hxxps://archive[.]org/download/people[.]-playground/People[.]Playground[.]rar

Analysis

user interaction
yes
max time kernel
498s
max time network
500s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
06/09/2026, 22:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://archive.org/download/people.-playground/People.Playground.rar
Sample260906-2vm6eshp2v

Score

7^/10

discovery motw persistence phishing privilege_escalation ransomware upx

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000\Control Panel\International\Geo\Nation	winrar-x64-713.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000\Control Panel\International\Geo\Nation	WinRAR.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 6 IoCs

pid	Process
7664	winrar-x64-713.exe
3828	uninstall.exe
5776	WinRAR.exe
5192	People Playground.exe
3608	UnityCrashHandler64.exe
7256	UnityCrashHandler64.exe

Loads dropped DLL 3 IoCs

pid	Process
5192	People Playground.exe
5192	People Playground.exe
5192	People Playground.exe

Modifies system executable filetype association 2 TTPs 8 IoCs

persistence

Modify Registry

T1112

Change Default File Association

T1546.001

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32\ = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR\ = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\	uninstall.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
587	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	1296	chrome.exe

Drops file in System32 directory 12 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\exe\WindowsPlayer_x64_Master_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\UnityPlayer_Win32_x64_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\symbols\dll\UnityPlayer_Win32_x64_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\symbols\exe\WindowsPlayer_x64_Master_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\dll\UnityPlayer_Win32_x64_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\system32\WindowsPlayer_x64_Master_mono.pdb	People Playground.exe

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/5192-2641-0x00007FFFB1940000-0x00007FFFB268D000-memory.dmp	upx
behavioral1/memory/5192-2644-0x00007FFFB1940000-0x00007FFFB268D000-memory.dmp	upx
behavioral1/memory/5192-2681-0x00007FFFB1940000-0x00007FFFB268D000-memory.dmp	upx
behavioral1/memory/5192-2689-0x00007FFFB1940000-0x00007FFFB268D000-memory.dmp	upx

Drops file in Program Files directory 60 IoCs

description	ioc	Process
File created	C:\Program Files\WinRAR\__tmp_rar_sfx_access_check_241080625	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\ReadMe.txt	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\RarExt.dll	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Resources.pri	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\WinRAR.chm	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Rar.exe	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Zip.SFX	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\RarExtLogo.altform-unplated_targetsize-32.png	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\RarExtLogo.altform-unplated_targetsize-64.png	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\WinRAR.chm	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\RarFiles.lst	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\UnRAR.exe	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\7zxa.dll	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\7zxa.dll	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\WinCon32.SFX	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Descript.ion	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Descript.ion	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Order.htm	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\WinCon.SFX	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\RarExtLogo.altform-unplated_targetsize-64.png	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\WhatsNew.txt	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Uninstall.lst	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\RarExtInstaller.exe	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\RarExt32.dll	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Default32.SFX	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\WinCon32.SFX	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Order.htm	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\RarExt32.dll	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\UnRAR.exe	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Zip32.SFX	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\License.txt	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Resources.pri	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Default32.SFX	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\RarExtLogo.altform-unplated_targetsize-48.png	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Zip.SFX	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\License.txt	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Rar.txt	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\WhatsNew.txt	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\RarExtInstaller.exe	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\RarExt.dll	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Default.SFX	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\WinCon.SFX	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\RarExtLogo.altform-unplated_targetsize-48.png	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\ReadMe.txt	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\WinRAR.exe	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Default.SFX	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Uninstall.exe	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Rar.txt	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\RarFiles.lst	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Uninstall.lst	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\Rar.exe	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\WinRAR.exe	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\RarExtPackage.msix	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Uninstall.exe	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\RarExtPackage.msix	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\RarExtLogo.altform-unplated_targetsize-32.png	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\rarnew.dat	uninstall.exe
File opened for modification	C:\Program Files\WinRAR	winrar-x64-713.exe
File opened for modification	C:\Program Files\WinRAR\Zip32.SFX	winrar-x64-713.exe
File created	C:\Program Files\WinRAR\zipnew.dat	uninstall.exe

Drops file in Windows directory 12 IoCs

description	ioc	Process
File opened for modification	C:\Windows\symbols\dll\ntdll.pdb	People Playground.exe
File opened for modification	C:\Windows\symbols\dll\UnityPlayer_Win32_x64_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\WindowsPlayer_x64_Master_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\kernel32.pdb	People Playground.exe
File opened for modification	C:\Windows\ntdll.pdb	People Playground.exe
File opened for modification	C:\Windows\UnityPlayer_Win32_x64_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\dll\UnityPlayer_Win32_x64_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\exe\WindowsPlayer_x64_Master_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\symbols\exe\WindowsPlayer_x64_Master_mono.pdb	People Playground.exe
File opened for modification	C:\Windows\DLL\kernel32.pdb	People Playground.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	People Playground.exe
File opened for modification	C:\Windows\dll\ntdll.pdb	People Playground.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1296	chrome.exe
7984	chrome.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0	People Playground.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	People Playground.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	People Playground.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	People Playground.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332088895616149"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.taz\ = "WinRAR"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.txz	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.zipx\ = "WinRAR"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\ = "WinRAR archive"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.ZIP\DefaultIcon	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.bz2	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\WinRAR32\ = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinRAR\ = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR\ = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.z\ = "WinRAR"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.ZIP\shell	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.REV\shell\open\command	uninstall.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1741132852-2793423776-1557670484-1000\{766EB6A6-B5F3-418B-9160-BAF95C6156D6}	chrome.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.ZIP\shellex\DropHandler\ = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\shellex\ContextMenuHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.ZIP\shellex\ContextMenuHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.zip\ShellNew	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.tlz\ = "WinRAR"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.lzh	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.txz\ = "WinRAR"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.REV\DefaultIcon\ = "C:\\Program Files\\WinRAR\\WinRAR.exe,1"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.ZIP\shellex\DropHandler	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.7z	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.ZIP\shell\open\command	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rev	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.REV\ = "RAR recovery volume"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.lha\ = "WinRAR"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\WinRAR32\ = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinRAR32\ = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B41DB860-64E4-11D2-9906-E49FADC173CA}\InProcServer32	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.lz\ = "WinRAR"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B41DB860-64E4-11D2-9906-E49FADC173CA}\ = "WinRAR"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.uu	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\shell\open\command	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.REV\DefaultIcon	uninstall.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\InProcServer32\ThreadingModel = "Apartment"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\DragDropHandlers\WinRAR32	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.cab\ = "WinRAR"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.lz	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\shell\open	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\shellex\DropHandler	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32\ = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.zst	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\DragDropHandlers\WinRAR32\ = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.zip\ = "WinRAR.ZIP"	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.uue\ = "WinRAR"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.REV	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\shellex	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\DragDropHandlers\WinRAR\ = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.zipx	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR\shellex\PropertySheetHandlers	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}	uninstall.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B41DB860-64E4-11D2-9906-E49FADC173CA}	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\	uninstall.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.arj\ = "WinRAR"	uninstall.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
5916	chrome.exe
5916	chrome.exe
4776	chrome.exe
4776	chrome.exe
5192	People Playground.exe
5192	People Playground.exe
4776	chrome.exe
4776	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5776	WinRAR.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe
Token: SeShutdownPrivilege	4784	chrome.exe
Token: SeCreatePagefilePrivilege	4784	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4784	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe
4776	chrome.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
7664	winrar-x64-713.exe
7664	winrar-x64-713.exe
5192	People Playground.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4784 wrote to memory of 1156	4784	chrome.exe	83
PID 4784 wrote to memory of 2320	4784	chrome.exe	84
PID 4784 wrote to memory of 2320	4784	chrome.exe	84
PID 4784 wrote to memory of 1296	4784	chrome.exe	85
PID 4784 wrote to memory of 4204	4784	chrome.exe	86
PID 4784 wrote to memory of 4204	4784	chrome.exe	86
PID 4784 wrote to memory of 4948	4784	chrome.exe	87
PID 4784 wrote to memory of 3896	4784	chrome.exe	88
PID 4784 wrote to memory of 4948	4784	chrome.exe	87
PID 4784 wrote to memory of 3896	4784	chrome.exe	88
PID 4784 wrote to memory of 3892	4784	chrome.exe	89
PID 4784 wrote to memory of 3892	4784	chrome.exe	89
PID 4784 wrote to memory of 2300	4784	chrome.exe	91
PID 4784 wrote to memory of 2300	4784	chrome.exe	91
PID 4784 wrote to memory of 4940	4784	chrome.exe	92
PID 4784 wrote to memory of 4940	4784	chrome.exe	92
PID 4784 wrote to memory of 2156	4784	chrome.exe	93
PID 4784 wrote to memory of 3832	4784	chrome.exe	98
PID 4784 wrote to memory of 3832	4784	chrome.exe	98
PID 4784 wrote to memory of 3884	4784	chrome.exe	101
PID 4784 wrote to memory of 3884	4784	chrome.exe	101
PID 4784 wrote to memory of 2440	4784	chrome.exe	105
PID 4784 wrote to memory of 2440	4784	chrome.exe	105
PID 4784 wrote to memory of 2360	4784	chrome.exe	107
PID 4784 wrote to memory of 4864	4784	chrome.exe	108
PID 4784 wrote to memory of 3152	4784	chrome.exe	109
PID 4784 wrote to memory of 4184	4784	chrome.exe	110
PID 4784 wrote to memory of 4184	4784	chrome.exe	110
PID 4784 wrote to memory of 3604	4784	chrome.exe	111
PID 4784 wrote to memory of 3604	4784	chrome.exe	111
PID 4784 wrote to memory of 4244	4784	chrome.exe	112
PID 4784 wrote to memory of 4408	4784	chrome.exe	113
PID 4784 wrote to memory of 4408	4784	chrome.exe	113
PID 4784 wrote to memory of 1256	4784	chrome.exe	114
PID 4784 wrote to memory of 1256	4784	chrome.exe	114
PID 4784 wrote to memory of 4560	4784	chrome.exe	115
PID 4784 wrote to memory of 4560	4784	chrome.exe	115
PID 4784 wrote to memory of 2996	4784	chrome.exe	116
PID 4784 wrote to memory of 2996	4784	chrome.exe	116
PID 4784 wrote to memory of 4272	4784	chrome.exe	117
PID 4784 wrote to memory of 4272	4784	chrome.exe	117
PID 4784 wrote to memory of 608	4784	chrome.exe	118
PID 4784 wrote to memory of 608	4784	chrome.exe	118
PID 4784 wrote to memory of 3960	4784	chrome.exe	119
PID 4784 wrote to memory of 3960	4784	chrome.exe	119
PID 4784 wrote to memory of 4768	4784	chrome.exe	120
PID 4784 wrote to memory of 4768	4784	chrome.exe	120
PID 4784 wrote to memory of 1276	4784	chrome.exe	121
PID 4784 wrote to memory of 1276	4784	chrome.exe	121
PID 4784 wrote to memory of 4864	4784	chrome.exe	122
PID 4784 wrote to memory of 4864	4784	chrome.exe	122
PID 4784 wrote to memory of 2140	4784	chrome.exe	123
PID 4784 wrote to memory of 2140	4784	chrome.exe	123
PID 4784 wrote to memory of 2180	4784	chrome.exe	124
PID 4784 wrote to memory of 2180	4784	chrome.exe	124
PID 4784 wrote to memory of 2244	4784	chrome.exe	125
PID 4784 wrote to memory of 2244	4784	chrome.exe	125
PID 4784 wrote to memory of 448	4784	chrome.exe	126
PID 4784 wrote to memory of 448	4784	chrome.exe	126
PID 4784 wrote to memory of 3884	4784	chrome.exe	127
PID 4784 wrote to memory of 3884	4784	chrome.exe	127
PID 4784 wrote to memory of 2656	4784	chrome.exe	128
PID 4784 wrote to memory of 2656	4784	chrome.exe	128
PID 4784 wrote to memory of 2980	4784	chrome.exe	129

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://archive.org/download/people.-playground/People.Playground.rar
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7fffcb6fc728,0x7fffcb6fc734,0x7fffcb6fc740
  2⤵
  PID:1156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,7000968524797056949,3223002435013039905,262144 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2012 /prefetch:2
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2260,i,3862080572347920347,116207078484871427,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  - System Time Discovery
  PID:1296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,17103719671993870223,15666809474428754609,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,9423803960678046769,14963442283956468816,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,7797604716813415966,12038218619335297875,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4380,i,12594277997889840474,17554787413153745740,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4420 /prefetch:2
  2⤵
  PID:3892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4760,i,18401966605431885637,3403623184085098193,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4800,i,17256076957224375030,8010665811510984500,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5976,i,6245203751713003047,775568688030668563,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5384,i,11538666750860487731,7041744174273775634,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4808,i,610874767417110999,10326047588740290777,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4844,i,18226486507100372714,1313499901931086244,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=500,i,10368105262050042379,8827645869737048809,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:8
  2⤵
  PID:2360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4552,i,12685854637498097655,9101069080633993297,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3900 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3912,i,7841895584478680017,3012661654270762969,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3436 /prefetch:8
  2⤵
  PID:3152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3464,i,9088942669679518727,565598732140662201,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4380 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4384,i,4957881684413708160,5923044125404884895,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4844,i,13242303771202873512,4472115810029096189,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5140,i,1896010007822800811,4706484538403622084,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3292,i,478531176312414788,3617524942563620406,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=500,i,2557597569829008520,10615632983322350421,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6460,i,12932735929851998308,14627797751031718907,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3268,i,2446484857782447661,3472398621469726889,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3236,i,8834234436015882821,16006572845334725661,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6300 /prefetch:1
  2⤵
  PID:608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6004,i,7225439042925750893,9480952874294685779,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6220 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=4580,i,10693666239744590746,2589234850429363014,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=4472,i,4513735405072663442,13005637004172802868,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6180,i,3931356145457468979,3822241546499026752,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6368 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6424,i,14451472731674507109,5428143503510682646,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6508,i,12742374344187065987,15264959673203477264,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6648,i,18023209397209246369,11878441685739035377,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6832,i,5861317404076443390,16672445551471729924,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4592 /prefetch:1
  2⤵
  PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6956,i,1626334597080947831,6623787205878414815,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6960 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7156,i,1998345963155281775,9853072827918622080,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6944 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=4420,i,5722018625076577146,11851489294833942535,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6340,i,1583039454609732452,5218143132377481094,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6220 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7328,i,10696669629183817309,179331925413471559,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7296 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7360,i,3318536173602795641,10759633194741830304,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7372 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=7524,i,15034006363526684257,11435065968128205655,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7520 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=7560,i,6921196507564225446,10495224417608401600,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7680 /prefetch:1
  2⤵
  PID:564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=7964,i,12215280280450828268,14382968696653177744,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7928 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=7996,i,2021133783676368369,15247234375469485320,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8140 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=8260,i,2224210307334289851,3838165977713358298,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8268 /prefetch:1
  2⤵
  PID:184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=8476,i,237790293440743753,6974069095800389179,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8424 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=8580,i,12699814256495712539,8011802364524104833,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8596 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=8644,i,2005879067499598029,17093450216965210331,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8732 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=8872,i,6226822122983620858,13253260148716849512,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8876 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=8932,i,12784553226742197722,15579957032742049968,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9172 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=8960,i,9815247509401775767,10849216862227672022,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9212 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=8972,i,458627386203302591,11518568777481482364,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9240 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=8992,i,6422992198586056621,11048613630049995621,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9260 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=9032,i,1014818711823215302,14542598658280190303,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9300 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=9012,i,14126801443324810779,12355193233471349699,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9280 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=9052,i,4708232856996233320,9248454640631283150,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9320 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=9072,i,10807889095401245190,15648398720625858372,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9424 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=8644,i,5993520319367974143,15134779160580895656,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9412 /prefetch:1
  2⤵
  PID:5560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10288,i,9148114480208535854,16762059566183452204,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10304 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=10436,i,10211558331748670598,602391941184804532,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10452 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=10500,i,11889641631313763216,5808171702932134093,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10516 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=10648,i,3418006694263949943,9383963773762746829,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10664 /prefetch:1
  2⤵
  PID:5592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=10800,i,4535022732021400467,11117460883334936434,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10804 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=11028,i,12965777464510067996,10272071506642957064,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11040 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=11092,i,4524291635104368624,14054138993461417247,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11100 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=11240,i,4227280139057869448,2649271568396529671,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11252 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=11504,i,13128198617568450184,17046902367872816838,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9012 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=11800,i,14179379169149103736,5485406945798504070,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11240 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=11808,i,746713766490644003,11611243187802372071,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11648 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=11708,i,14910340839056187711,16082623325425498475,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11992 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=11728,i,7944958842670287845,14833955843719487519,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11740 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=12124,i,206072310291510852,10323810092225546054,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12140 /prefetch:1
  2⤵
  PID:6092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=12280,i,4468194776234580623,6531637781603373161,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12284 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=12424,i,11610821409247071847,2593908435059095893,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12428 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=11488,i,5027139906258090708,15652736727502869975,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12256 /prefetch:1
  2⤵
  PID:6388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=12820,i,3765370054277873856,225977304953313551,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12620 /prefetch:1
  2⤵
  PID:6396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=12680,i,16391488858298226901,11032853121473075035,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12672 /prefetch:1
  2⤵
  PID:6404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=12608,i,17508827354925566908,9111895870576817481,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13000 /prefetch:1
  2⤵
  PID:6412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=13144,i,4825492899381367278,2736036244689133926,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13140 /prefetch:1
  2⤵
  PID:6420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=13288,i,44902866462435698,18120871817649961386,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13296 /prefetch:1
  2⤵
  PID:6428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=13516,i,14867043303037843625,9196407924021084160,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13528 /prefetch:1
  2⤵
  PID:6436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=13660,i,7560549302400109262,15021772758823565559,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13656 /prefetch:1
  2⤵
  PID:6444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=13848,i,3756367770084679277,13252113161153363324,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13868 /prefetch:1
  2⤵
  PID:6528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=12756,i,273799402866267694,534927982057336258,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:6668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=13948,i,18239391469257884937,4635328479506624837,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10692 /prefetch:1
  2⤵
  PID:6824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=11500,i,12804032561247879440,8528047416706900427,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7496 /prefetch:1
  2⤵
  PID:6884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=6488,i,12040850292985817743,5467763481840400409,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6820 /prefetch:1
  2⤵
  PID:6936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=9608,i,2390770418175263456,17248746492664880968,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9224 /prefetch:1
  2⤵
  PID:6648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=13676,i,16127060179406079701,564937489677421041,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13788 /prefetch:1
  2⤵
  PID:6964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=9616,i,12900421296935648763,8858669225060519507,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12628 /prefetch:1
  2⤵
  PID:7108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=10004,i,14365549513487896546,15019283857645917404,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9384 /prefetch:1
  2⤵
  PID:7100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=8436,i,14409529823406243059,18086235663506870635,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:6392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=8556,i,6517262524927534735,16999956026489723300,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8424 /prefetch:1
  2⤵
  PID:6996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=9100,i,5703093305024617518,593996228299502623,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8512 /prefetch:1
  2⤵
  PID:6924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=11128,i,14594579776739764861,15531575556285539,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8540 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=7232,i,6158571035497287743,12556457695815948448,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11108 /prefetch:1
  2⤵
  PID:6448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=8536,i,6068803778074628505,9041178508011400779,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12856 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=11724,i,12539785325919545057,8910084357962390749,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10748 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=8904,i,17172831093264220595,181064561371420129,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9540 /prefetch:1
  2⤵
  PID:6476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=10016,i,5630611865893445901,2943110081729644579,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12924 /prefetch:1
  2⤵
  PID:6524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=12912,i,2528872803210773806,244684041250699443,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:6408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=11004,i,5878675868258282668,11762617354223061432,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13236 /prefetch:1
  2⤵
  PID:6424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=13268,i,17749889106434101153,972648551535225167,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13256 /prefetch:1
  2⤵
  PID:6416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=8764,i,17852022615575031471,9271357804516599032,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8740 /prefetch:1
  2⤵
  PID:6432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=12564,i,6124221797585222102,15675906615294256722,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13092 /prefetch:1
  2⤵
  PID:6428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=14128,i,8270331598448366668,7376423138708002757,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13048 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=13052,i,14920129025695334632,13028546452704567496,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13000 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=13184,i,9475088440879347599,14151931277423956028,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9008 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=12420,i,5931931641322938578,11635195063108726623,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11228 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=5148,i,10560555581262749836,2480910209244767644,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=6236,i,15249259084111281438,18240949832178720309,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7392 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=13700,i,15301708141505633137,1685055809436336805,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12588 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=14436,i,13924843309735642479,5869084264660060976,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14448 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=14608,i,15722699279379945421,431318063538562890,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14492 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=14756,i,11467803209405112884,1990780536829169931,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14636 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=14892,i,10573772708134749189,5866862811578140859,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14896 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=9004,i,13247335729881608593,5469809734249882709,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11028 /prefetch:1
  2⤵
  PID:7764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=10248,i,186615706036109000,3169351866002199535,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11664 /prefetch:1
  2⤵
  PID:7776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=8532,i,14939771011319271644,9606828682051097014,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10448 /prefetch:1
  2⤵
  PID:7876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=8772,i,3990766063769797198,11157822324809510400,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9592 /prefetch:1
  2⤵
  PID:7884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=14704,i,14904267373447950769,772721671853364427,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14664 /prefetch:1
  2⤵
  PID:7512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=13096,i,3997327008827006963,8606955092941926923,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14212 /prefetch:1
  2⤵
  PID:7680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --metrics-shmem-handle=14448,i,12941050410094937294,698063772907826048,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14432 /prefetch:1
  2⤵
  PID:7996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --metrics-shmem-handle=7928,i,17147354494076356352,871426117512244545,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7704 /prefetch:1
  2⤵
  PID:7644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=11588,i,17255882762203648684,4398435533951150741,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13764 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=14004,i,13003323421354895192,11478635580826628187,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12556 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --metrics-shmem-handle=10440,i,15019199548580239780,6544737297354402543,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7912 /prefetch:1
  2⤵
  PID:7700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --metrics-shmem-handle=10072,i,11673234497113950069,276459527190721881,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10120 /prefetch:1
  2⤵
  PID:7708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --metrics-shmem-handle=14388,i,16352331999490301831,13036069342466791929,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14372 /prefetch:1
  2⤵
  PID:6604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --metrics-shmem-handle=13420,i,17527454100540998225,15305879942023761593,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --metrics-shmem-handle=7272,i,17259528030677094087,13954460538985398435,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --metrics-shmem-handle=13300,i,17475006592761320022,17375536909929708019,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:7572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --metrics-shmem-handle=11676,i,14106849098664690456,7728510002356732222,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12760 /prefetch:1
  2⤵
  PID:7504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=8372,i,5060933815394958901,9321207072848212728,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9008 /prefetch:1
  2⤵
  PID:6264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=10988,i,3967370991110647359,17490768222921787562,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10964 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=11940,i,410731090771701472,6552297284969108618,262144 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11456 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --metrics-shmem-handle=13400,i,2766284620631212291,6494605887215437534,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13092 /prefetch:1
  2⤵
  PID:5816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --metrics-shmem-handle=11256,i,1422468041096970839,12848146357169663561,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11340 /prefetch:1
  2⤵
  PID:5788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --metrics-shmem-handle=14428,i,10135172783993413845,4494676858613703598,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10980 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --metrics-shmem-handle=7212,i,6185389454627918505,5178224708301080083,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12108 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --metrics-shmem-handle=12524,i,2474418822017390319,18062854009858142340,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7132 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --metrics-shmem-handle=10896,i,8501683800994563121,13796270391535672321,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8480 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --metrics-shmem-handle=13260,i,17766418818491593060,7910851374850402180,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13148 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --metrics-shmem-handle=12932,i,9196249052132049165,4324123769748080676,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12220 /prefetch:1
  2⤵
  PID:3892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --metrics-shmem-handle=12792,i,2436580589888693346,1022387343072524865,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12864 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --metrics-shmem-handle=11712,i,10254170036929738364,3805540713770334757,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9040 /prefetch:1
  2⤵
  PID:6348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=10864,i,9108200343017979242,12128751679151983145,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12236 /prefetch:8
  2⤵
  PID:6160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --metrics-shmem-handle=10236,i,15083803817019985623,16282670990356126247,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12208 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --metrics-shmem-handle=7684,i,18323136342460572879,15710152572892660683,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11808 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --metrics-shmem-handle=11348,i,13358301437422170050,13903071467585178926,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1260 /prefetch:1
  2⤵
  PID:6536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --metrics-shmem-handle=9776,i,3433044987984436034,400032649784472273,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9816 /prefetch:1
  2⤵
  PID:6792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --metrics-shmem-handle=13492,i,11904522561210602587,16340546437484151580,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7392 /prefetch:1
  2⤵
  PID:6764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --metrics-shmem-handle=9540,i,3245291308665859729,14175365240871062964,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12480 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --metrics-shmem-handle=12112,i,2953980303744124878,5446604667715380876,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8052 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --metrics-shmem-handle=8764,i,6612459002695027343,4780834385742233188,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14184 /prefetch:1
  2⤵
  PID:7412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --metrics-shmem-handle=12536,i,16231820032190033287,4919351124302211367,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10224 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --metrics-shmem-handle=7684,i,5851659145568770802,9235973967369712548,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14216 /prefetch:1
  2⤵
  PID:7204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --metrics-shmem-handle=7100,i,15344208518956129661,18017282414882895694,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15112 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --metrics-shmem-handle=9520,i,5882349091896663538,17455561728348429273,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12184 /prefetch:1
  2⤵
  PID:6672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --metrics-shmem-handle=9944,i,17228340692942462830,18081699162297814706,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15224 /prefetch:1
  2⤵
  PID:7056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --metrics-shmem-handle=15264,i,10466009505554807170,2548769613191495175,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8772 /prefetch:1
  2⤵
  PID:6776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --metrics-shmem-handle=4000,i,13073309473695863582,610520797378638480,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12236 /prefetch:1
  2⤵
  PID:7684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --metrics-shmem-handle=9800,i,7887216368206239055,15342910741011611785,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7776 /prefetch:1
  2⤵
  PID:6336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --metrics-shmem-handle=4756,i,17832082022414246618,16575913152205972090,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10948 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --metrics-shmem-handle=7692,i,1395215076003663916,12810284017489860471,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8808 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --metrics-shmem-handle=9360,i,16449487778169612713,9030919202829399870,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8884 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --metrics-shmem-handle=8384,i,14275551726379166824,9548653049274066251,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10380 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --metrics-shmem-handle=15180,i,7396603298660076830,5845458164510175571,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15156 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --metrics-shmem-handle=14992,i,4247850876637221536,2861158845034720767,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9824 /prefetch:1
  2⤵
  PID:7984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=10012,i,3882385548480124928,2922498610418454092,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14884 /prefetch:8
  2⤵
  PID:7160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --metrics-shmem-handle=8808,i,16338153526009680495,8830301150175005141,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8924 /prefetch:1
  2⤵
  PID:6800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --metrics-shmem-handle=15220,i,11010856158000766906,9434599612196280852,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6300 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --metrics-shmem-handle=14116,i,13520259340713361443,16234177936414244807,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14956 /prefetch:1
  2⤵
  PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --metrics-shmem-handle=9692,i,4091654217268637956,1902601738924201749,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8940 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --metrics-shmem-handle=6000,i,17131109603576672771,8555297226413168574,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15176 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --metrics-shmem-handle=9048,i,13511468187877141531,8514625607342461809,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8840 /prefetch:1
  2⤵
  PID:7700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --metrics-shmem-handle=10736,i,13466502858620752878,4789624095527616943,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10540 /prefetch:1
  2⤵
  PID:7624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --metrics-shmem-handle=15208,i,11495435451181359519,3152495170589418696,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8448 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=178 --metrics-shmem-handle=9708,i,6850359234851382555,4836320223435129679,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12516 /prefetch:1
  2⤵
  PID:7956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=179 --metrics-shmem-handle=5080,i,575340697055827054,840257467464789158,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9268 /prefetch:1
  2⤵
  PID:7456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=180 --metrics-shmem-handle=3296,i,6444674286743535405,1034245148301626838,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12756 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=181 --metrics-shmem-handle=9364,i,7362732709353637045,5239976598160656438,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8288 /prefetch:1
  2⤵
  PID:5368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --metrics-shmem-handle=8372,i,8851767773212700816,3177621228597289750,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8924 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=183 --metrics-shmem-handle=8348,i,2639924802362330576,8270556554737543878,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8884 /prefetch:1
  2⤵
  PID:7292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=184 --metrics-shmem-handle=7692,i,12034810131853732212,13928417914781411443,2097152 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14444 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=10092,i,9502302176455262115,17931464890806243576,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=15140,i,14458560624035925453,14143056915858537884,524288 --field-trial-handle=2016,i,12101324675395580083,14517692689103241318,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15188 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5180

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3780

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4132

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7fffcb6fc728,0x7fffcb6fc734,0x7fffcb6fc740
  2⤵
  PID:708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2020,i,13853182130565646636,11943478595252459631,524288 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2024 /prefetch:3
  2⤵
  - System Time Discovery
  PID:7984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,6745483259164169800,14557574002594632493,262144 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1940 /prefetch:2
  2⤵
  PID:6972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,4640506921394491275,2350952299814480291,524288 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3120,i,1699407184147287004,10205720291285748089,2097152 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3124,i,17662615691149911485,7821323620875625384,2097152 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:6592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4552,i,16744318812243850657,1585278605911921736,2097152 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4568 /prefetch:1
  2⤵
  PID:7836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5280,i,14381980999875770069,15983016856996793260,524288 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:5304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5372,i,5040646163530280119,5144714480397757571,2097152 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:5928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=3912,i,7564956059325011193,17346198110616468300,524288 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:7624
- C:\Users\Admin\Downloads\winrar-x64-713.exe
  "C:\Users\Admin\Downloads\winrar-x64-713.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Suspicious use of SetWindowsHookEx
  PID:7664
- - C:\Program Files\WinRAR\uninstall.exe
    "C:\Program Files\WinRAR\uninstall.exe" /setup
    3⤵
    - Executes dropped EXE
    - Modifies system executable filetype association
    - Drops file in Program Files directory
    - Modifies registry class
    PID:3828
- C:\Program Files\WinRAR\WinRAR.exe
  "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\Admin\Downloads\People.Playground.rar"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Suspicious behavior: GetForegroundWindowSpam
  PID:5776
- - C:\Users\Admin\AppData\Local\Temp\Rar$EXa5776.35895.rartemp\People.Playground\People Playground\People Playground.exe
    "C:\Users\Admin\AppData\Local\Temp\Rar$EXa5776.35895.rartemp\People.Playground\People Playground\People Playground.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in System32 directory
    - Drops file in Windows directory
    - Checks processor information in registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of SetWindowsHookEx
    PID:5192
  - - C:\Users\Admin\AppData\Local\Temp\Rar$EXa5776.35895.rartemp\People.Playground\People Playground\UnityCrashHandler64.exe
      "C:\Users\Admin\AppData\Local\Temp\Rar$EXa5776.35895.rartemp\People.Playground\People Playground\UnityCrashHandler64.exe" --attach 5192 2385819078656
      4⤵
      Executes dropped EXE
      PID:3608
    - - C:\Users\Admin\AppData\Local\Temp\Rar$EXa5776.35895.rartemp\People.Playground\People Playground\UnityCrashHandler64.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Rar$EXa5776.35895.rartemp\People.Playground\People Playground\UnityCrashHandler64.exe" "5192" "2385819078656"
        5⤵
        Executes dropped EXE
        
        PID:7256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3456,i,14658303556413291717,17360084459634788532,524288 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3432 /prefetch:8
  2⤵
  PID:7092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3124,i,11438991995704918855,12679047654354726996,524288 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3392 /prefetch:8
  2⤵
  PID:7064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3260,i,6023863799227301072,16261504279259377300,524288 --field-trial-handle=1944,i,3500746272995156020,1921176591405669506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3420 /prefetch:8
  2⤵
  PID:4840

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5196

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:184

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2f4 0x490
1⤵
PID:6736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Component Object Model Hijacking

T1546.015

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Uninstall.exe

Path C:\Program Files\WinRAR\Uninstall.exe
Size 402KB
SHA256 39baa167de334fef185ae8b97e8c709a307eed08e80fe115577c59a05200a13a
MD5 7c7fadfc3884853fe0141609fdb1e624
SHA1 36261b2b3cdbce62b6a9d3139a6c239467a3006a
SHA512 1d868f5665f6ca182d07bd21ee0e2158cd00062e2633c4845eaf31a242d5868f79f833fd37f87b54f17adc63c7804b95c9d3bcf66c137484f2615992b69ec0d8
SSDEEP 12288:Kxytky4LvurgzH9C/2qCQW7oIIvS5ejcwU:Kqky4Lvurgz62t5cYwU
TLSH
T1CD949D19E7A455F9E5B7D23CC9924507E6723C51CB71D38F03A10A9A2E237D09E3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\LocalLow\mestiez\People Playground\Unity\local.6bce8b3bf82e8d747b49c7986b5f6dba\Analytics\ArchivedEvents\178873573300002.a2b25e66\g
Size 1B
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\LocalLow\mestiez\People Playground\Unity\local.6bce8b3bf82e8d747b49c7986b5f6dba\Analytics\ArchivedEvents\178873573300002.a2b25e66\s
Size 346B
SHA256 5c97c1928801ff9981d2c317d27a13e6d1f19191320d853c3456a2ffec19460c
MD5 3077d7825de7f05feb0fb53593191ae8
SHA1 23fe720d7338beb99d731c88b25241e658ed5617
SHA512 b951288c48d12de7d6f001f80098e06cfca193b4dc405b08539dab827f077339109f2b5cbef9ae8d8fc8bd45f3d4f5aac51b6293069cd53a78a82638a0a5826a
TLSH
T1E0E0C0410E6E545E6311A1A329D10C04266D70D0751BAD9C1CA002C21E983145340366
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 e0fd8a7f0d0f67ec78e84b18fb15012231d67d91c8342cf38fa1548bf6e4e9e3
MD5 cc27f1eafc7055d676aa418a5779b539
SHA1 b667a33db712eb36fb0a89005b1abc47a53d9219
SHA512 dbfe0fabfdd5617b1fcbc41f497277e2fa821c182363f1fc2fb6151226b64f008a2fd102425c8c6a89e825469306a2ff2bcce523026fbbbc3c7a0b74644012b5
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f86c334205867b63cbb3730b9e1d01cba325bb2b1fd17da873ea73ec8e7e1af0
MD5 bbd816cc512247fc31352484d16f5d8a
SHA1 0ebea8b0d1bd2eef1328393a1331fdac268bdda7
SHA512 3f695df31cb16df40473927aaf9841e02ff2e8601e2269f4743207af2723c15c03c077a4a206e19ed0d10edef4d70ccd15603b05700b349e92f066f583ccdc8c
TLSH
T145E02B69C932ECBB14FC172950444B82D75413562B80894B7A3C910D8FB0B3A419681C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 45KB
SHA256 5bc9f98f7b1ed051543327f69ece69dbe636c947f2221942bce17b8f92020e1d
MD5 98b209fa8d21adb4f2f579be7dea0d68
SHA1 bcfbce1d649c739cb759f16e48236986513b5124
SHA512 fef0a975a57dd0d704eb8dab0031f2be5049529f8ef8e6874697cb3018180239d560e510dcc471022f43f3b623fcc065bcfc22add853215b1a057d8cfd018313
SSDEEP 768:lLMGuPSmVfNWkK1sMO5IwSunQL9VX8i6EDfdtVsY4F4cOHDa:IVWkKLlFX8i6eTVsY4Of+
TLSH
T16D2302D7868B2008F7D67BF0FF1301F6AAD343F145C2B9158D282584D9985AD78D9E8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 37KB
SHA256 61caa0cf0d5d5780981cd852b18065a8b1d48f470154bcea94ca1fd796b5e32b
MD5 aba1ce1afec1cdd882abfb73d548b195
SHA1 5ab0716ab5fd602507f8f19e370922215d4d46b1
SHA512 cad8ea07f484b852640fc5c259659a1d6edb4fb7cc05b48a5e85125aac683864f60d4ca64b5171aec064eddfffbd3e1854427e785321a123afc57dc4eabf3ce2
SSDEEP 768:SWURNf0dDdjVWMXOuLRJzDD1Xo262Fj+HbATMZ6u:aGdDdjgMJJzD/6KIbATMZ6u
TLSH
T1FB03F2E715A4DBA74A69E0ED50D451885F3FD03C5C3DB7E5C8F20999AFA3A4A0334B84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 60KB
SHA256 695cd019720ef2adfc7eef7a2bc7ad4ae11e87be48cba97d382aee3d43200035
MD5 8da0b429c49ed135c3e237303621af17
SHA1 13827acd75aa38461b076bf76936de56d743527a
SHA512 8abb40f1902da437c565f0155cce017b2e97792957a628c4ac39e9c206d044110e00d12bbc6dac2160a2f10833b0069266a671b9a6a20665fecda708f7c4d4f7
SSDEEP 1536:o5CrcSu4Hvg3cpv3yASan1KxeJE+0jkOFLa:9rcSlHvDFyASA19JEfXF+
TLSH
T16D5302EC29C2B2E7C5163267B7C582A41B0CA153F5B3B785C39DFA320A650A1295E3D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
Size 185KB
SHA256 4ec9cb8475285c4348e0536713c87e2cee39bacc2650735d6bd93159008de279
MD5 b1e48ef81bcd2d42b2ab4119429cca40
SHA1 8b5e511996eb91f0faee920126ba346d6bf23cec
SHA512 14a4daf065b299d0a232e159cf5228efceb1397f43d1ceab0a99ce0b490e901c4bb6b105452a548573c97f0ec54e9eb65b59058f96781c2396f82ef751040e7b
SSDEEP 3072:qV55Kup1biTJgiBKQSrx7MZAy5xiG0MZWWmEIZZGGV4wqeOd542QE9Tt2VI8hFIY:qJKupNZwKQ0x7MOBMZWKIZQGV4wlipNE
TLSH
T19E0423BE0C5813BB3576799FB149E8FC0EB96063C018FD51ABAF9A5C0937180AF98145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 114KB
SHA256 d3298ba800c80577c206b33ce9d90b07eb79a68bc98b1c7be473e19be69e54fd
MD5 23c70ed27ba1388f3374b6d7f2e2bf9d
SHA1 ac3e74029bdd04bd6ac3bd3a086976ce1cf73552
SHA512 933df11a077ee890b7ccbed9293023ef0b4984e878fe9ef76fea646f77d08bea1294edb4d44fc0c6f3cd62344cf0085f17b2dcdd2fce6274e4794a273cd0e0d9
SSDEEP 3072:mbbF1beWR+2ogFxYJ2mS4xBs4vSx7jzTbCIOM1:sFVeWlogjYJ2x4nsE67jjEK
TLSH
T135B3122C25BF4F1D2E11D374856E7E8C8B00A34974BBA7C7297FDC2206196122A5F66F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Size 142KB
SHA256 c52352106c87cea612b69c364ab14a12194009451eefc9f2af7ab16e20e9a56b
MD5 4235e755680576ef608b494b3ae8d024
SHA1 3a973923d3c4042c6d79734f43b642fd3327e60a
SHA512 1990120ca7d4aeb2a0f47a6c4af9c23b593aed543d82cb2092d4b2502ed50ed383a816a69051b59ac685c901a802b8b2f11609954a8c34ca83435c825e6b89f4
SSDEEP 3072:1Ueq67VN4hd0h0MAfdMpdWQU8HVWVnJlQGS91Dd2dUjTjz5agW:eeqeNphkdMpYQzHVoJmGS9CdUj7hW
TLSH
T157E31296B7C28E74DE27B22D96EB4501D53B93ADD1042ECC124FED14E0EE243DA24DAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000022

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022
Size 16KB
SHA256 0364d368abf457d4e70dbc7a7a360f3486eaea2837b194915b23d4398bee91ac
MD5 68c477c4c76baab3a8d1ef6a55aa986f
SHA1 4af50379e13514558dd53d123db8ea101ec5e24c
SHA512 92b34fe3b7f82f10cf6de8027ac08f4a5b8764fb4e0b31c93da6e3d5bd08e0bc83b79fd70b8207a1066b689583e0b6976fa3c885b0c067ea343e6f2031d55d25
SSDEEP 384:Nd1nZ+hLc8g3/2AY8VL6UBP38Y1dDq6w9ZD:bJZpv3h1Z3x+9ZD
TLSH
T10572D092B7F2D6B84D28BDFE122B04099CA91D8729F113F25942362BA5B1C6484FD071
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000023

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
Size 24KB
SHA256 def8db3d0393b41c222c29e372c8ce57f9696a7afd5e93ccbcb225e4277e6b96
MD5 1a8d2e6c071e6ebd41e2f8851dd4d912
SHA1 c12e0c8de14b218dac205bedec4500436238a31a
SHA512 4a304a05b7fc18c93ddfc3aa2a4473b7145163c756bcba010ec8549dce90993722841f41c465a1c0d717774a6e394322a949d78706c423a0a9ac87fdff175fe7
SSDEEP 768:C92mZJHiWE0Gw3PBSUA9Kxrtmejy2zsA0SOHQbXHAEO:CNLfp3PvA9KxxmUy2zASOwTHAEO
TLSH
T146B2F119CEE3B922ADB99F25EFA836D108F082547D7D6FDE8E19440C8F1243076BB056
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
Size 53KB
SHA256 09b3c2f3597596ba8422a8e281472f12be2ee7412bf96a84cb2bd3a1f0089f64
MD5 ac8d7e727020a78f83e1ba27b9bb3ee5
SHA1 ddc3f0bd27a2cf9878bb8ec3ba6b4a86301a743c
SHA512 d4f57196c712148808bfe4317f89b3568cbf78f9bbdd6fa5b17e1827571d70a56ddbe67025e445874d22f9ded11ccf4bef707d111a32fb95554ce3e52993e223
SSDEEP 768:E9g9SzEtsJeRtNrVp4A+kRUWyTOKbJLGEPF1gwX4Wel3NJyOmv3mlug/sEdQMR1O:E4t0mtZVkkMOcCEPnv4WgNJKe/swQMRM
TLSH
T1F533F137D83D15850BDE4B01958D39670C3F66E49BB7CF84A85148E87A3EF627852382
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 111KB
SHA256 4eb4bf6b40213da1e66a53b649421c4dd3cd3f1c2cc66b4e5fe78acfdf7f5049
MD5 1ca1288bd4ecbe0660cd0b27b3f121fb
SHA1 9d689df020f59ac74d2fd2d7e14032d61302d408
SHA512 1a759d2cfccb85542fa3e3f246afa3e0dee8a4b6944a9d02d299b711fa38ef7bdc2ac1ae5a04b0474b891c87fec9eaa3404654f8bd8ac655771d2577c267344d
SSDEEP 3072:aNph8vSCQzWX6sjEbXjjkAnN8RiayUIhRo:aN74QzWXhujjkAnNfa0c
TLSH
T1CEB312FA2A8A30F34AB01D1DF66FA046CBFB982AB9CD46D2759115133F9051784D3D52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
Size 92KB
SHA256 c3061bbd11ca3e82749e8ca895870449a91d29bca4073ede3b4ebb5c4c36015d
MD5 ddbcf2f4e867c3d6cff1099220892f35
SHA1 0c4ddb98beaec4ab206c03e1c82acc92e1d91756
SHA512 cc382c5d3ddc30faa812b278d3ec1eaff9a2f72f8f3ca5200518433c96db54f4abb311cb4be51425a7a8126074a3dc68f88434776f4c40f3ef27ec4fed84a11e
SSDEEP 1536:CquWgKT59+6QIQz3nsSFpllHYxtDGVOOTeHlTUFkAGbPXqzb9GoefyPHM/bfg0lW:ChKHDT23nskpofTQeH+JGbP3zyysaW
TLSH
T1BE9302DFF3E49FC3060EF1754A861B92598065C3D78870FEB0A07CD84DA6ADB226C291
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000027

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
Size 31KB
SHA256 83e0ced7debc816de14ea19f38871d97d4cc9951221e95b184e8f12c85ba2351
MD5 d5f130f6a102d60f9fe186a57eff68cb
SHA1 18d265938b635e9fd541dd8feac48b0c2a93a836
SHA512 f0ed5311672a21485971415d2fbfd264a7605c12db4077f6e67af2846fe59f7f9d83751fa2ce04c4aa2d5f943599b9458a40d1f87668a4c28aff6b8538be796f
SSDEEP 768:dpRjqT2BtvCKYE2HrB4itXh9Lsc20QLKESiw6:dpRqijCKYpV4eh9wmSKESiF
TLSH
T1BFE2F209D96DE114A317DD2BA50CA9491D10E1C4BBD0E5E3B94D7393B770A2A263CF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
Size 210KB
SHA256 d0553e52b41e5ae531c6c63bb6fd6d800838fdf4c6f7369f9eb8413705475623
MD5 1b5d91c4496e6736c8d6403ae88b6f16
SHA1 ddba91f656385cfcba2894d2b7214604c193aed1
SHA512 5e5697c5fc4bcd1a8e19d283ea9948354b1262ca1e04308a72c8a982cb75393a3c13b529af0b51fd847938c92782d0df2f2df693312ec874e4d0d1a3b4c8b562
SSDEEP 3072:SR/WVvXa8XVPKw2FcM0Iup4clSU+W4ZRgyiImNFblQnURjFzQMTTj2BBRMRFY6HT:6Wk8FPKw2FcMDupfcfYIAFLTABeRFjz
TLSH
T165242347FF097D67637AAC8101A88D245262A88E35CE7383EBD84597D83E32CBB57854
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
Size 18KB
SHA256 8174856260f2ac8983ca765fb35070cdf13b95bf9962343ffe6229fbe10e76cd
MD5 f7511f73167af9544465c0230df18a28
SHA1 5f6f89f7a1d3e2216aa4e86f26867439fcfb6890
SHA512 5f3b5c2324249d57e2fb3ff84cec57fadbd96eefe9928769bc94218e5acecb510a66584291c48d165bebc6c28a31008ace2932b7273c7890591c07c8265afdca
SSDEEP 384:SSELV1Kmb+yn1nKFjIIWIWBswAvG0ziXaywFoaL37MeCbjAiatwTkdAg:STV1KE1WjIIWv+wAvmvioaL3IegkigNN
TLSH
T11582D014DA4F9E87F37D05A28C3E9DCF5F2E4D32AB54E66831065DE08C9B9EA0062D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
Size 148KB
SHA256 9f482ea52fba9c06d13560082c7dc49873f45501a209b4c41d8d1b7e85085cc7
MD5 fea1bc1df2f53d68252510d8aefd19cf
SHA1 ba2c781071e3f6fdb85b6f4e0008d49e27d2c2b0
SHA512 5b644f99ae2b48cf05188cf9903e43a64c3a983d2bc081be735087b5d47c1048ee2cae8ff11debee26f6d0ac6b990dc0a1e7d19ec43e600b130f6503cacd3361
SSDEEP 3072:1cEJW0pWrwSiZ8fPpqc9D6hO1WhepXaJfHhqJ8ixL16Cn:1cL7rwbEPX9DB1Whepq9BBiNsCn
TLSH
T1B0E312FA1443B51712E126F00BD0E7BB893A74DD89B29B36229CE714D2BC5E7702D85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c
Size 148KB
SHA256 e019963ea02246ac5d39dc8e15e5eb06b9df028fa89cab01ad696690b2d4e97a
MD5 444b726e5be8e5a7512d4a8c8919d437
SHA1 020271acb822496eb0a4fa6eec0b894814f6165f
SHA512 82c389017dc3817a3f33ad78a48c508f30732f5de301b141ab9b2c9b9e80e668a42458e692a8c5a9a42fde8c2a5cf0025c8dabdea7eb58387f6581c432da130c
SSDEEP 3072:dvXJJWhwIkLGcPdUFVnMMwOvHnnGmTcmaJyJLwQKdxFIhsI+0nu:pqLkLzFUIMwiHnGLy0Q0TQsr/
TLSH
T1F9E312B07763C46C52DF62F68FB1609F186E03E0ED8D0D80AA7EA0CC9182FB5D611AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d
Size 23KB
SHA256 5472fd722024d7e10227381bf9bfcbd1c1e5b19077ba0f111193d9804c421bb7
MD5 022133383591682cc934097ebb28f060
SHA1 2f54233b6bed91b1122ff32d3e9109de4dea1f9a
SHA512 fc5c48184f468336edb4a1346853121ca9c8de5f71ed694574be9c584c9c4bd2c88bcfffd82b9fd539d69f8a7783099d3a0ecda50d2d71772abca24bdfea836e
SSDEEP 384:NMpZRo23v1oHkmklwRnBVl+PrbzvcXycPgeGch0fZ0NA+0aqUrSoyy/45vMtH+fI:NM/CHVklonBVgrPv9LpcEZSA+NqEyAae
TLSH
T102B2E1EF3D989C18A5F74D3BA83375CD40533EAA63784C0586BF50841CB46BCB9186CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e
Size 34KB
SHA256 20932fec0bbda6310c8b59b9c740d3097461fcf84d559a33227d3c60cd3d4bd7
MD5 d1546561811c0be21edf019374fba8c0
SHA1 ae934992780f19b63bd9b9c83fa45003f1fa4f5b
SHA512 72598f794f06d22e06b34936c800a504eb90a2e8e0fdeaa7c97f70fb0beed473d09eb3db13e6a8f5491fb0c996fc884e000c641deb24bcae85d01d9f7a7dd2cb
SSDEEP 768:pr+7FsqT18YjEr/UZ5yq6F9laC42qlrUdsTmKmyl:4KqT18SMjqGaCCrCS
TLSH
T17DF2F1196FD66CF225EC985AC8271E83FE30D8D5A4603CCDA2CCB01354DB97C498ABA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f
Size 24KB
SHA256 c7f1ab381d3c6f0c52968d2d14278c0b107b53a5e154b7381d2a46590e7d33f0
MD5 8b62cb77af08af8a3c92a15d0534ad07
SHA1 a7d15c6d6a8177b229297c54df57bd344b794513
SHA512 3ecf677f8eff0dfd5920b9d2ab8b8de21f7eee62ab429a033b0fae624a6a88718e595a81bfb5dac841f1d67bef8f0d786ba57a5096327cf959689dcecd16a823
SSDEEP 384:ziHP8fq520czx05WRFDagKW0LGE5zX9twpBqNuCxQSBx7eh9nAj751HDdg8Y:zcEfmY02FDagn0n5rbwvCCCo9o51+R
TLSH
T151B2E17C040ADC4CF924AD5E751C3B7B29349AB31FB4A499841A1F09612A0EE1ECB1B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000030

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030
Size 21KB
SHA256 0035839f97544723c93fdc2a16786821bccbe601d1009453acb3742d59b5e60f
MD5 8f15f59cf80ea13e8b585a05e66a6435
SHA1 16fe03500f9595aded49c3b2f649c811f29622c0
SHA512 cba3f9c335b03a1a76a3ad0a189a493a0420245d8d711d4f6fc21ea2ab00983f13ae597dd1942d04188861f05e9cec0a25d5c139c9536aef312912bf067c93f1
SSDEEP 384:/DuGGYyI/z/OXV17UPmt1SSdto+laUW6YrouZynsHgq3ba61M1Djk:/DRGYTqD7Smtjdto+laJXrou4nfsQ1DA
TLSH
T1A2A2E1F003DE9F6342365F1B71A359BB2F697C06DE0C8F51868932D8F4AA18A8F04395
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000031

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000031
Size 21KB
SHA256 997be17bdcf089b06cae33b4a8809ff8f93ef00f1ed5c08f30c4a50c557f5eaf
MD5 beba3abade765eef720d89e45d5567a5
SHA1 01bd56797a96cdf4b21685e34c7b1f32cbb8f12f
SHA512 1ae60afbea1a7ab1c86e23108ffd957ea9df7a6c6e0f7e6552c8fe3ad420151c7f8f8ceff5980b69da71e7cff229c0cf24fac639ef9eb108ee78efec9114902c
SSDEEP 384:HXWlt/N9AmqwCzZ185VJ+/3umRp0dIO/LP1ARCvpOE2e3kB2D1rPdZK:Gz/N9Amqz1QJ+/3NFIvhFkB2D17K
TLSH
T1B3A2D035147F813456B4897E767CA81C59A123E9B26C0C992A71AA3BCA1C312EF9AC71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000034

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
Size 176KB
SHA256 4374027b4b21f2cced46d85f82c13dcb5f4b28c52c97535613ac0ec249d74068
MD5 67a8da7712bedd1ec50236cb474362d0
SHA1 cf088293ba078643f8d61005a8b2dddb815983db
SHA512 25e82890c2df7abea26ecde5ac27c94e878626a00a281d7e4e82a6b2377239bbe26b91bd7b73484b9be27578ccafb178d46f7e7c4d1f46854bc4a577d2a91ed9
SSDEEP 3072:qXgbCOKbpfKiLIAuIC0HksKE72Vu0xyMSRFH+1/KgfpPC8qC7JAUbEJvqNQEyrLR:qAKbdjIdIvEvE8w3UBfo8H1A0xya6bCS
TLSH
T19C04124E016E6DB17A3D7ED33AE13EB758C26343416CD366447687B860AEB807F64E42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 24KB
SHA256 aca258b3c6fa2f96b1884c6a132d66dbed3617192808555b7d22351c72788458
MD5 70eb4a2a57567da919393a5a0e3e9898
SHA1 edb383a77df21c939d94b432421c0e79ddbc4a68
SHA512 02ba5c6dc0b7824b6e7d140c891d912c8814d305978fa1db4946a9e78b9e93568ea2a4bddb5e836a1ee42d093819db825e751d1d3a305e8639decdfb15d52010
SSDEEP 768:tlHktgApm3ZDc+RqlN4S223Xk6Py1tZtNRJ:tMg++DdR+f3kTZbT
TLSH
T154B2E100CFBFC912F32CF7D64524FA2F0154D32E3227BF597295A0525992DA6CE54E62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000038

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038
Size 45KB
SHA256 3f11fa8f6e67b12b160252c6542812c8030ef405394445b7f86bb9f10bd7c026
MD5 b91a38ca237f8e51be45e364e59de3f6
SHA1 0dc0b0fa146f60432c0a5700084ab7190133a0e8
SHA512 6bef8d68ac2441dfbec067406dde8edde1df38ad327a1c33ce0e97e5e5bdefb9d0aa141bdc292e12957da1dbedb2bbd1b50e9e98c97b90d6f31fbe2548e67847
SSDEEP 768:MJRjp5l4NCnGY+B1pI6Z3qJHKmajJhWIqM8uDloPGRT9GlHyoQPrTYm:gXlECnGY+B7ZogjJhWIU+d6iT
TLSH
T1E023020FC95E098E1DA8A10C32ED75A8F532A5E1FD4F8F4661C05E77761E3189D6F540
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f
Size 73KB
SHA256 f3d2fda12260ccf193da50e70fe5efb8b89d3c5d4e246eaa053f2cbf4fb07ca4
MD5 345c1023e3d262fb90bd367013335e0f
SHA1 30fd5c4da80ace38caa4fc0da1c950b6ea210787
SHA512 9ae18642326e9e10579bf7b137e14cf5da51953fd2884db14dc6050c4734ec9ad58f7afa35e1d9ee2d0672827845fba2a076bf25069ad40a31de93179c76c842
SSDEEP 1536:gJJpWKEN0+OUU0C2XYIyfDqHbs9hB09CfZlKMVOSUFV+qnCQalSYnUxMv:cjW1b1U09DGyQPKzSUFVXCQalSYntv
TLSH
T1D87312C66BCE83A9791BCF3D0D254488AB74C4F0329AEFC3957AA08D7515134B1C63A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000040

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040
Size 32KB
SHA256 5384c1f56f314afb26b849d99d154529e900e771c6fb71c6da9e331fea3b2544
MD5 802c81172f48a3f19ad2d3693a7c7851
SHA1 6581343b1c6bfd6f28fb4b6f5707f0499b99a676
SHA512 9dfb12ac16558ed4cd5ef1d52cfdedc0a94e75cc5bff8cb86111f04cda27551bc5ba411d45e55112814510fb24877c144ccdd73b4103c9dded4508236cf27e1f
SSDEEP 768:PBs0fbmE3isOJ634hWzZEnbjCdmOjV7g2mJF0h:P+XUq634wECV7QH0h
TLSH
T119E2BF44F38F182AD9B5B674E3B394174CB717A6030BD057B07F8B99ECA613439831A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000042

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
Size 21KB
SHA256 425c0713a8176f92273d378599c7eac57de7fafabd4bd0ed457b70eb8f80d371
MD5 4279528ce0e7dc28919e6f8ce5f0eaa5
SHA1 a0bec563643727d81bf21d0acec08227d9269da4
SHA512 2b6a62ea544e93669893bac8bb8a5233d55cda9c3b293add6f312808cdf5127822446a516b66656cdae7409c5938ad1ff4fe0a1ba48e52134e141d6a78100507
SSDEEP 384:74kazv9DMAYqVNsLRxmVN7UX3oC4JjImMex3viFG5Bt7/br6CfY/lC7:7fazv9DM2Q+I3oC4JjPb30G5rtfY/87
TLSH
T10AA2E187B3EAA46D5787B931FA0A1900B8FE73F65D27DA6484E087C9A1456C48C3DD3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000043

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043
Size 53KB
SHA256 2f98114b7286384c5916e5197c754b706e7658fb28983b816298cd27a54c209b
MD5 8e94574e4a17a99c71bffb49a6fa882e
SHA1 27ebae0efb9d633e25e1b30107e9b5e89dccb86f
SHA512 dd31f05ec221b85fe5fc0e9f9976e02e3ed503a03fa82d1dc0a6f90ae8944206acd76c22211b3911b788f36fdc60bc893f36d73bbf372854ac3336b1f91ab2b1
SSDEEP 1536:TRUXActlifNqjKfneW4yrFxW2ysv9+0HPxxmE:tU1/onsWxl9vFPxwE
TLSH
T1B433023B4E4DC24D5FB681F50DCB1D6A828EBC9BEC7DA8471327B78F56506A044C0DAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000044

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000044
Size 62KB
SHA256 29e3c6c1aec37ac2af49f0a0318d6a4c0653e8e26ef8b3ee91b923073dd3c197
MD5 23793defc1323ea3f3e0b105e70803b2
SHA1 6239daff26359661097ec66f68636b5f3035dea2
SHA512 d699386dfee45ca8c6dfcecd8aec0dfecaa8822afad038e26f56c933712ae7ff9e55db567fcf275d8f2a29d98cd1734d93a9cbc1461d1dda39d1a7fa097cc63e
SSDEEP 1536:mXPI7rkkzxzCH6NGIvaSNXkkFRPvk9VkPf8z:swPzCa9kelvkfYUz
TLSH
T1215302F1179EBEEE6619A648DFCB720A4CFC5F17123531AE5D08991DF1B07672293810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
Size 25KB
SHA256 a2ed66f01753747ce359a8be0a9555b91e18d01c6bccf8e52a74078520d3720a
MD5 7077ccb28e70d467500f6994c16ea6b2
SHA1 b47c8f61db3e92fa3fd0ec2e5021b4ca3586a494
SHA512 aa84c24767a1aeaea11b48e2b8b4d10a9f668839030fe47d132a425dc5cc30954c7d6106ed1d6d1522d42266ff03c0b7be0f1b95861fba79b6073fc9b992ab62
SSDEEP 768:3lBWG2FODWjwQU5xhjsNxSyk879qB8RET4qR19ZB:vMFOKUhSxS1L86pPZB
TLSH
T1FCB2E1CAE9CAB097AF1FB05F48E22D256E77B20EF00AC57647A14DD4657E08345E232C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057
Size 3.6MB
SHA256 dbc951b4ab01646888b2a91da73a94dd920054c2f27c8cfeacae3eba298e71b0
MD5 53ef4972d65304468d2519aa692001c8
SHA1 095036f9669230cb69b42eb5e6d91fdbe46ab61e
SHA512 3be4a4f1715a06863d552d726549268ae38327023d92b43767c3f71bf34a8f1f46d3d2788218831716016438bedac057068dedf4698cfe6d7ad9024bba49c46a
SSDEEP 98304:cRZBAYtCkpjsMig0xgsXzQZ5exHkZfqXdl/X+S2H:6RM6S3LXzWexPX/X+R
TLSH
T17C06231DE79418F9E037D238CD934506EAB2BC9D9B71C68F23A515A92F237A09E3D311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005a
Size 56KB
SHA256 2cb1465500bbc89c7ab2de46ec939ef1cc5405251a782fd2f8701c53207f651d
MD5 533202c2e97bc06ad53bfe56d3a3c9a0
SHA1 3e6d7ad9833703cf1a37e57cf556c3e41fc3acf1
SHA512 3194a7705cc59c835a17140ee169bdc82abf379604f60c8b00e4b9d4425da703c240351507ca0504ab6c9f54b7db51b0be963fb2ea56c87ed8b49c75dc93e6de
SSDEEP 1536:DUqSvlZsSR42T8cYstBEE8d7cLUiAhAtaMGSW72QBz:DUquZX4688E/d7F+aMGNzBz
TLSH
T17843024830F7E8748DE09039D445E32B863A823BD4B5CF3BD9FA225C84B3A1F99D6464
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ca4d731fc87f893_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7ca4d731fc87f893_0
Size 22KB
SHA256 1829ae19b24a53b120686f76f5209db45e3ab7a87434f75b5b72088e8baf453e
MD5 cf39c35dee67f5807000ed33a0838301
SHA1 8b25e7c6be12f3925d09ea7f72e70935fa80d430
SHA512 adf915c01c6640a9ea5dfd973af9573b29c455f4ad8dcfa05c2ea7d48f4f02fc5d92b25a72823eeb9c2f6da41db32c69942cef8c0d963affa2303f13067dd43b
SSDEEP 384:ZGHvPYaFrnUexqYSC4hSY6NXHL/gxGKOZQZlzj53fiG0yKe5PhEsGMP9ExqL:ZGPPYEIQDQGkZVj5jPZpz+xqL
TLSH
T1B9A27F41A790BEEECA6643F402634D56F73444CC2E83F32767A4E77A5C242D56E89C8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8a45b00991a9a22_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a8a45b00991a9a22_0
Size 282B
SHA256 dc80666adc4031de37520b495ab214dd3142d881026f6bf44fd0e1d633d9fe30
MD5 3be34bba71684058326bb61951bd2a90
SHA1 9436de2c1b1ebaee952bdc8be45efd21252b341e
SHA512 ebff2e7fa2fe2db0f39d5535cbffea5ef71ae14580821e6b1b8a8bd2be87a9a466bc7f9de7e480968ff07db4b44c8faff2c0ee937f3d78d5a5ff6112d9749fc5
TLSH
T160D095AFC078FCC4C514BCFDDBBE14C3D3015AC63456E25D151131329105E72F659A60
MD5 SHA1 SHA512 TLSH

Submit Download

b03978fa36a8a615_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b03978fa36a8a615_0
Size 3KB
SHA256 d026f932bc1f98d2453c7a054d06396764e5b1140dde169a9a6dfda6118be1aa
MD5 a40613bc326a08b549ae145a5cf3a54e
SHA1 ad3ef512cca029b1b8f8b7961ad0b84b1fd16b90
SHA512 29b7b67ad0dd83d7eaa230743924f6c481c29e3a90aa2ad5e9579e65022f8c29ae09aa3ffa321d87be1bbd62aea3462b2ba261903e0e25c598c5f2ecdd9a841c
TLSH
T1E27194DE56408A2ACB3203FD5293859A333940047FD7C72364D1EBA91C443F3B9AAD4E
MD5 SHA1 SHA512 TLSH

Submit Download

df53bad28ea1e322_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\df53bad28ea1e322_0
Size 303B
SHA256 b193847d2bd2c0008a3f093e92c68e9c463ebf57e602f67485a319219da0c49d
MD5 9325c25a52df03e22a69baf764411827
SHA1 2ca5ae1e06cce957e14964a8ef7f50ee39faf972
SHA512 965bc0e509deed5b0eb50f89b93f2db1e36e9b36f57a25986fd9650039d90818c2c44ed74c40185e789e931bb84a26a4eb9939a030b86b90ad9a04dcc522290e
TLSH
T1D8E0EBE3C0C41903C92A54F0465E12AFC31780CE049DE0CD800824A1CA2EAE473C9A33
MD5 SHA1 SHA512 TLSH

Submit Download

ed3640c75eb972c9_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ed3640c75eb972c9_0
Size 310B
SHA256 f8806be6822f0f1685b8266a4c7252fc1c590451942b35bab9dfe200cea29081
MD5 57e1ae962402eedb55fb156234b9ce63
SHA1 faaa3c2e37780216645dcf4ef0ca712816127034
SHA512 e96d79189da38909a3088b2a5cdb73e446cf2e05a5a8cc5e44305e2fbb6657469b0bd5b1c66b073f140be4bb16147e0a5b2f7aa4e55103b90d812f414d59eebb
TLSH
T14EE07DA740597020C5EF2CF8C2DE010F868200C78D5DC089A0A0547327197B6B3CA603
MD5 SHA1 SHA512 TLSH

Submit Download

f0ce54a6d8b66b70_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f0ce54a6d8b66b70_0
Size 314KB
SHA256 0e3035c4a5e5e55eecf1fd87e42009b2f1920a321fb1c4eba870b82cb7cf6ba3
MD5 5cf66de18d0710c560f1085c56e79d49
SHA1 d891c19651c9356fdb95f93988e96354a105621a
SHA512 bf202d03e33cc28ba95a346f5bdf8af83664e4628c33f32fb47391e5ad951d6689776f7c9079b9f6a858e2dda4cdd43f170e317cf2ed71170e6b33c132fa1191
SSDEEP 6144:nX09zh/f7dfsYpsiPFW0t/re87q7EMxr4O:X4h/foidWO/re5xr4
TLSH
T18664B60457859E36CF6B93F581638966723245583FD39207A3E1FB392C163EAADC2C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe8b7ca011cc9644_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
Size 301B
SHA256 b35611459522edb8744c159387316041f790e45c4ea9349b6dc6fcf1cb49ac92
MD5 13602e62710cf47e738f3087be58a6d9
SHA1 3fda38ef185893ce5bf4f0eae5ace2d92c573007
SHA512 e37b3d0aee74acaddfa945c3a1cef6d4cbd25c7c400440df95164298ce7f14ca11fd4f4eebacafc391d5968692de90f897a43c464cd195139e330ed7b8e4ab0a
TLSH
T195E0C2B3585E4076CE2984B9ED2FB6CA8602914C09CA91C65A389276D3108B59082135
MD5 SHA1 SHA512 TLSH

Submit Download

fe8b7ca011cc9644_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
Size 261B
SHA256 b48679b7733e0de351450fef46a6c63707e5e9290687298284b8134dd6a2087e
MD5 3b2fd6c1071a9501798e579d69a2f587
SHA1 21c8a0e62697be77fc2bfaea3dccacaaa95fb6e5
SHA512 1d0419ca147859659733f5156b85bbec39ea2891ee64d5dd6837dfb50dbc6b34797b94a7c8e1b05680a25394a5e8aa24455ab43c47dcf14352ee34b7300e5af3
TLSH
T1F0D097F3848EA072CC2E81B0ED2FB209C203D98804CE90C39BB580B2A640CF28284231
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 624B
SHA256 b2e95fae2c863b350f0477a197455d6d8fe6905544e74768efe9efea4e071b2d
MD5 b129d3f24a372207a1aaa39c07868dea
SHA1 3520244369203a6d5c4940e1df67b30efbff389e
SHA512 6032ac10221859483dc01ab96ad717504485b710c990635703ff56bb49f204503bc87823b2c4ca83ec41f04753915be14e577f3eeef3159d3dfc1e29067778b3
TLSH
T1E3F05CF171419836EF7406351CC51B1726185F89026907DF99C3C99820736F694CCCBB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 ed305bd1d2a36459a5b39f9b3a44dc9f9fa620b944b7e9d6e44990b63688b30a
MD5 cddc3b5840fe861845115a04af568d9e
SHA1 00a37a3ecfb3acec6c7569df356a120527ee4780
SHA512 ebeb468b751c059e041515a6b2b6add8357aab6e81ae297c9ec2fd1c457fe5ee295dbce2d4d9e5fd3280240ad005e79270645f036740c44de86596f2941d8766
SSDEEP 192:GvlK6BCv3wiB8l2EiQgdLI0bvmOrTnk0bqYqAsK/du:GSwlErbnk+dEV
TLSH
T160E12BD378D1D931FB296E3268F40A03253841A3C513CFCB2516CA2669132FA65CF7D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 05ab9b4bda6796520b43b9b23287813b24104f76f058960aed3e5fc2a132ebf3
MD5 6d3e629995458188721b99732b32195a
SHA1 c262856d762cd4c11eb9af77bf90efbe5af7d8f8
SHA512 44d17142b9d33a95c243e2f1690d156c823d3c3a10414fb4f4392c202e3bb36862031286b9d23523eeb7865e904359dc4ce2734d6715c8991213f8a1d210c9bf
TLSH
T1B0F0ABF23141D83BDF300A391C842F1726085F98026A17CE89C3C9C420726F298CCC7B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 30da76d7298a5817677af6c34ee70bc0ef224a80e3950c295cd3afc098d3faf8
MD5 64db9842151e0ac38d78889b789b83f1
SHA1 9ec6552474e650a29173bc0d4040df070fae26d5
SHA512 ef2a40bf8be9309789825912a5065346e1cb1c1574f52766ab879a6a2dcb00393670fa8af36296325c3a96583230d9395390b5e02e8cce9b2bf29893d05e9aa2
SSDEEP 96:ZvNef6FfffUbhukYiivU5ls2LE/QgdRI0qbDqk9Pt7CyKlvR85jDYJAepL:ZvNK6BnQhoiBDs2g/QgdRIJbDPltw01y
TLSH
T1AAA1EAE16CD15932FB29A6364CE11A4739380593C607CFCB6696CB3A25133FA018FBD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 68KB
SHA256 6f98381dc0e148cae96289bf429b7a067e5072fc46b3ffeb0075ece46185ee33
MD5 0352a2231fc6a16ce22ef5b1595d6cdb
SHA1 1491d0ba1e5cafe0211261be9531b37daf021a29
SHA512 5642618a5d93899ea6d8d1ce66c1fe62e30a167fd780975b5420b1891a03d4dcdaf24f7267e29bd0a3896e495ccc83bdc2bc0443b1600a436db4eb7356b8e810
SSDEEP 768:jDf9qhWsiTNnFGj/YCLrAnmhzvBF+slYdZiZqA4y/OvkgfJ:VqjXzuvd
TLSH
T18A638BF783F49A6DCD2261F86A263F1FCD6D0824572C787B89D86E1693E1431E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 57KB
SHA256 f5c72604a31083fd3ded9e5ae7db64abd40bb42004e31eb383152a072d65be11
MD5 389fbf2efc25bbefb0373b42b576c427
SHA1 dbe96c5ed1aa479250599ed3bfb93d41327cfd99
SHA512 f352a539b6dffc30291e6e32517c6caeac79c447ce4e6476cac510543b0d81eb718a05f37d1ebe3157c4e62cb090846d9580aa2168fdefc3256e0b545a1e780f
SSDEEP 768:KSTuWFnUFotFWEQdYg2n/nELJwnaEZ/hz6kWdpB:Senlzm
TLSH
T10E436AB3C3F4A9ADCE2261F46A663E1FCD6D0924971C786F89D87E1653E1430E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 06ca8d454f768242173697d80266d9c7581d00eeb89b0283662b101c8724373a
MD5 410ae8bbefbbacddc0690a37257985bf
SHA1 82881b477566eab9bbd09a3b9d4efaa56de3bb0c
SHA512 a5285004e54e90f897757f60a487783009f0f416f869cec05402374ae0baced9445d8267e96dd6e2589214131a389e0bf4097c09a2f887fbefc3115c93c14dec
SSDEEP 192:DiRuSdcAaIjiji9ALiL9K1iZICNPgaPefPkNNRivd:DiRuSdcAaIjiji9ALiL9CeICNYa2f8NW
TLSH
T1C3D16DF7C3E8C57D890155F49B256F1ECE2E0A24432C3C6A89D8AE1B93E2871D35179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 10KB
SHA256 612b8647dfeddc99786fd847b5dd2646e6c96646f72eb45e8850d8d97d5abcf1
MD5 7accd5bd82a2ce71a206df32b953db45
SHA1 ec98cbaf6a7363b031851bbbdee232e23d2586ed
SHA512 242e63083d826c94de16c91130919995ec5c9cae1800a5c9c91e63944d1170ae4144deb0d673cbc12c93a39d7951c13354f9898fffd8b4f9b5ae6f4c5df4937b
SSDEEP 192:0UVU1UzUNAUxUOUHqU6UXUJU+UPsUZU3UGU12UfDUGo7UFU9U8tUKUyUkUITUNDt:040QkAsblb2O7uswyfpAI7cYLt/bvTkt
TLSH
T194227AA796BEF42B113E68EF5E14B8052F7AF8350142A8F4EB96C26C70859F31B16153
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bc0d0fc4c0d7d5745aa44846f62b1a3d2a2fdda3d69a70dcbc21b549b218bfb1
MD5 7a5702fa4ac376e1c546aa174121077a
SHA1 98fc1f3c1c83433848cf92d54aa28d23f86cc8b5
SHA512 8c55af2c623954ea09fdef6298a6d454a55a7ac12f1fe37acf00b153d960b8fd43b5480540b5afd7bba99caf01282fe3757ba48360774f122453a254035dad2c
SSDEEP 192:TRqK3ZWDtQlCv7PhAPRp2r9YHsb+WNnHE0k82ARJagvXVyIsnAUge:TRqKJmoOj8XIWwk052ADaee
TLSH
T1E342C82EB918697B6DCBD329F9637757D7F5102121E02E84E6FC8A2C15EBACC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 702d964f9b529aa7d5e946125eed943dc685bd1fd072d046677d365e6634f8a7
MD5 a2c1e966e470523cd4785362f2e9df0f
SHA1 7837c3ab4544c6fa3334bbbd62b001ef40bc966f
SHA512 40047f854a0e982c1f506103f09c8b268bc9efe85efc1d02deea9d86c5bb60c1529707d0589db77e1ae151310710c2a229a9d37c5e155e6fa90a9693fe3b8c04
SSDEEP 192:TRqcBzW3ZWDtQ3zv7Ph2KPRpKIi7/k9YHsb+WNnHE4x/tnl2g82ARJagvbVyIsnv:TRqmzWJmmLjY8XUwWwk+b2V2ADaoE
TLSH
T1B252D96EB858297B6DC7D369F9527B57D7F5102221A02EC4E6FC8A2C11EBACC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6a1880673b1b86e0d94d8b8846fed3e045e6fb41685b3693cb3810ad082543b2
MD5 8fe6037bcc77041f4c87bc4746d98c67
SHA1 e73ed56420ae32cca8ae96a3c55525a133767f38
SHA512 a233bae86fbd7eb36c9fdc8f9539ca68db9e7c0f02fa9abab0a4e7918c2d4238cc97ec051e0e4de31383c35d94dffe9b09ae3b81b5a8a945fe63376bcc1f44c9
SSDEEP 192:TRqcBzW3ZWDtQ36v7Ph2KPRpKIi7Nk9YHsb+WNnHE41gznl2P82ARJagvbVyIsnv:TRqmzWJmmWjY8XUGWwkFp2k2ADaoE
TLSH
T14B52D82EF858297B6DC7D369F9527B57D7F5102221A02E84E6FC8A2C11EBACC2257017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 54b5a1cb0c422bfa437350209ef10b769d7c4ba11a6d76802499037bf3883e6c
MD5 11be3b09bfa56a29b55cf269b668fc3b
SHA1 538e1f6b2574c622fad252de3c237e558c066c32
SHA512 deec0881d1ad5714cb123541a8c726c68a99a2e50d1864100a2be22f24b28ffd9bcf96acbb50e239c50960d34f9f9b05447ceef7b3aece3f6043d8ffe7481551
SSDEEP 192:TRqcBzL3ZWDtQ3Yv7Ph2KPRpKIi7isMck9YHsb+WNbpZbBHEcLw9io+1qTnl2N6G:TRqmzLJmmEjY8XUuWwSvHNJ2q2ADaoE
TLSH
T14462C95BB854297B5DDAD32AF912B75BD3F5202221D01EC4E6FC8E2C10EB6CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d00e5197e524b63749f48de7f83afcb71d913b530214e955259a8b551b1f0752
MD5 b7cab0f516ca2358e4cca9614b843ed5
SHA1 4131ca07e0a711effbcc2693584013a969534584
SHA512 29abfb70456d39d3cf4192c2bcbe8404899dfb93e4408a5945aa4fe9400b9f0af286ea0c95638926839e22d92178043d0f6b1e6997e2fbc05533e5650e4822f4
SSDEEP 192:TRqcBzK3ZWDtQlCv7PhAPRp2Ii7d9YHsb+WNnHE47or20W82ARJagvXVyIsnAUge:TRqmzKJmoOj8XgxWwk6M20r2ADaee
TLSH
T11752B72EF914697B6DCBD36AF9627757D7F5102121A02EC4E6FC8A2C11EBACC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 dc6fe88474d3a72608ba2ca08df87fb50f39bbd5faec4c6165dcae8ba07c7f3b
MD5 aa218f696386f279e6fc5fd6024188b8
SHA1 1f5fca8d55f67421e036c0cc8d8f2f99f592518c
SHA512 898ad5a67aa488b2b01264ae88c6fa354774942e55039dc63279645a28dced3fb404d08ba871c2154c040a6211ddbc80839a76b0489ec92abbbb5f7dcd6a0b8e
SSDEEP 192:TRqcBzL3ZWDtQ3zv7Ph2KPRpKIi76ik9YHsb+WNXR0HEjio+x/tnl2f82ARJagvK:TRqmzLJmmLjY8XUGWwlFUb202ADaoE
TLSH
T17C62D86EB854297B6DD6D329F912B767D7F5102221E02EC4E6FC8A2C11EBACC2257017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 32e4b3cccc0cdf3da225a5c36c5f3daa331ad22b17a99eaf743d1c686d0755ec
MD5 ebdf3a6465be5eb7dbbb848f2e13928f
SHA1 4e25548670afbfd6d5afd9c1b53036d8f95e483e
SHA512 39529ed5a8aaa4f9c3679caf12f0a52a6b1c7926e6c94761e448274bc32a4047384c727344e9c3269b191ea2598169a11966194c2d1683e028620c9f9add02c7
SSDEEP 192:TRqcBzL3ZWDtQWYv7Ph2KPRpKIieVisMck9YHsb+WNbpirBHEcLw9io+1qTnl2Nd:TRqmzLJmHEjY8XURWwHvHNJ2q2ADaoE
TLSH
T1A962C85BB864297B5DDAD32AF912B75BD3F5202261D01EC4E6FC8E6C20EB6CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 f36fee2b65b2100ca4293b60821ec77f64e27b1d07a7045b6472db90a5896395
MD5 021828f479be7659b8a9dad7ecb18689
SHA1 3206e2fab720319c4cdaf9b90902dc6d7c5085fe
SHA512 4d36d2692b7c9b3de72ee93bf25d05a7275dab83f97ee61712fc3607ff446f4a76cc4a4dac4e3abc47c3f3455c6e21c26ddec4fe6c84c8c0ea85886318676a1c
SSDEEP 192:XRqcBzL3ZWDtQWvv7YI2KPRpKyugHPpsMck9YHsb+WNbLa8FirBYOvLwiPdtjB9k:XRqmzLJmHnsd8XnWwYUMrHj/2K2ADaoE
TLSH
T10F72C96BA4642A7B5DE6D32AF915B75BD2F5202255D01EC4B7FC8E2D20EB7CD2203413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 f24eef3348a9a99f02e6a7e5fa1a41026a85b0e837d3224299984edc3b81f1e6
MD5 a97e2121f3740efb4afe5825d54312ce
SHA1 0d3fa8dda9483bf5128feddae3058494b0ec58b2
SHA512 1f0ec4a943bc935f3cc2243b32edb67639445343fc309ab1ec74a3bf2a07c0b95809d88a208fc903da800ef111b081195c64412e9f5da74b9606b5edb4a92ff5
SSDEEP 384:0RqmzEJm5usd8XnWwrfoMrHj/2Aw2ADa/e:jmzEYToWwUAw2AG2
TLSH
T14C82D85BA9642E7B59E6C326F912B76AD3F5202251D05EC5B7FC8E2C20E7ACD3207407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 d9ac9b123d9d0b8426d4fa0381f89a12a65e2f3bfdeed3b2cea8e369274fbe58
MD5 916746065a514c465dedc34e8169fda0
SHA1 e8036278666bb3056c9d93f1366d581bf44e1e10
SHA512 222b42da829e514b04c386af91b4f01cbbb24c1f2539ee3665a5819cdaba6b979f59f5be03cfa436b11d57a171a55c11f30433f41e6777153c861f053932be6a
SSDEEP 192:XRqcBzL3ZWDtQWvv7PI2KPRpKyugHPpsMck9YHsb+WNbLa8FirBYOvLwiPdtjB9k:XRqmzLJmHnjd8XnWwYUMrHj/2K2ADaoE
TLSH
T10872C86BA4642A7B5DE6D32AFA15B75BD2F5202251D01EC4B7FC8E2C20EB7CD2203413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 25012f7ce5b1da863321b5ea97629c424df839ca5d8c5abfb88d7de27666ab68
MD5 a2bc1050662139a9376667c0b5c65bd3
SHA1 83c3305dfc83a123c19ad1adf1ded645ab670c89
SHA512 f8944e353076335753141d78870a9c8658660ccbe6e87c48152d76a566dbfad4bd40033b1810a7cc7a20e21e7c5906b2b110da566d1f987e4ac3386cc7441ae5
SSDEEP 384:0RqmzEJm5isd8XnWwDXoMrHj/2Sw2ADa/e:jmzEYPoWwESw2AG2
TLSH
T15A82D85BA5642E7B5DE6C326F912B76AD3F5202265D01EC5B6FC8E2C20E76CD3207407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 22722c7d91670574e51513e29ddcc9a89caa1b9256e67297cd0b4fdfa75e1d63
MD5 c1278f296dde73151bd770e66f064ff3
SHA1 eb778a1c5f1ee4b394e92fd41c0f781ddedf652c
SHA512 85fd0fd822d413a2582634eb7452d7e251124f0ea843b1840e438ac5e39641f14c49679ed0fe5aabc45e6d7ecd0c20a4cc6453d4cc5938bbe25adbde229eeeed
SSDEEP 384:0RqmzEJm5csd8XnWwDXoMrHj/2Zw2ADaee:jmzEY1oWwEZw2AGr
TLSH
T1AE82D85BA8642E7B5DE6C32AF912B76AD3F5202255D05E85B6FC8E2C20E76CD3207407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 be2fc74351b9e0ca566e792f4c0af78b4701fbd25ffb9cbfe31df8eee9ab9b1a
MD5 effbe144fcafd3bf62030bd74924d246
SHA1 5fc6dc09eab4182774e892b3e51f7524cc096b65
SHA512 af487b626021d538c3b887045cae64f2c3e07b261d321fd5754ebc7f9331eda3f36424d2b0a1dc4ca4ed9fa980e56419bf97111f9dad7aa575434cf62b78a8d7
SSDEEP 192:TRqcBzW3ZWDtQlCv7Ph2KPRpKIi7wL9YHsb+WNnHE47or20082ARJagvbVyIsnAI:TRqmzWJmoOjY8XUyWwk6M20J2ADaoE
TLSH
T13E52C82EF854697B6DC7D36AF9527B57D3F5102221A02E84E6FC8A2C11EBACC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4438812d966e1d11c2f4b4dcd5703934145668a842e5f18c309b93e6cd0ba09c
MD5 1386314059085d62a9101bbf1a039b65
SHA1 c0c9d9db0103f0aa592eb50b557e1c7af59924f0
SHA512 f7b9944b5b23df4170a875adebfb1950f8d576c4adda2b26467f584019e888c6a674a0a567adcf681cb9c5f7c120924ecf6d54fd0463d975b4fb31a520df19c2
SSDEEP 384:bxj3K7KxkXqKf/pUZNCgVLH2HfgslcP7pLuLcSjlAXOD3u+ErU3KMHGu/g2kRm:bR3K7KxkXqKf/pUZNCgVLH2HfgsmP7pS
TLSH
T1FF72F967784C9E370F94CACCD8177B4F9DB5015B65E9886483FA581903D8BDE11092FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a9ef170327ea79f6b773f7f6340489a76c715684c0117e183616e49171d5b956
MD5 b7eef7b29d7a82a0fbbc1b857cbe8416
SHA1 30c4c020dd6a530eacef9a0e09a0280fbc9695f4
SHA512 c655d905f50b069bd0e1071aad272a9257b5aff14e15ea661b622755e296ec951e42790d2b543a6c8f1af94240619562bdd69d48dc8794d8801a2b6d7730ac1f
TLSH
T1CBB01210C0015541C45303F015926488B3249F10970B370143E0ED23C829162C018190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587819.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587819.TMP
Size 96B
SHA256 e7dfe565fa89c740e005f4422780ca4030daccf79fb65b969cdcf6f8f50b6f87
MD5 fa1bf44bd171d0c4b8def5822c11b2a5
SHA1 c9787fe0627929f7a360b11d8b0c1ef7abadc5e8
SHA512 dc487edc7d290e6ddf4a7053c73b5c322019334cd8c07d05367f45c4aec2cd250f234910e47f5ae3a7c0d540a8d68f281443d1e82f195c0c789d930394f58186
TLSH
T173B0025AD5066A12C44243B02F9696FC7160DF35C603625292F06A67EC66A7245291B0
MD5 SHA1 SHA512 TLSH

Submit Download

50a7a86e5f9958d1_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\50a7a86e5f9958d1_0
Size 63KB
SHA256 f4199ead6cdb5f037b70da6209e3ab222b0692cc23bb7c79d772068141ae5f0c
MD5 b069d7cbfdd3719bdbd3e9c08f4fb86f
SHA1 c483ce0af5347481d365333e9d2bdb3aa1ab9812
SHA512 c20105a73226898d2791cdaa76604bb6a3801fefbf54de72732467b6e970f3bdc88d174ad8df2222bd5e775332ed5754de40e861b5aaded51405cf22e5c9b54d
SSDEEP 1536:9my3ZRdiKuQ8hviJCQAyRi73bA4Fqt1xDYPi/4i3io96:9my35iBnhYACi7384gii
TLSH
T13F535A963321B4B3837BA1B1906F1307713FE1A7F40485E8A198DDF15A94AA9427BF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 df75a47eb0158e9f85f67213bab9ccd3d8b37e7325050ba03b16d0abb7abb259
MD5 4ba0d9005ddd3a8a969dc06651367355
SHA1 097a3947d817d406c229537d16cb9ccc560f0a86
SHA512 dd5b6f7b395e9c64b63c09ebcfce95fbf1ef965792ad06033daa6669b276d983dbe367ceb9ef9e7991502434093676106b79bbbd667ce64b1cdd3af2e6f972e5
TLSH
T1BAB0228800000203C2C083B0B3C0ABC033223C3003033FE2F2F38B0AFA202888B22230
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 144B
SHA256 c25530d640e16c8fd1bc898bf66d499067738fce855e0017d1a8d0d1bed52a06
MD5 576b06d8cde31e29b91c68e86f0abbc9
SHA1 4a6c5e25b58cdad19beb8e4ba9694f97082637de
SHA512 1874242530c8d90b86a2ced5d9cc062f6b4b748823c13ac27cf15925d1400ec5cad8f2dab174a2dfac921c57fdfd1e9fd66124b61f05a620d69deb0c67d7d483
TLSH
T1B5C012E58054320ED0112F705BD252C433542FF2070A4FCA83F64786718A5438631378
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 150B
SHA256 92243670eaf315619122035446cdd72ac3efc1e3aea59a2a1aeb54533447d425
MD5 e4e6e52f54ab60599cb2351e2a212d28
SHA1 401c619f9480e58eeae5950920616f6da899404a
SHA512 6c2c557ff9679120784e4b9195f7710003379baada150fb9209edc7a1ad81571fc82324858c7171eec39a9018e3bbef485168e5d475ce1db283ee3290935c645
TLSH
T1FAC08CE34610408B4A78DDEC101C722CE117468C8CD0CEE8980881421138A370002438
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5b974b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe5b974b.TMP
Size 157B
SHA256 e1ff31c45a3748cb67b301aa9cf67bad9c09e3d00bbe7c861dccb593e1e89abc
MD5 19e27fbd9869d7b8002cea26aeffe204
SHA1 5806977166b938bec4d9b448bd01c7cea8d6300c
SHA512 985ac06d638c50e6f757d0805571b4f9073afb16e06c047506c88b60bda07a08cda4e7493ddfc6b2f9efa7357bfc3c3f2b3fb69644cf999636536e6bdd0a6e24
TLSH
T1CEC08CE3062000874B7498D8102C726CE1274E8D8CC0CEE89809F1022138A374001439
MD5 SHA1 SHA512 TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\IndexedDB\indexeddb.leveldb\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e1e4aa4cce1dbc3c4a2028bce58aa00b216edcb958f5d664fb7e2b47b9f4208b
MD5 f01e0eddec377a4e87cd466ed86177cc
SHA1 455ca915335eb19c8ddf8373cadadba3fdabff38
SHA512 f44f46ab6db12ad34231d5412e0f3c93746c3a08a13179e419e2c3767f4457eb6b7c3eb289850c37a2af88f5669d52e2e501f9ada74f84c3bc5908002b71c6e8
SSDEEP 3072:5dJGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:5dom7Rkm1tYpBeh2BAoa
TLSH
T120C3123B5DB4A8775DB9BB4EB08E0A1F1DF149A6C930DE51C8D85F0423EABCC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 17431ef4894c3fc8ed9660958af8ebd9e76c51af961ba117045389c830d2b359
MD5 c82e3fcdeaedba1a2c94958df06dbaa4
SHA1 ab3d9ded8c90194a1f10afd164c72134124b3719
SHA512 221ee60ad6843cf7be4bc6314b6882c8e9f5e137d52027e7d50cb6dbb7821aefdece21bd2aa80e20b73c2a80cf988f37c3ecd37d4fcdaab3d5183e35799db3b5
SSDEEP 3072:6TIuGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:60pm7Rkm1tYpBeh2BAoa
TLSH
T162C3123B5D74AC375DB8BB4AB08E0E1F1DF149A6D934EE51C8D85E0423EAACC0945A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 15fdcaf0b034a07d87e488f2f3f0c9d86263537d6c6535a7d8f82790975c4f64
MD5 6a7a679d74f2ba2787b54a20bef849f4
SHA1 8513e0bc79dae6eb15b5299ea4e1d389eeb5d28d
SHA512 17a2e256ed7e5b46907cf6ac906fa25629f34c33f2f7d34455ada5c2ecfdc837e561a314268f8f6408ec94172147dc5f9d8fe3747344010b43f0ec9c2f3f4364
SSDEEP 3072:2OGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:2Jm7Rkm1tYpBeh2BAoa
TLSH
T107C3123B5D75E9375978AB4EB08E0B1E1EF149A6D930DE92C8D85B0437FA7CC0944934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 26e7b2543f755d6b340536d9c49282ec5459e8975c120d2edc772c433bcfc99c
MD5 e4c494c3f611167d743948f3940ded74
SHA1 02542eeb6e4b17326f44c4542a0ce0e851778b70
SHA512 3b5ed373a1294b67ff56eb890133e8e1114984a3d820350695c470588cf2b5be7bcf91e98da9a2f4db1afee733eb19510d668c86c5dd803444e682272774029a
SSDEEP 3072:GJIuGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:G+pm7Rkm1tYpBeh2BAoa
TLSH
T1E4C3123B9D75AC375DB8BB4EB08E0E1F1DF149A6D934EE51C8D85E0423EAACC0945934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 310KB
SHA256 d450d6ed2420871e15d07d54bef0b796feb522aacf806ef0e41bc944ccb51424
MD5 024421056454d3da3d2c36f1e73b005d
SHA1 2870305c44bbab34f52c7514aa216f5d0f39bb03
SHA512 e8842399276609886d1959f249b13869b3ae6706e748fe748a76104d1e017b95f877f3d82518e7e5edf5b30b5be1a37842a28bb28e3cd04a3ffb3b340141bf6c
SSDEEP 6144:nDA6rwAKO+FUceZVsvtMb8gmYSpyMfCOxCm7Rkm1tYpBeh2BAo+:3rwAnNovtMb8guNfCOL9oBGcAo+
TLSH
T1E0642375ACBEA43A0E086F9D704F1B1A0EF1DD224438D583C8CC5B8172AE6DD1667DB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 0edf57385ef5862cce091b4cbe19ccc4e4676f1a967c2db7628400850a926a61
MD5 f1abea6e555052206c91eb118a99a6a8
SHA1 d64c4610dd3747fa025acc901ab7b7b7c5e51b34
SHA512 ce1b2b194a571bd6b2ad38efae09d1bc507eda4dda2d2d028c9ca2a5a712c1e5b21dd8983b932ed5751f0d17d5e99a9a5562f125c677e7d922314899e1b5dbf8
SSDEEP 3072:GxIuGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:G2pm7Rkm1tYpBeh2BAoa
TLSH
T1DEC3123B9D75AC375DB8BB4EB08E0E1F1DF149A6D934EE51C8D85E0423EAACC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 e31f420c7dae76f69c3ff1873a1487466b5250a6aec6e9f79eabbbed6002f2c9
MD5 b8bd11ee95270bc9d5957c1b3d3bc3b8
SHA1 cb12a2fb07cd5704caf8280d2b6cab9b46eea04a
SHA512 c1e954f0fc592111a8a44041358c3b76adaf4a5e429adad844591d2b06f17ecd2ec23f50b05951af2e504c94b3ad8b4dfeb8e60e244578d26ca23120d8f9ca0c
SSDEEP 6144:nHIeZVsvtMb8gmYSpyMfCOxCm7Rkm1tYpBeh2BAo+:LovtMb8guNfCOL9oBGcAo+
TLSH
T104342336ADB6D8370A5C9FDD104F5B1A0DF18A53C538EA52C5CC1F8935AE39C0A46DB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 312KB
SHA256 188ff38a1685b74769e38d90e4d816a2c150b069160eca65c72055cface03046
MD5 74813e6da0bd73a682d3c6ec55110fce
SHA1 9fc90c15a448ccdb9462bd263f3a720317fbb932
SHA512 01b79c97b6fce661b32742d0983ff2f7135c360f7271b90e527763b6c627d6fd7f22ab83b30b0dcfe669af683bc6af7ec12afb9b5be505b504012168d700aeba
SSDEEP 6144:nUA6rwAKO+FUFFeZVsvtMb8gmYSpyMfCOxCm7Rkm1tYpBeh2BAo+:KrwAnQovtMb8guNfCOL9oBGcAo+
TLSH
T183642376ACBEA43A0E182F8D604F1F5A0DF1D9634838E583C8CC5B81716D6DD1663DB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 02a7b6bac83cc3eb89b34523b9ccd69088f31b0865b190389390cd15fc71c55e
MD5 bba9c7be8994adc9c2fa3ee182b84c97
SHA1 be92f1ed9c451a024999f49fea27a470246d7c38
SHA512 85ad0fd58d6cdb7bb55487062b1841408cc4db04a0d75ba051f9d52ee8f59f03ff5b151b6f1369ba195bf7de315aa72b74927acf64e44f6fb2783b521c7da7b0
SSDEEP 3072:6e9AGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:6e9rm7Rkm1tYpBeh2BAoa
TLSH
T18EC3123B5D74AC774DB8BB4AB08E0E1F1DF149A7D934EE51C8D85E0823EAACC0945A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 47bfd0a27a53d14babac7d90d2abe8b7d7fd3ed086e98ccf6497d36b7e1d1741
MD5 dcc0e77d101b7143e6176b8665798983
SHA1 11a8dad1276e898dc42140a1356f49c2f1dc73e9
SHA512 55a01100f3f14764d42a6e8064add80544ede1ed29a5bed257ffdaaf6b05336fde92c459e79cfc271151a1c425429c5658d6a2ba9d552cee40171597b412803f
SSDEEP 6144:nk3eZVsvtMb8gmYSpyMfCOxCm7Rkm1tYpBeh2BAo+:LovtMb8guNfCOL9oBGcAo+
TLSH
T1A6342336ADB6D8370A5CAFDD104F5B1A0DF18A53C538EA52C5CC1F8935AE39C0A46DB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 865b1b3efdc3d2e99b3bac7d9af6f591e0d7ed2b88609e880e7095faaffceab3
MD5 05e70418eb793f329aba2e6011827cfd
SHA1 9651750a2363a4174da1e61944f5a3a1b0fdfa3c
SHA512 7d4aff649e02eae34888a4012f3f660a5269913bb2f768b61ece9b33a9fd859c601d1d4fd6d0dbda39e5885c11b9597b5f1d2c648c6054ccc30e10194efdeec4
SSDEEP 3072:G+KIGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:Gbjm7Rkm1tYpBeh2BAoa
TLSH
T169C3123B9D75AC775DB8BB4EB08E0E1F1DF149A7D920EE51C8D85E0423EAACC0945A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d9d2723c3fb1c827d19ff94fc1428a54eb307229763546f53f590566d20a25bd
MD5 91f5ce361912e6c4a55924604178c80d
SHA1 73f0e9ec02419ca2bfadfdd7775223a007d3a3bb
SHA512 4b4c1b0ff1361f8e887687015ed6ef85d0aff78ca6ee1642b77b6c5d67e430468717eb06f32b221ccb72553b6e2151f44007eb0d4f76cd33e08c55bbe508008d
SSDEEP 3072:6dJGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:6dom7Rkm1tYpBeh2BAoa
TLSH
T1E2C3123B5DB4A8775DB9BB4EB08E0A1F1DF149A6C930DE51C8D85F0823EABCC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 2301e8ab8e51504f840b4cbfd722a1433ae635c52b5861edd483abdf0de5b2c1
MD5 e266c8f825c4123ab897dabdc16431f9
SHA1 121ce0badb3dc72bf0c8c649be40aed73734fc20
SHA512 a80d1195063bcb0db7cfc2aea64551ef4e51c05c0e88e1b8f8d77c512c23889724c1862c09aec68aa7ea561ecc01c3e633d1c91b4791d2190c42824c65fa4b6e
SSDEEP 3:MsEllllkEthXllkl2zECllh:/M/xT02zh
TLSH
T15044040C7FC00505C50030305011C7501370D4105F3357C3745354135CC77501C05034
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Compat.browser

Path C:\Users\Admin\AppData\Local\Temp\Rar$EXa5776.35895.rartemp\People.Playground\People Playground\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser
Size 1KB
SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

Submit Download

DefaultWsdlHelpGenerator.aspx

Path C:\Users\Admin\AppData\Local\Temp\Rar$EXa5776.35895.rartemp\People.Playground\People Playground\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx
Size 59KB
SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
MD5 f7be9f1841ff92f9d4040aed832e0c79
SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
TLSH
T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

People Playground.exe

Path C:\Users\Admin\AppData\Local\Temp\Rar$EXa5776.35895.rartemp\People.Playground\People Playground\People Playground.exe
Size 633KB
SHA256 58d6fa2d9fc857d2a8c2677c1f68bbb764a8dcac09ea1feb10fb5b0d9daf6687
MD5 d3176c4fe04dfe5e39d0e0c589d1f2f4
SHA1 747bafb22c6225ed5f4aecb7bf8f88d3c9a40bae
SHA512 472e5e6bc8c3b0bbbaa42ec966d6db7406e0a664935ad0d980cf1ee3fc3ef140ce3867a2e72a83648c4f0ee20209aec9d72635d9a3c779df29fbe5e0efa8eea2
SSDEEP 1536:zNWYLV0OVmEAzFYASPj2haSDeWd74sWb9dl4L3rURSGxm4VL:zNWk8Eo6ASPj2dy8cmH34Z
TLSH
T141D45B6E190340EAC3B8A07647B357CB4BAC9597E76CC23A33D19912E59EC1F7908B17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 8KB
SHA256 626986a895c898295f60ee6c2ac4ead9fcaab71d86982f2b6dcd9067a0fd3a10
MD5 56bbbdd13560daf66f0a7e0f133239c8
SHA1 f8a1933ff7277d5cef0623f3b62281d3e051de23
SHA512 5682f715e22b771ba9cd8b28d630fc56ebd68d29afcd4498b9c58291d61ede3bf8ead202a0702c223c42849625d61294fffbd28e71d38ed331d7bcec536f21a5
SSDEEP 96:QuKuZ9ZhRJ5AcFTfFINawwuSQy7pFX7dzczRYrxSgzz:Q67QSpwhSQev5czRYrcK
TLSH
T1EB1211043BFF1645F1B3DB727AF13711AF7BF922960A5D1E208183094971A119A94F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 11KB
SHA256 9a013919f3e1519974082427948fd6940191b7bee5739b8e39d84a408ea54926
MD5 c5445d73e28f4d155c845bd7252bfe7a
SHA1 1bbcecf0f7b8211cc1052ea4e2d0a8f8e3a49f92
SHA512 8c8c2744017a084e9889f91d532b187816f7a0cbe8654fc6c5b0e336223c8d175bc90bdb340f55d45b9396c807fac19a21a315ae18ce625f8dd187b06ce8127f
SSDEEP 96:pfZE3voFAPsfuKuZ9ZhRJ5AcFTfFINawwuSQy7pFX7dzvfzRYefx8sgzz:JZ8e67QSpwhSQev5XzRYkLK
TLSH
T19A3212043BFF5646F2B3DB727AF137116F7BF822960A9D1E518083094971A119A94F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5192-2681-0x00007FFFB1940000-0x00007FFFB268D000-memory.dmp

Download

memory/5192-2689-0x00007FFFB1940000-0x00007FFFB268D000-memory.dmp

Download

memory/5192-2644-0x00007FFFB1940000-0x00007FFFB268D000-memory.dmp

Download

memory/5192-2641-0x00007FFFB1940000-0x00007FFFB268D000-memory.dmp

Download