Analysis
- geolocation tags
- user interaction
yes - max time kernel
899s - max time network
618s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
01/10/2026, 17:46
General
- Target Screenshot 2026-09-29 134143.png
- Size 22KB
- Sample261001-wcnfkshd27
- SHA256 745df1f36e802384501b7a8268ad921056ac8bba00c78b4ec58ca732975b0fd0
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Probable phishing domain 1 TTPs 2 IoCs
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
- Checks SCSI registry key(s) 3 TTPs 14 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 3 IoCs
- Modifies data under HKEY_USERS 7 IoCs
- Modifies registry class 44 IoCs
- Suspicious behavior: EnumeratesProcesses 8 IoCs
- Suspicious behavior: LoadsDriver 2 IoCs
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of FindShellTrayWindow 35 IoCs
- Suspicious use of SendNotifyMessage 16 IoCs
- Suspicious use of SetWindowsHookEx 5 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Screenshot 2026-09-29 134143.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵
- Checks SCSI registry key(s)
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffb456ac728,0x7ffb456ac734,0x7ffb456ac7402⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1848,i,3509548296630515743,3275042991022291615,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:112⤵
- System Time Discovery
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1624,i,1915699156285180153,10840735401376770863,262144 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:22⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,4931080966317652066,2674651404904635989,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:132⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,13983770255112566079,14296867738182338058,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3340,i,9543486952215592117,3862440903282530352,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4732,i,6773049443937620428,14369519803653695596,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4916,i,3013882109738137834,4658131133592996487,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,6344299816796621568,5379070277022086928,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5520,i,15739804500570996493,6420973888424953006,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5560,i,6527583303298353634,5529284395317642596,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5552,i,15825005304759327146,5099194312712490190,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5556,i,7187143302038645632,3625392600648622448,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5812,i,15546372623044578092,12425074614277273785,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6260,i,8022345684792199831,16912238695405604185,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5568,i,9406265004356054791,6734891233574305769,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6252,i,17286678084528185516,10761322237866043722,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6620,i,7996392778559549040,2123824529797690458,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5832,i,1066670233906449835,9186580103976918345,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,17917059908596280378,5175916293668359677,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6456,i,4684924235390991814,13905559937978395452,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6444,i,17798895572445429989,12946265597691633903,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:92⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6508,i,7375589154914782517,17367757732120793688,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5624,i,16606209487559680391,11327468483283462479,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6104,i,16006135962411243190,11832541393560821927,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5944,i,1842859980334982292,8975806754284615745,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,7917419388676520273,6816945055947820200,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5096,i,12443307756314986437,1882879413568711447,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6964,i,9494371043264735096,10988409799441232579,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6952 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5920,i,18272414464781775994,2756670390084545292,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6044,i,1637096938694502755,13796806182388638358,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=5644,i,14472273638337441203,4226886080068171201,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=3620,i,3167892944528673632,11611593121901328941,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=2920,i,12350311769442364963,4149000483840017066,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6812,i,13945770520401687245,4148598154794684188,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7048,i,7964166761261805803,5546201942182994661,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6412,i,14040800917820917793,11257173479413598940,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=5592,i,10075522636534572777,11448845936867754058,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5828,i,10221916522372225821,4649184590718007849,262144 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=5796,i,6556322867221444035,3847750701717760796,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=5912,i,6142681878553609224,881558308627130578,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=7364,i,6309798407091893079,3294881800304526334,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=7328,i,2145206897624997795,586603307744277589,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=7532,i,10482482298311527919,2517225025924151723,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=7720,i,6636742731361317979,1300328508725335452,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=7860,i,2853391819541140365,15784294164519367996,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7888,i,14069536227039172028,18340972533927036172,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=7392,i,6192740852194466425,4230604913219355570,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:122⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7348,i,13491580677762741517,7390088557808715590,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:142⤵
- Modifies registry class
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=4784,i,10950037931508325876,5562064647597296703,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=8008,i,15305418816034016590,13636771668741595179,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8000 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=8304,i,10620378768183700597,7817434953433283141,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8340 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=8164,i,7773450166199926822,11247380274613667261,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8596 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=8084,i,18084367827200842503,4785395147531571342,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=8660,i,10996064325682028386,3262151631250833673,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7832,i,12062183355056041314,4486704048504462149,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=6680,i,7877068373431622342,8162360788560944271,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8296 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=7592,i,13875548143381277307,2056560884324568202,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8420 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=3148,i,9805893683761403477,10987732657795097039,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=7632,i,14978980181670991496,13516947018242898004,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8512 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8540,i,13731249734186423450,3455846842096336104,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=6352,i,678539019195588688,5697529653455645619,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8632 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=8556,i,15609924563072366423,2527711118512853076,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8588 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=8128,i,219232333395088976,15554593681045469735,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=8600,i,8549703232190016835,6167636016427920780,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=8752,i,5423907845252074178,4829060919841676947,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8492 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=8844,i,8873093935157281243,13363759895534363001,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8812 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=8960,i,16965696952581305288,12334177533390952374,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8772 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=9048,i,2053267578827215584,13273795281921074269,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9032 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=9264,i,554857802135383448,15579259717200030492,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9000 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=9412,i,8291721552925141661,4789302854391246074,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9428 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=9176,i,4501999656253864662,4969369382704486220,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9556 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=9580,i,14577413211743900047,9111888999413334817,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9284 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=9800,i,12385651416261643888,517043182449961470,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9808 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=9956,i,10013849734552509094,5974247822677974886,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9964 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10196,i,7322606939860639290,3064413761036360420,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=10280 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=9688,i,3290948683394358823,16312185550230614648,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=10368 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=8956,i,5410864031824562585,4005596075617816171,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9836 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=10008,i,5102357701754556485,18177960996551821294,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9980 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=10028,i,853839763953508931,10703789883544952288,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9544 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=8336,i,5391761114926373434,13944549479593680874,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=10308 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=8508,i,370048013578891042,14607058531122387966,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9892 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=9472,i,9589142305926602087,10760651867764609429,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9876 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=8544,i,18350004256214009014,10995478736691709174,524288 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8252 /prefetch:142⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=9036,i,6684958334334440684,16884311196973141082,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8824 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=8092,i,6778017307218683516,1122277658061519404,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=8736,i,4326964219268786740,2693205822625676453,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=8696,i,4791585056803242651,7051556293858868565,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=10008 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=7852,i,4253804388929436703,7923472434355525436,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=8228,i,9115129313538673327,16827537863697295343,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9552 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=8668,i,17712088882238026453,4954716362933352381,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9896 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=7632,i,840669636151117414,11454450191628757100,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7628 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=6344,i,14383639767470953900,9540768091630322517,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=9440,i,13596717037147470199,3296374559060771369,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8184 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=8652,i,17630275651511465352,12148355227988372549,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=9668 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=10372,i,4003737387144997044,5621135809251090377,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=8008 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=9180,i,3761447255491595943,3297246035620754090,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=10020 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=7548,i,1722260593110372569,16799803435264022566,2097152 --field-trial-handle=2072,i,4187296866749233218,3605766829147929888,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc1⤵
- Modifies data under HKEY_USERS
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
2b81e32f-e98d-49e8-9e7a-dbdbd9104cf9.tmp
329ff52b-9733-4e2f-80fb-2a0c0ed456d3.tmp
48bdc77b-d764-49a1-86ab-be3cef90ac96.tmp
50fef0ba-31d8-481c-b62d-d07e26be0a12.tmp
5e039627-7a2f-42ed-950e-731ea66fb68a.tmp
6cd088eb-3fde-4168-a272-b16fee824a4e.tmp
9bc3f7b1-ec8a-4533-bdb3-e13e256bdfad.tmp
settings.dat
085f2885-0120-45cc-9c8d-23006ca6f710.tmp
0a791289-d841-4cfc-9dc3-bbebacd6ec28.tmp
0b023c2e-ccd9-4fa7-87c3-1527615e497e.tmp
111d1dfb-7e20-44fa-94ef-227fd6241a38.tmp
24cac039-0754-4eef-a0a2-bb88efb2abc3.tmp
30515cfb-07f3-4de3-a231-543772020c46.tmp
4960eb09-0b05-4c18-84d2-caab64687b11.tmp
4cdce4cb-6ad8-4167-9e20-00ea72e193a1.tmp
5fa045e2-6a6f-4f3a-9382-85100ee4781a.tmp
60c49a6f-b379-4569-8249-b3d4369daaa5.tmp
6cb44d6d-f7a0-4c7a-90ed-075c5beccf35.tmp
76df4d97-f180-4a76-b5dc-a5b039b3d6c3.tmp
875ea883-bce5-4500-bd99-2d0cb5e6c98e.tmp
883245dc-1d68-4d99-a73a-210b48e5f3a6.tmp
99f4ad47-92bd-47d9-979a-69b40361a7c7.tmp
f_000004
f_000006
f_00000a
f_00000c
f_00000d
f_00000f
f_000010
f_000011
f_000012
f_000013
f_000016
f_000018
f_00001d
f_00001e
f_00001f
f_000021
f_000022
f_000023
f_000024
f_000026
f_000027
f_000028
f_000029
f_00002a
f_00002b
f_00002c
f_00002d
f_00002e
f_00002f
f_000030
f_000031
f_000032
f_000035
f_00003a
f_00003c
f_00003d
f_00003e
f_00006b
f_00006e
f_000072
f_000073
f_000074
f_000075
f_000076
f_000077
f_000078
f_000079
f_00007a
f_00007b
f_00007c
f_00007d
f_00008b
f_000095
f_000099
f_0000a1
f_0000b4
f_0000b6
f_0000b7
f_0000b9
f_0000ba
f_0000bc
f_0000d1
f_0000d2
f_0000d3
f_0000da
f_0000db
f_0000dd
f_0000de
f_0000e2
f_0000f6
f_0000f7
f_0000f8
f_0000f9
f_0000fa
f_0000fb
f_0000fc
f_0000fd
f_0000fe
f_0000ff
f_000100
f_000102
f_000104
f_000105
f_000106
f_000107
f_000108
f_00010b
f_00010c
f_00010d
f_00011b
f_00011d
f_00011f
12c72577e48b9978_0
156310efc1d389d2_0
601c82455ed4e819_0
d92bce620bf74a24_0
dd905130e461ec2f_0
e4ce7a8613b25707_0
e6be11525d0cf79d_0
e980c6bcd5d294e7_0
eafc918f5ff885c0_0
temp-index
temp-index
temp-index
temp-index
the-real-index
the-real-index
the-real-index
the-real-index
messages.json
craw_background.js
CURRENT
MANIFEST-000001
000003.log
LOG
MANIFEST-000001
24fd892f-579c-48c5-abdc-134ea7074414.tmp
6cb87094-84ca-4e98-8a28-282d8639ad24.tmp
7aa328cd-0024-4576-9365-d46fd8a5a8a6.tmp
a34cf02d-474e-4825-a7f9-633084c4fbd2.tmp
adfb87b8-d3a7-4bbd-a523-dfba3f7f18ff.tmp
cb1b5f6d-c64f-49ca-bbd3-d32adba48bae.tmp
f33f3a8e-59a8-478a-9ac5-fc35e9803866.tmp
Preferences
ba23d8ecda68de77_0
ba23d8ecda68de77_1
temp-index
temp-index
2e362717c6d5ac19_0
8a8d1e89b711a045_0
93d012e779e61daf_0
ef009a4ee07393e7_0
temp-index
temp-index
temp-index
temp-index
temp-index
the-real-index
data_0
data_1
data_2
data_3
3a9949b5-bfea-4a6c-91d5-3ac9313b4b64.tmp
Network Persistent State
index
the-real-index
index.txt
index.txt.tmp
index.txt.tmp
index.txt
index.txt.tmp
a28c7a4b-12c8-4174-be7b-8481b55b88c7.tmp
a4393b8f-67aa-4597-abfe-9e890efa23e5.tmp
caf3a69b-dc86-4e8f-bf85-9a8670279fb1.tmp
d22e6e8f-350c-466d-a00d-b9acc67ffacf.tmp
e0a21285-bb02-4fc6-abdc-153679b78be3.tmp
e6bfe750-614e-43d4-bb9d-158d11b23e3d.tmp
ef8d681f-5d46-494a-b72b-9c90c576c099.tmp
Local State
b08cab8b-6fc7-4169-b452-c08ed31d194d.tmp
be5f4189-8205-48e6-87c5-884f1cb8d217.tmp
c0e5a0ef-c752-49f1-bb7c-ba9fd5dba1b5.tmp
e1a249e2-c98b-44f5-8fa9-a353f9446a54.tmp
e42dfd58-ed31-402a-b0b9-ae4c161fb155.tmp
efa36136-7a5f-4612-9569-8982d0f92d0c.tmp
8b345a3a-d755-4762-b322-bdabc2cf2895.tmp
messages.json
4OOIQ52SEL597MR4CE8G.temp
5d696d521de238c3.customDestinations-ms
5d696d521de238c3.customDestinations-ms
VJOJPB7O78X1UNCXSHL1.temp
W4LGYEQBZNVOMSCXCNGN.temp