166CkqSQjhzbeI
TLSH
T12B22A01CF0EDA562EF670E32ACE94D7D35B9A00188233EDA884DB4F7AB03B954D0D855
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 6673456c1dc71a1e728dda75afc495833827575bc38ca7e2ef12ceeeb1904337
MD5 7aaedbae6e03ccbb8d4dd9e809378526
SHA1 077b9fd55f22b0573c324e69a82e63b219b2808c
SHA512 bcc0d7d72eca798a7c9c6bc84470342e5a7d21f1103aa78972ee7818fdb6419d03f23d64afb5c95363251af7cd31c632b84f6d813105c8e00734fcb14df29c63
SSDEEP 192:8OzhsbVuSy1WLxeeI1qQ6ma2Ftn8cVtP/VwgtT5X2dGnGlj8122fyXMJiNu/M7Pk:HzhsbVly1aB6H6qFtn8cVtPN1h6GGljS
TLSH
T18E42E52CF0EDA022DF6B0E72ACE91D3D3535B20118537EDA85ACA9F397077998D0C844
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 6fc3a39a731c41b7b55fed437b0c0c241135402d03b2092f5c456b2d7dfd36c6
MD5 02da52100b1c4e0efe37359e33ed5948
SHA1 71123d8ac2ec690efbda4456c12e09bd05cc3ead
SHA512 ee379efac28b1414e1aacedd64fb1ead27cfb083c8b94b660b276c247173e19e044358f965f9372401bd00bc0d7aaa21aca36d4ca78a7f55756bfa60ee158ea6
SSDEEP 192:SOzhsbVuSy1WLxeeI1qQ6ma2Ftn8cVtP/VwgtT5d2dGnGlj8122fyXMJiNu/M7PQ:5zhsbVly1aB6H6qFtn8cVtPN1f6GGlju
TLSH
T18542D42CF0EDA122DF6B0E72ACE91D7D3535B20118537EDA85ACA9F7A7077998D0C814
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 b63c43acd285ebdc41822b65e13c8461b0eee69ea1e84347ad257b5ba7c7f458
MD5 c2758f5241f216c0261ec2413f6a2437
SHA1 122b22c4d8e31f281dddc79f1e868285f1f00846
SHA512 05f6232d6d98c9819a198060ad5da321ed049d6fb938d9ac290d6b3f70b0d1b056f6c56d295c423a0a5aa8571922cc13ffb93c7bbaea660150d45ba29d94283d
SSDEEP 384:DPZHOCV0f2tdC69989zemHpPeiqFDeJIERaIowOizwJ3z4eDFuMVoKHXIX3kTmTq:SZgQMNL3gi7
TLSH
T13D828DF7C3F8966EC81163F5AA243E17CD5D0615432C3C5B89D5AF4B53E28B1E281A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 54ffb4445d51af7393c1c794058d732a2e9f75eb9c15b31ed842c9c0fc951aef
MD5 9073c11ab6bb390cc9cf19d6d06e5c4b
SHA1 cfae5e38e2e010ce1b7da81c5691f460806a343a
SHA512 8af4352fc84c5c3eaf36f67b6f295a4bea7628e0b5a30f68a9cea48728b4da41a24eac681a7d80f1ed6a0a255f27406750fb82594b48c0edcb4cf031d0b904ea
SSDEEP 192:XRyuLzwXcHhv7rrpkPRpif3sqd95Hsb+WNLRmsu6ILaWZW3/8jD239XfaQcwzVyr:XRyYM8xr0XSrw/oB68f239vadwVe
TLSH
T10C62D72EA814697B9CDFD229F9117717E3FA243525D02D44EBFC892C15EB6CC221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 493780924af823aa8a11688bb5bf29c437780a361241394c57cbc52197dc3fff
MD5 004d98af19e8ad346c8965c908b72b3f
SHA1 a1aca1a100a3428aa566962ec093ed0c11bb3ad3
SHA512 1a35ed7131f1bb108e0be72ce8cb99c6f448028353b444e0da52b05ae533af258aae94695b2f11a91bd0d2fcf6210ac5acc716785b99739c14a9a0cd730e80cb
SSDEEP 192:XRyuLzwXcHqv7rrpAPRp2f6qE95Hsb+WNUt6ILaWZWmM22D239XfaQc6zVyIsnAq:XRyYM8mrUXvrwGBg2U239vad6Ve
TLSH
T18152D62EB814797B5CDBD229FD267717E3FA242125902E84EBFC892C15EB5CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 2793143d95f6136f612cece0f56788c99be6273d7dd8d087e0e911f762a0e345
MD5 f2e0e47f0d0e4b28c4d0effca1d35d0f
SHA1 8c728a36b2a3a7ed5bacf0061e30a88ddad1cab0
SHA512 7a2aee94cbaa62dfb37ff4af7f7064e27bf4b795ee0251f6c750340ca835957f2afa91b4bcb06973f4624ba228f432327a57135d9ca79b09577f10573c9ee822
SSDEEP 192:cRCcBzuLzwXcF4Sv7rrwkPRpifnZsJrd95Hsb+WNLRmsu2WkaWZW/Hem+2+D2399:cRCmzYMq4+rdXDrw/OO6a28239vadwwe
TLSH
T1EC62D82EA42469775DDFD229F911B71BE3FA142215901E84EBFCC92C15EB6CC220785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3f866fb3db6535db605e516a5b6c220b069eb354f7963fb38c762e8e05d88cc4
MD5 68879ac85a9296e2ee1520deb06cb3ab
SHA1 0d990611620f81f9644c5061130d722f8754ed0a
SHA512 8f23e4ff00cfaf03da89fb7665953349c1231c043423e4faa2efbaac2482ac4749187c017be4e8bfceb75285297d643fabd4f8c711a53763692297107b42080f
SSDEEP 192:XRyuLzwXcIAv7hpAPRp2W95Hsb+WNn6I0WD239XfaQcazVyIsnAUgtaJ:XRyYMrc9UXtrwV00239vadaV8
TLSH
T1E842F82EB914747B5CCBC229FD667717D7FA142125A02E84EBFC892C19EB5CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e284ac930c69b72c7f915fd7250890d1935d48be9b73158fe9553bfab5b5882e
MD5 5b361b1ef51245a55cc4cbc8c09b44a5
SHA1 41164863f9ac2192d1a2d62ec861912743ae0910
SHA512 1d546fc8834861dd78db7faa438e80d2c570b7bbc0249cc98f5ceec08e2633d57bf30f0f47bdfe1cac2e8cbc964f0681707f37351fa8402ddf1d6343bb29db99
SSDEEP 192:XRyuLzwXcH0v7rrpkPRpif3sqd95Hsb+WNLRmsu6ILaWZWakoqD239XfaQcwzVyr:XRyYM8wr0XSrw/oBwo4239vadwVe
TLSH
T13F62D82EB814697B9CDBD229F9157717D3FA243225D02D84EBFC892C15EB6CC221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 8ce9662b9637a3d76bf3421e0d90de4dcc66bf4e3712d70938c2a82cec0fc3c5
MD5 e32c5c67c8effc738cfcb226a9605a1b
SHA1 1017e369b16ecf11bec0aefeefc576ced56e6db8
SHA512 24b814c485a7c13b18c9005e78c24ea793e3164a21bab814834d0bbec4fd3f523ef4b1cae24a810416d9315c81f9d1790d840b96418fe1b7f574b50cbbb2f615
SSDEEP 192:cRCcBzuLGwXcFqv7rrwkPRpifnZsJrZ95Hsb+WNLRmsu2WkaWZWY/4m+2ED239Xt:cRCmzYzqmrdXfrw/OOJw2q239vadwwe
TLSH
T1DE62C82EA424697B5DDFD229F911B71BD3FA142216901E84EFFC892C15EB6CC321781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 2d136f6994322a251c1b58652d3173e64a38fa10c2772c412b62686feaea6912
MD5 25785a33c1aabe911541d9d7a426532a
SHA1 9857ce53ee306b966c6e2b49baf867cc671c9f8d
SHA512 c5445b1dab7251501c1c5d881017fb05097d6284e4f6e94e87c913ec1a9e413b8ecda1dfc74cbb9f4fe3c8b54428b6ff18d509b9d373982086fe5d7336ddc6c8
SSDEEP 192:cRCcBzA8SjLGwXcF6v7rrwkPRpifnZsJrq95Hsb+WNLRmsu2WkaWZWHdYm+2zD2n:cRCmzANzqWrdXgrw/OOoQ2v239vadwwe
TLSH
T13E72D81EA42869778CDBD22DFA25BB27D3FA146216902D44EFFC891C05EB5DC321781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 a4f1aae8954f09ed99f45774461d2f8a2a8f784a2061c18c812ccbb648b947b7
MD5 eedabb4a8f14af0ba87a8e2a100b7882
SHA1 60118980a3ecbc7489fe8acc15df3234220dc117
SHA512 6d79a7265d6c1c97f96cccad946fbaeac1a60e280449d1e15cee3ba17641b4d3d88c0b8ed76a6bee25b839d6f54edd52dd70ef76509018c7a5e4fff8ac412ba8
SSDEEP 192:cRCcBzW8SjLGwXcFqv7rrwkPRpifnZsJr295Hsb+WNLRmsu2WkaWZWB9im+2BD2n:cRCmzWNzqmrdXUrw/OO++29239vadwwe
TLSH
T18272D82EA42469779CDBD229F925BB27D3FA146216901D44EFFCC91C05E76DC320781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 4e28371fcdc968a203da6577333b57e4694b00ff2eb1027f3aa4e1e5686468a4
MD5 3df4547543a96027460c851b77ab75bb
SHA1 144ed60ac35eebe2ec1653daa2af6021598c8ae0
SHA512 acc49048dc0905c929c300b72159d49a4e27962c8ee14630bb67560a3f77bbabfd40ebfd12c84d6f256e0a764e915e3428cc1df75a404439dd835de3484bc60c
SSDEEP 192:cRCcBzuLGwXcF4Sv7rrwkPRpifnZsJrd95Hsb+WNLRmsu2WkaWZWTYGm+2nD2399:cRCmzYzq4+rdXDrw/OOhC2D239vadwwe
TLSH
T18262C72EB824697B5CDFD229F911B71BD3FA142216901D84EFFC892C15EB6CC221785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b0377d479289d46b682ca757731c215af3d9c1ca8bf3fdca464c7a3892352a72
MD5 1121439f722f550e1eb863af9079319e
SHA1 4b9afb9128e9cc3fbf6f6e1f3c419314f5e731cb
SHA512 c1a9172c3db9f991e62ce6581ea646a1e2c4447795b955838fe67a559e49cc812bfa8db9a90829f1721a7377347e55df251d2049487ea7657a1945058f5d7635
SSDEEP 192:XRyuLzwXcHAv7hpAPRp2ks95Hsb+WNn6ILaWZ22D239XfaQcazVyIsnAUgtaJ:XRyYM8c9UXWrwVB2U239vadaV8
TLSH
T16242F82EB914787B5CCBD229FD267717D7FA142125A02E84EBFC892C19EB5CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1ed20b85c91591d4c732ac4b72adf5a5dd70320891dc5c7b7c0e05563719b373
MD5 79202a253a62d561b548b4ebbd508a85
SHA1 a2f483a12238f3b550de258ab772c039df0f9a29
SHA512 98ded0f6011542183694732b34943e5988e7cd0ff34487c34c53d9469f131da3ea047745f5395cbe6bc14e958342a6b3a8f48783837a6fa4cb100dc9b7b1f35b
SSDEEP 192:XRyuLzwXcHqv7hpAPRp2kZ95Hsb+WNn6ILaWZ2aD239XfaQc6zVyIsnAUgraJ:XRyYM8m9UXbrwVB2o239vad6Ve
TLSH
T18952F82EB914787B5CCBD229FD267717E3FA142125A02E84EBFC892C15EB5CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 edf3c245d5be1feba86a85741f672344c98e0735662536ebb7398a35a287aae9
MD5 184165bba4df7f60f60dbb93a51cba83
SHA1 a58f5230ff2d113c8ec1f97bd75e692da5d40f6f
SHA512 4ed04f3fa32455f4c96e6ef4857ced2e5c648792d8d73825e3dcee1d0c7926842ebc419e4f3cc5bd183447fdc9f10e6137d5e4dfc7d1f7c5fd548335eea4b898
TLSH
T14BD097ABE49000B2CAB606830D61102F43313C8C0482914DE203312C2071A52C116F52
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 f6ad4d2bd54512075267db779a37e5767b25ddb495154cdf66d1ba5fbf718691
MD5 2405cdd8caa17b614023f8b7cccdf72c
SHA1 93673bd7f848aad6009484052e71ea67d7f5a49e
SHA512 6d885acdbe99441603e2d248231a9c3626c01c84b3f39349ef33a8efb4a098b799d0a2967d663a7c803b222572d09808376a2961e2a1e55622c528b64db714cf
TLSH
T1D4D097ABF09041A2C9BA8B820D51102F43353C880086914DE20310289561A62D002F52
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59f7f3.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe59f7f3.TMP
Size 138B
SHA256 fba9fcc38733f87b9a4dd2733e10684e6485643ad3d6ca73a8fd07c6016bb406
MD5 16f1c4b5d61033675fbfb6f090c036cb
SHA1 c7883072b94806b888dc3d3efc9e2d7ab86850ce
SHA512 25ccbb160a801ae64788aaec7f6c8a7f87cbe0a5ac9e3126bac32a270b8c15658ba0ba2ec016d93ad139332576c34835e5528052718b1da1b80ecb4568944a8b
TLSH
T198C08C7BA40000358A3002420622011D83093C8C48C28689E10330A82071E22A109EA1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b86f1d5999e056d8d4904b6077ccb39ab5068812df0d6f59bbc065ff39f2ee39
MD5 e0088b8b6532c60ef68f657a0bd15432
SHA1 b416a94d7cca5dd9c88bd52f77a37f69ec3dfad0
SHA512 6ab2868dc1cf6a2cc16ce9621ca1f972dfc629c2acdd7b45f2a55a956f600552c8a8f91cd97c4d9b3c01a326dde5e22fe3351d9917db685cc729cfd8798981ff
TLSH
T10EB01240C1025111C08303F815526CD8B118AF10D60A270143E46AA3D835650A525250
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bcb4.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bcb4.TMP
Size 96B
SHA256 6bd1b601a2fffa63175ca49b9b7e03fcbfb0eb55590d47cf3d108f3af48131cb
MD5 3d5b13f6ddda58ef0ca4bf0fc032b04b
SHA1 5ece018ed342909b870d4f90ce0620d71c6cbc97
SHA512 a6b83e351d044a0517ba629b2a24a61de5bbe78e15721c0e7bb554944b4c77e943f30050e926ae6cb428427e0e829b924be79bb60bfc7c2a3b9f42b52f708be7
TLSH
T1C2B02208C20A2302C00A03F22EAB88FC3020CF22C203022A82E00BA3CC20232C220830
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 f35ee743cd6bf3c8aa31cdcf855a5e4754aa8d85a268c907996a713ac2d91004
MD5 878ee72e2aa8f8534c303100e0c33e59
SHA1 76043bf933bff30d959d71001319104e49fb7435
SHA512 64d73ae6aea140c59be04dec46aaccb1a98028c3b0d465ff5e30420cc724950a7edd0d605ae4b420e0ae608055cd4d04c4694d84399f74beb50d045c467d46f0
TLSH
T1BFB02200C002E082E80E03B0E8C2088032B80CA20383002002E000A8EC00300AA22002
MD5 SHA1 SHA512 TLSH

Submit Download

.usage

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\FileSystem\t\.usage
Size 24B
SHA256 fac0a85e4f5907c8036b0052214b777ddbacea9420e5903526272dc76bd4c7b6
MD5 e1edf83f1dbe0a1640e5800ef2f44b90
SHA1 58e8f31a1282e84a05c6960d6ab461d6ccef42cc
SHA512 151b19bcb34d72c304d02f2830f577036c5d2156499cb998643a87a3010544e5a4c236f8458786ea4b3416aaa4fd1ea96fc3bfe1ab0c5baebeac29e5427ca417
MD5 SHA1 SHA512

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\FileSystem\t\00\00000000
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 d92eba2973ec7538baa3b0b515396835780a7573cf5ddcaca61646780e561f46
MD5 cd50be846dd658b9b188056b9973079a
SHA1 2032c8b395a7a481e6810c5a1b3ac7c7e25b9c8f
SHA512 530ad68e6c43eb9d1a05b0f7ab261ae9858d213e92e59007c2890cfbd8d0dbd08375408c193ba9be376911fed6514ac4a83622fb5ce56c782710180e5d92a7d6
SSDEEP 6144:ya5PoycD6S3l/31Xksp91xKqZ/ZLW3Exq:dhoy5s1Xke1QqZ/piQq
TLSH
T1C93422327BE55F374F47CB64902B1D0A89B7808A8834F21DAFBA7FDB64834D116135A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 228c4e14fdd4e95a2e8fae38c3b0729040e8952133164f29d2317acefa431cdd
MD5 02509385d348b79116d5fb323f592e1f
SHA1 a3b35a3c2d392ae7f5fb96732fd5dfe56f25bae0
SHA512 84cb6a9dac55bc2b9872c34a99b37244162bfaaaf739968900c05131ef532ca37cd7bb495d3c867c265873ada8677998fdbd062436c24bc0170bbc64ef592b69
SSDEEP 6144:9a5PoycD6S3l/31Xksp91xKqZ/ZLW3Exq:khoy5s1Xke1QqZ/piQq
TLSH
T1E73422327BE55F374F47CB64902B1D0A89B7808A8834F21DAFBABFDB64834D116135A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 e78456d567f9c919e78ac10b4cc1950fc5b3a9f52aeec2ecd008b3ecec0fd8ca
MD5 a39352bb2094aee81bb91e50adf49be3
SHA1 591eb7418059e4842c1793b465c568b5b3d8d727
SHA512 a8876bb68d50c9e34352aff8d6c6d702f4cb94523eecea1f87a5fcc00165caca135bf81bf308a47738850fea5cf2d7acd208ed027f51e9afbbc83ce9eadba322
SSDEEP 1536:6KyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Jqfd7NtZL8cHQRZEQ6Sps9
TLSH
T12EC30237EBC21E335D82CB647A534FDA97B644A99030D301AABD3BFB6C93491644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 1f00cd0b8dd15a183c6229ae270caf4b87538def13fbf15297d772233d69b9c0
MD5 d6d4eebd51d943bfcdf9c34d84014645
SHA1 f5224f77803fc10cda275505d32245bb85c62773
SHA512 18780e27a74f7027e080be97b009968810a38530badf39bd2cc71ab17863b4371af9905847e433114b34a777b90ee01f72a1aac3156b7202ec9b80be152fc649
SSDEEP 3072:dU5PoycZ4g6S3l7D31LSMkdhnMCO131x8LTqfd7NtZL8cHQRZEQ6Spsq:q5PoycD6S3l/31Xksp91xKqZ/ZLW3Exq
TLSH
T10F3423327BE55F3B4F47C774906B0C4B86B784858434E229AFFA6FEB64838D116131A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 6a175ecd0e6be68aaf727f625ab947bbd8f4205dcb706f8c575e37389e5fd8a4
MD5 aa7d95e4a048b7e765c58b1a2372d4ae
SHA1 2046d760403e428365404f7bbe8ddcdcbce3bd71
SHA512 ef9f91e720204fc3e1bcb4b6802d7fe020fc1c4bba976a12e5c8fdfc843555cb6c7d618a60e4ddcfb497fe02a4dbbe211b70160e8f990dd760710e8b6977a7d3
SSDEEP 6144:6a5PoycD6S3l/31Xksp91xKqZ/ZLW3Exq:Fhoy5s1Xke1QqZ/piQq
TLSH
T1183422327BE55F374F47CB64902B1D0A89B7808A8834F21DAFBABFDB64834D116135A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 9665740b60fc4a22439f5ab04fd9f4af3928465289e9f5f7e547dd108d65f559
MD5 f75bf4248d247a68772488bc7109c0b8
SHA1 425ea2c3b4ef1829184d42e30d21473345c58123
SHA512 b063c90f7689b8563d962874cba8cdb8951e3c9617d221b4d25859ed56eebd35d541f46b180ecd80e5e7ad977608aba0ecf610aa44d4f501761ee946e35a1984
SSDEEP 3072:2U5PoycZ4g6S3l7D31LSMkdhnMCO131x8LTqfd7NtZL8cHQRZEQ6Spsq:l5PoycD6S3l/31Xksp91xKqZ/ZLW3Exq
TLSH
T1033413327BE55F3B4F47CB74906B0C4B86B784858434E229AFFA6FEB64838D116131A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 fd47aed0556991bb70f33a42b2d078d962ae87b870d0cbb5e095067cb131b4ac
MD5 364c4cc95d8b5c89979a414af35eac1a
SHA1 be56492999595801d1bd489b89f09459e44498dd
SHA512 23d36c3839143f3ea4c4964e3bac42d30d1adc8eaf3305fc7505001218ab4d71c5976e3bf419527fa716493bc1f11eac4e05f332ac64c992cc6bef4a8e54991f
SSDEEP 6144:Xa5PoycD6S3l/31Xksp91xKqZ/ZLW3Exq:qhoy5s1Xke1QqZ/piQq
TLSH
T1F43423327BE55F374F47CB64902B1D0A89B7808A8834F21DAFBA7FDB64834D116135A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/4216-0-0x00007FF7BBCD0000-0x00007FF7BCF49000-memory.dmp

Download