1aa9a8137866fbd57a2e64568f525f7faece5f4dda43b1c56ea30345951dec86

Analysis

user interaction
yes
max time kernel
509s
max time network
511s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/10/2026, 19:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Rays.webp
Size 18KB
Sample261022-xs8bcsbc99
SHA256 1aa9a8137866fbd57a2e64568f525f7faece5f4dda43b1c56ea30345951dec86
MD5 85bbf6172b0153e8f7e672e45b9167e0
SHA1 b1cbc29b383f4c2b736abf65b681ac3d7e765334
SHA512 f64d461acf7056982bef37a45c1f956685b0a06af08e000603eb07b2cfb8bbd2f87ca63d8dabff860474883ca24fa67f2cab1ce0e01e6ef8d389f23e7cfe8a9e
SSDEEP 384:ond5KTEuTFEjdYYS4PSycx+A3GhHC/PseqTHncQsTTIH109aHWhToKos:Gd5UEucf+EC/EeqTHcQss1HWh8Kos
TLSH
T10082E14A3984DE2CD8D89E0630D4B6163549F171E3670F0C3FE4557568A9FEB84B531A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
359	raw.githubusercontent.com
366	raw.githubusercontent.com

Probable phishing domain 1 TTPs 1 IoCs

Phishing

T1566

description	flow	ioc	stream
HTTP URL	282	https://www.whatismyip.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a4eace0a9bed4eab	3

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3988	msedge.exe
4620	chrome.exe
6028	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{521043FA-3B57-46A6-92F6-4C43863E71F7}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{C72B4A96-C758-444C-A7D9-7BB77D74B9C2}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4236	chrome.exe
4236	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
7952	chrome.exe
7952	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
652	Process not Found
652	Process not Found
652	Process not Found
652	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe
Token: SeShutdownPrivilege	4236	chrome.exe
Token: SeCreatePagefilePrivilege	4236	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
4236	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe
5916	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 2084	4228	msedge.exe	86
PID 4228 wrote to memory of 2704	4228	msedge.exe	87
PID 4228 wrote to memory of 3988	4228	msedge.exe	88
PID 4228 wrote to memory of 2704	4228	msedge.exe	87
PID 4228 wrote to memory of 2704	4228	msedge.exe	87
PID 4228 wrote to memory of 3888	4228	msedge.exe	90
PID 4228 wrote to memory of 3888	4228	msedge.exe	90
PID 4228 wrote to memory of 2300	4228	msedge.exe	91
PID 4228 wrote to memory of 3604	4228	msedge.exe	92
PID 4228 wrote to memory of 2300	4228	msedge.exe	91
PID 4228 wrote to memory of 2300	4228	msedge.exe	91
PID 4228 wrote to memory of 3604	4228	msedge.exe	92
PID 4228 wrote to memory of 3604	4228	msedge.exe	92
PID 4228 wrote to memory of 3508	4228	msedge.exe	93
PID 4228 wrote to memory of 3508	4228	msedge.exe	93
PID 4228 wrote to memory of 3508	4228	msedge.exe	93
PID 4228 wrote to memory of 4148	4228	msedge.exe	94
PID 4228 wrote to memory of 4148	4228	msedge.exe	94
PID 4228 wrote to memory of 4148	4228	msedge.exe	94
PID 4228 wrote to memory of 4128	4228	msedge.exe	97
PID 4228 wrote to memory of 4128	4228	msedge.exe	97
PID 4228 wrote to memory of 2244	4228	msedge.exe	98
PID 4228 wrote to memory of 2244	4228	msedge.exe	98
PID 4228 wrote to memory of 3104	4228	msedge.exe	102
PID 4228 wrote to memory of 1092	4228	msedge.exe	103
PID 4228 wrote to memory of 3104	4228	msedge.exe	102
PID 4228 wrote to memory of 1092	4228	msedge.exe	103
PID 4228 wrote to memory of 4280	4228	msedge.exe	105
PID 4228 wrote to memory of 2372	4228	msedge.exe	106
PID 4228 wrote to memory of 2372	4228	msedge.exe	106
PID 4228 wrote to memory of 2056	4228	msedge.exe	107
PID 4228 wrote to memory of 2056	4228	msedge.exe	107
PID 4228 wrote to memory of 5092	4228	msedge.exe	108
PID 4228 wrote to memory of 5092	4228	msedge.exe	108
PID 4228 wrote to memory of 1624	4228	msedge.exe	109
PID 4228 wrote to memory of 1624	4228	msedge.exe	109
PID 4228 wrote to memory of 2692	4228	msedge.exe	110
PID 4228 wrote to memory of 2692	4228	msedge.exe	110
PID 4236 wrote to memory of 4280	4236	chrome.exe	118
PID 4236 wrote to memory of 1640	4236	chrome.exe	119
PID 4236 wrote to memory of 4620	4236	chrome.exe	120
PID 4236 wrote to memory of 1640	4236	chrome.exe	119
PID 4236 wrote to memory of 4420	4236	chrome.exe	121
PID 4236 wrote to memory of 4420	4236	chrome.exe	121
PID 4236 wrote to memory of 4796	4236	chrome.exe	123
PID 4236 wrote to memory of 3344	4236	chrome.exe	122
PID 4236 wrote to memory of 4796	4236	chrome.exe	123
PID 4236 wrote to memory of 3344	4236	chrome.exe	122
PID 4236 wrote to memory of 828	4236	chrome.exe	125
PID 4236 wrote to memory of 828	4236	chrome.exe	125
PID 4236 wrote to memory of 4380	4236	chrome.exe	126
PID 4236 wrote to memory of 4380	4236	chrome.exe	126
PID 4236 wrote to memory of 2940	4236	chrome.exe	127
PID 4236 wrote to memory of 4500	4236	chrome.exe	128
PID 4236 wrote to memory of 4500	4236	chrome.exe	128
PID 4236 wrote to memory of 2384	4236	chrome.exe	130
PID 4236 wrote to memory of 2384	4236	chrome.exe	130
PID 4236 wrote to memory of 3228	4236	chrome.exe	131
PID 4236 wrote to memory of 3228	4236	chrome.exe	131
PID 4236 wrote to memory of 1664	4236	chrome.exe	132
PID 4236 wrote to memory of 1664	4236	chrome.exe	132
PID 4236 wrote to memory of 3012	4236	chrome.exe	134
PID 4236 wrote to memory of 2648	4236	chrome.exe	133
PID 4236 wrote to memory of 3012	4236	chrome.exe	134

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\Rays.webp
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x31c,0x7ffdb9fbc188,0x7ffdb9fbc194,0x7ffdb9fbc1a0
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1888,i,11374658997704376035,18413661898457306382,262144 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2012,i,3590664666445661984,7222362406274068240,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,17058401002706276133,3944538471449164133,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,2098253478286823214,7945232296026623269,2097152 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,14133955547979423053,2053667569319608055,2097152 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,3311120916019471347,608188636058602287,2097152 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,85997350792529250,730015808948578786,2097152 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,16317341743325316827,11411129528652132283,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,14275590936376307992,12155808462133768886,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4184,i,13149662254372645120,1937930792972428034,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,4993050373147541391,4050624779614147822,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,5489015063306679295,14294655496247230620,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,5489015063306679295,14294655496247230620,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,15000329277920077409,11992103150543257890,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,3131233264573021467,16968926532374537918,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,5477960370249929902,297370861307426586,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,5508433738136396047,8704264172624334782,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,6544581603570359933,935110314025312830,524288 --field-trial-handle=2296,i,6640854801850062736,2983265053024083824,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:2692

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4376

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffdad07c728,0x7ffdad07c734,0x7ffdad07c740
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1808,i,17502692576039566567,49362490130404707,262144 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1656,i,10622143482898001383,16051715371990845167,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,14521424639876506828,4137853610756562283,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,10665462039593488366,6722383629480673856,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3388,i,15373558988249219130,12713798773373838319,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4592,i,16728555293581280468,13458051688048802474,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4772,i,10852008549394781321,2726529729298714862,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4784 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,7666552982644446449,17841176680122058692,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5460,i,16273969160038689688,11178934040593839364,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,4163111099230432303,12964530405499369126,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:2384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5408,i,17150664276761333033,6236467916007936047,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5872,i,11474566264790762206,10468626601390801935,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:1664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3424,i,1249028615398327942,4965566845754027878,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5984 /prefetch:2
  2⤵
  PID:2648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3232,i,11266360627208382702,4664136963224369641,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5592,i,3798797792840283059,4370843061837658648,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5476,i,2110431980292929075,2067652235905275935,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5956,i,12302252487246205030,2594004587230866692,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:5480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3656,i,7751693879325842248,16101711599654523935,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3492,i,7214805163462280574,3998591344901627579,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5960,i,8511408043040928118,3019495428217709743,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3124 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,8853983353412060424,18122734061171586426,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:5260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5592,i,16487387913986122729,835453891636574436,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3432 /prefetch:8
  2⤵
  PID:5268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3576,i,6679632066910588208,651689012956308211,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6068,i,8025957146069695243,2935133570057893433,2097152 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3692,i,18059950493907439305,13643760257127694000,524288 --field-trial-handle=1960,i,8571609326151921589,5383093335730388620,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=240 /prefetch:8
  2⤵
  PID:5924

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3636

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2296

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffdad07c728,0x7ffdad07c734,0x7ffdad07c740
  2⤵
  PID:5948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1736,i,14638962711929774160,11972451088263458530,262144 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:6024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1992,i,13703770063739207348,9985215888116968974,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=2108 /prefetch:3
  2⤵
  - System Time Discovery
  PID:6028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,2628702191227734099,8936367962067898590,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3124,i,16834152633918557950,14790735026183612095,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3128,i,493670578439150472,744145803632961435,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4524,i,16359585873928301765,12091034914697551084,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=4548 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5272,i,12528201285871426476,2291398432262385207,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:5708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5700,i,14628105492977767844,8669232715908609576,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3412,i,7329492613686954042,16853269727633053333,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5784,i,5717154328288018289,15440889594571483022,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5704,i,8856501627158299462,6331367946889963133,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=3124 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5868,i,13018859807312479692,16224591625419672680,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6092,i,13113149193511754259,4842809425790214785,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6040,i,12958372985637566724,10954786648761722317,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:3092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3328,i,11132937394753479192,7965931799038319041,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6240,i,15672191435943453454,16594789388787435110,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5716,i,9398842010605525926,5363019364093915343,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5744,i,3936495460414737663,9868112451860558855,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6240,i,17971412414521732751,4933554803088365196,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4428,i,3460348053838514802,9522684387062553837,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3368,i,16174983390433761476,11357819062142560274,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6428 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6524,i,7940641252305117791,18383936408599081906,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6416 /prefetch:1
  2⤵
  PID:5348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6556,i,18355160676147800679,17401230250576039223,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6760 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6832,i,11568088639027574530,6922631967072522647,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6848 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6980,i,18221660066724817294,2032041817810117902,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6996 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7004,i,17333043255437951660,1558731472967653124,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=7144 /prefetch:1
  2⤵
  PID:5516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7284,i,11671860956524675447,5571269684388606405,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=7292 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7428,i,2728248757610509283,12851286908265235037,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=7440 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7576,i,18408271520757244693,1754261402636753426,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=7592 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7740,i,18088091759097814908,2277506819112135469,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=7744 /prefetch:1
  2⤵
  PID:5392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7884,i,14075214583802421088,1949535339458545711,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=7880 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=8020,i,18242585141789840982,1050031383376192704,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=8028 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8272,i,11826767935273747878,1773361055813168335,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=8240 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8468,i,17491470619542782536,8063439789849680136,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=8448 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8576,i,15631228261619256063,5966795212046842932,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=8612 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8816,i,6956855312535197225,15997311093753856949,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=8784 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8832,i,12438074478036940047,3653073402358077356,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=8936 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8972,i,15577030721334633532,13919352730836531471,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=8844 /prefetch:1
  2⤵
  PID:5612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9188,i,13022945517987264468,3494637289068163377,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=9192 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9232,i,12138002301578544821,5925347210034844372,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=9360 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9496,i,1025791356055632225,16804167292555571596,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=9508 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9516,i,12833684188554965690,3716983656987024863,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=9636 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9740,i,9975583152920931420,3061028362686053784,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=9776 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9812,i,15801045421501108426,3652172807235522700,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=9836 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9952,i,761743014068231510,14949342130056798287,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=9968 /prefetch:1
  2⤵
  PID:964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9480,i,7150380105882033029,11824568712808388220,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=10184 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=10228,i,5639044289853647731,2063553978467149791,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=10324 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=10516,i,3097980659519675409,12944173396514815375,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=10540 /prefetch:1
  2⤵
  PID:852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=10672,i,7010009002418650510,9275989821812605975,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=10664 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=10804,i,2963977645982164023,18421243883255445556,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=10684 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=10864,i,14849778147137765861,7234767996216326744,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=10996 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=11120,i,16983575868530578858,7685800819250416090,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=11136 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=11272,i,11578978974157817571,13988677605126808812,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=11284 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=11420,i,8371193778335811516,5799600021366286338,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=11432 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=11584,i,12003517735961527141,12842434869130477427,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=11552 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=11716,i,13718405536811323900,961001805590724410,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=11728 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=11764,i,12501860169052040316,14599933913512450991,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=11864 /prefetch:1
  2⤵
  PID:5408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11992,i,7176034516676092704,11337355810786042723,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12000 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=12128,i,16844106020074015005,16410191927662570979,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12136 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=12260,i,11535049047189039375,1393997133791911978,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12272 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=12316,i,17182344262255892242,14880724583015145623,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12456 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=12372,i,2687959308873687900,9468968706218686116,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12328 /prefetch:1
  2⤵
  PID:5316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=12444,i,8260774290655503137,777342504794483245,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12512 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12388,i,6158750953575873719,11613221462893755098,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12504 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=12372,i,13659668966512385112,16983340863510015979,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12712 /prefetch:1
  2⤵
  PID:6932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=11568,i,8681902296637941889,2795811209415840676,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=10980 /prefetch:1
  2⤵
  PID:6940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=9804,i,4347801026750310411,6904638214284361946,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=13044 /prefetch:1
  2⤵
  PID:6948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=9476,i,12366884252055212061,13377450232636502327,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=10816 /prefetch:1
  2⤵
  PID:6956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=9824,i,5156609441557706350,1434477288737616325,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=8840 /prefetch:1
  2⤵
  PID:6964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=13336,i,9396869965993699542,6389430324789411845,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=8808 /prefetch:1
  2⤵
  PID:6972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=13792,i,2185368916908502493,17442425725515265077,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=13804 /prefetch:1
  2⤵
  PID:6980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=13944,i,17258962413310866154,14385245712634363113,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=13956 /prefetch:1
  2⤵
  PID:6988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=10344,i,15492399935677237123,14907961464875865542,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=14088 /prefetch:1
  2⤵
  PID:7024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=14200,i,2172195260331122119,18427649954287339653,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=14208 /prefetch:1
  2⤵
  PID:7032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=13984,i,7191849695772500287,4200457194056284375,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=9952 /prefetch:1
  2⤵
  PID:7400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=14404,i,14839654116597129703,8297953522401360067,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=14424 /prefetch:1
  2⤵
  PID:7408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=14560,i,1876980846400259756,4204463158238127170,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=14568 /prefetch:1
  2⤵
  PID:7416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=14712,i,3890121713985013549,10670140672356793694,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=14716 /prefetch:1
  2⤵
  PID:7424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=14872,i,2745486688522300232,4848375701525927618,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=14836 /prefetch:1
  2⤵
  PID:7432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=15000,i,3600918232632924944,270917592207288268,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=15012 /prefetch:1
  2⤵
  PID:7440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=15156,i,6178025115847914190,10265979994903819484,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=15164 /prefetch:1
  2⤵
  PID:7448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=15296,i,5410762488760135787,9510187876727054102,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=15308 /prefetch:1
  2⤵
  PID:7456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=15456,i,2762426260741517478,5891091157910688830,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=15464 /prefetch:1
  2⤵
  PID:7464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=15596,i,2390630504031693705,10844687063188133504,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=15608 /prefetch:1
  2⤵
  PID:7472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=15488,i,11551168424528295265,14076485614984610017,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=15892 /prefetch:1
  2⤵
  PID:8040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=14200,i,1407287569666449928,6041861631582982944,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=15808 /prefetch:1
  2⤵
  PID:8132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=14232,i,4749332852569281951,4449211568255134032,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=14848 /prefetch:1
  2⤵
  PID:8140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=16036,i,2563185179176684058,5056035842999475992,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=16184 /prefetch:1
  2⤵
  PID:8148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=16024,i,12116419602770055761,6401126589807002729,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=16304 /prefetch:1
  2⤵
  PID:8156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=13144,i,12712272809603713365,16140006636334541100,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=16308 /prefetch:1
  2⤵
  PID:8164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=16516,i,11145966393411324979,8972030937512021921,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=16520 /prefetch:1
  2⤵
  PID:8172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=16656,i,63993758677340162,5416070438701145708,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=16668 /prefetch:1
  2⤵
  PID:8180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=16792,i,1374832279455931179,219376195804517853,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=16804 /prefetch:1
  2⤵
  PID:8188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=17688,i,5026294912299854763,605667780535684726,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=17696 /prefetch:1
  2⤵
  PID:8444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=17820,i,4670096529357508470,12998237560963767848,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=17720 /prefetch:1
  2⤵
  PID:8452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=17776,i,2489390671754946282,10793217463387538861,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=17780 /prefetch:8
  2⤵
  PID:8516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=17368,i,1732720185743638068,7304802854597116521,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=17404 /prefetch:1
  2⤵
  PID:8632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=17432,i,4133160444052252133,10470648171158782442,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=17360 /prefetch:1
  2⤵
  PID:8640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=17388,i,13974459169669273529,10751803598029637720,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=17204 /prefetch:1
  2⤵
  PID:8648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=17344,i,17400684500525095591,3525094548535905655,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=17440 /prefetch:1
  2⤵
  PID:8660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=17200,i,16305889375098478100,4866781631312500842,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=17136 /prefetch:1
  2⤵
  PID:8668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=17316,i,5845733481734030789,4286615289051862866,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=17448 /prefetch:1
  2⤵
  PID:8676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=9560,i,17931695306018114018,15142578795335319701,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=11540 /prefetch:1
  2⤵
  PID:8712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=12768,i,5697518752134221102,15524105088889422011,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12816 /prefetch:1
  2⤵
  PID:6552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=4740,i,11686032387918572856,13547398349533141461,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:6460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=13208,i,7032835905745594911,15215431675202289725,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=10008 /prefetch:1
  2⤵
  PID:964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7900,i,14769924726545525254,5087270310415385112,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=12568 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=18272,i,17210555030872464811,13511517842803646535,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=7968 /prefetch:1
  2⤵
  PID:6164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=9596,i,14407217545768809443,17714650656346310747,262144 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=5596 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:7952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=18220,i,7612145956555406211,8749488883951625305,2097152 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=7484 /prefetch:1
  2⤵
  PID:7488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5544,i,4724792547904239126,17390059148829133956,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=5648 /prefetch:8
  2⤵
  PID:8496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4152,i,114789474718468721,14778915831925298819,524288 --field-trial-handle=2064,i,1176251635857797181,8062158363086562038,262144 --variations-seed-version=20261022-010031.949000-production --mojo-platform-channel-handle=18228 /prefetch:8
  2⤵
  PID:9196

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0d5f55ff-ce1e-4da5-8b8c-119fadae0a64.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\0d5f55ff-ce1e-4da5-8b8c-119fadae0a64.tmp
Size 269KB
SHA256 06cad0abe448d03daf51925c806ad4a27b5db05b322020e27303f321430c30bc
MD5 63ed619ac3b324d553bf2612650c14cb
SHA1 e4a7f64062023d97e2a6dd2851ae4af592b8c667
SHA512 3fac4ef794fc799fd280af2287012f99769ba55b39030eb883a8166a5f1f8d04b120038841c133b0106736e652c0b4bb12055a7d907f82ec0ecc7fe7f2981c8e
SSDEEP 6144:SZ2CF/rHo8aSjG1Ss3fUqF3qX+hFD+7t56OD9ZfSApprF:SZu8/GRl38yFSXD9ZfS4j
TLSH
T11D442362DE29D8B7C9BD4581B9CB36120E6699FE00C63E4C45865B97A18EC4D03F3F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53b96143-b02e-4deb-bbb8-ac2ee856b61c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\53b96143-b02e-4deb-bbb8-ac2ee856b61c.tmp
Size 144KB
SHA256 1316170b0ebedb4ed80a3614d4bc99311b9d5acd760ab6d4941cccfd1cda35bf
MD5 4a2a733fc82e6f9f4d734557b76dba22
SHA1 da055467ae66e1e00018fee3a2033f015ac8103d
SHA512 27ea37bc7e4ff2e07c0f8e298c90a8cc4e34c1ceb426d4f03d998c84ee1d1c51fc126fc5799f65297cec132f3f7e5cfa8bd0f325fe0639305fd21381f2e8e773
SSDEEP 3072:MqG8IcIDplOWG8F/zPN/FFK8H6SjgB1Tes3PnzEvqy03u/Vd:MqnCF/rHo8aSjG1Ss3fUqF3qd
TLSH
T1E9E312E2DE3D58A3C55B4896BDCE39170B9685BF00C22E9C86D5172226CD84E63F3F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7286077f-f92f-420b-9b48-1d5c2aeda6d1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7286077f-f92f-420b-9b48-1d5c2aeda6d1.tmp
Size 269KB
SHA256 54ee41de839c903cd126444662558c279cd82039b8ba579467a6e9a525aa7f86
MD5 df386f27f8e3d49f08ce2870286003a7
SHA1 155aa26148f7e0c9fe68c226c6fbe9566cb62f52
SHA512 4c06667824edb5e28233ebc18abdbc8b43d73cb59bcc5e1269ffdcfe306df8c1e5c86ab89e051684aef502a068c7ea8bb36d02d859e21cd990b1e54ebbda9252
SSDEEP 6144:L22CF/rHo8aSjG1Ss3fUqF3qX+hFD+7t56OD9ZfSApprF:L2u8/GRl38yFSXD9ZfS4j
TLSH
T16B442362DE29D8B7C9BD4481B9CB36120E6699FE00C63E4C45865B57A18EC4E03F3F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8339efc4-38c6-42c2-9c4a-513d0b4586f6.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8339efc4-38c6-42c2-9c4a-513d0b4586f6.tmp
Size 145KB
SHA256 9ef2df33aa43d080648c4868993a20d799a3dd6a883dde12f5dabbc2deef151c
MD5 d70f8e74505d7321ddfcf14556e4f9f7
SHA1 365efa445a310e6f4cf859bb230f7bb642ee5d1c
SHA512 8f69966cf4dee1dc423d429063087fc02acf6e3610b660ab3b74333649eb9665625f23125a231ade397a46764a6b6f61fe2951dbf1ff072f6dd7b5fd197cdea7
SSDEEP 3072:02aU8IcIDplOWG8F/zPN/FFK8H6SjgB1Tes3PnzEvqy03u/Vd:02aNCF/rHo8aSjG1Ss3fUqF3qd
TLSH
T11FE313B5DD3D58A3D566458ABDCE3A170FA6C6BF04C12E4C8AD8161226CD44DA7F3F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 a6249f26f37b42a8aab1c42bcd8d2d1ed0465e9642dfcd70d03e3935cdfab2ce
MD5 6ac2bdb5618eb33217283a8c2a2bbea7
SHA1 929bbd0ea4faacadcd10729d56f75f85718fe818
SHA512 210db67eaa7e247fa4c61bc2e2b4275f8573062e567be16ef70acddac71222e128e021da8a6e8867a5b5f1507c9fa736ffd85aef609528eb4c496e58ccdf5830
MD5 SHA1 SHA512

Submit Download

0ccfb73b-7fea-4a43-b146-50db506ed5e5.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\0ccfb73b-7fea-4a43-b146-50db506ed5e5.tmp
Size 15KB
SHA256 e1ed6bc815c55acf73ba24418e015b7a85f5f2372fd341eeed6b4c8c39978b0e
MD5 1d5c83e957a0beb6b93fb3ae9dc0d37c
SHA1 9aed5eb0be1aaf7b88049921d52ef3d9d1c9970b
SHA512 53cb851140681aca17402dcc4b2c1d0235118f71804c9ad70f0e6404e455cee764a1e214b1b0f7fef7f3076444b499bb47a3347443a014ea90c45297f2001f8b
SSDEEP 192:qRjcBzUDz+v71vAPRp2K16dRdzOcrxxcq9IHsb+WNvzvLwPm/kLiR4BmEOW2+QaJ:qRjmzUH656Xgyq2w2UbEZ2+Ce
TLSH
T1AF62956AE9202A7BDCEBC225F951B71BD3F5202265C42E84EAFD893C14DB6CD7117807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21acee73-b3bb-4f88-8cfe-b13a8feee6a2.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\21acee73-b3bb-4f88-8cfe-b13a8feee6a2.tmp
Size 15KB
SHA256 8b53ed058e03a3d614111c4cff3b6c74038893d6e6e6992588ca042e640af7a0
MD5 bb9e4f691384edafd21d378a52b0279c
SHA1 5fb6abba9bf0c0cc95b4c6d823d9ae464868f696
SHA512 c6c049e66f1d1148f361f926bce40e0f57a1e4fea4bfc352d86d0ebf2669b7e512faf19a328135328db85c38fc4671220e65a1768399c24250335b4a31ac8dbf
SSDEEP 192:ORjcBzUDz+v71vFPRpQK16dRdzOcrxxcq9IHsb+WNvzvLwPm99kiR4BmSGqE+W24:ORjmzUH65FXKyq2wdDbSEp2+oe
TLSH
T1C772966BA9202A7BDCEBC225F551B71BD2F5202265C42EC4E6FD893C14DB6CD7107807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40276f6f-7856-44f8-a931-bccb785a5dbd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\40276f6f-7856-44f8-a931-bccb785a5dbd.tmp
Size 14KB
SHA256 a3a1bc77dd00c438dc5121fca4121fe9de3326848ba77a9fe3f65c3dddf80ad1
MD5 ed370ac25b64c50b7a8029b0255095d1
SHA1 ab4f8ea59323c55a4332a51872f36d8789c1b82c
SHA512 cf1914cc74b19c0aff316eeb27ddf6d689143ed08c583e728f89f3291518c93178be6ab58c8c5b42e02b677f9a729db3e5dbda26b312495a97a70c9e7fb305aa
SSDEEP 192:qRjcBzUD9Jv71vAPRp2K1PozkcrxX9IHsb+WNvzvLHfm/kLiR4j4eEW2+QaePc+m:qRjmzUZJ56X82wZULeb2+Ce
TLSH
T11562956AA960297BDCEBC226F951B71BD3F5202265C42E84EAFD8D3C14DB6CD7107807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

408c4e21-87e3-4b57-8fb3-c5dfb8a7c168.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\408c4e21-87e3-4b57-8fb3-c5dfb8a7c168.tmp
Size 14KB
SHA256 9804a296399acff4a724acc4b6ef08b0de9332abc926e2a93dd3b8fa99ae1f9a
MD5 9516e34586051bc270fc04e6022dad87
SHA1 06d096848e5f64bf440ae1c5443cc179de91da0d
SHA512 2922856bce84b8e47f7e0b4ec75e52c3874a3d950db170c5a16c5dd49aadcf2bd212f8859053b93da4a9c903ce5f7873a10572c5df43f6f8d900334829f01609
SSDEEP 192:vRjcBzUDvxVv71vAPRp2K1PozkcrxX9IHsb+WNvzvLHfmrwkiR4j4eWW2+QaePc8:vRjmzUrxl56X82wJDLeh2+zE
TLSH
T1DD62956AE920297BDCDBD225F961B71BD3F5202265C42E84E6FD893C14EBACD7107807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c088739-3158-41ce-9117-e88b103da7b7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7c088739-3158-41ce-9117-e88b103da7b7.tmp
Size 16KB
SHA256 cfcdfa9205ebd3467fae73fc17777463bfbd74a470edd82a0ecf17f9d69e656a
MD5 837e01b94acca486d8dc6ec05293ce3c
SHA1 3e9fd7de8d24d98dd706f081538c184f62bc446d
SHA512 158b3351b48de1d864fbdae1d73c7e734060fed78101e4761fec746e5b8a0e652cff4f617beda17a40ffdd370f41e66a695b59cb2d18fa77331ca350f920a5ac
SSDEEP 192:ORjcBzUDfov7uHFPRpQK1tRdz+crxxcq9IHsb+WNvzvLwPb6L99kiR4xJyGqEaWN:ORjmzUL0CdXyq2wjzDEyEV2+oe
TLSH
T11D72959BA5202A7BDCEBC229F451B71BD2F5202255C42E84EAFD8D3D14EB6CD7107807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b
Size 346KB
SHA256 0f8a0722302d1b8e1050f1c7882af2c0feb056752c3feddcc0b4316891d60d44
MD5 cffe89fe76f974f10f591767becdc8ea
SHA1 63d099b0fca6062bb726f3c8bbbc704a1611182d
SHA512 69a6672dde71770eef237d7bedfb1a82317a68339abd399505acf995dc2132b0ef4e4fbd36b8453c8b9556877ba778722662b901166c77ef2c38a8d88a0a8a3d
SSDEEP 6144:kEen5NJZWrGd8LABzhu4/tZvMBhSoAxh/u0jd33ScBSNFWMI+t4A9AdHgndKrRqL:ktLWrGDdlMBhSoAxU033ScoNFWMmgnEa
TLSH
T1E774230B2E1DCA322357475B503E382845454A294BCF27921B689BE8853C9FBBEF51DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006b
Size 64KB
SHA256 58064bcf86715eeef7d6910d53bd060072691f056c1a6cb89dc3890a4beb372d
MD5 296c6f1f8f7288747e5043b9f5af40df
SHA1 724f7f195af55ee246f0c42a4f055e13520f1d06
SHA512 5dd2d3c9224268af0cb16b7face746cadbe718ccbe0b05048eda87eafe3214cebeaec7dc1baddeff80dd7707caacd80f8a7d11b62ce6fde247e136b12b7d5459
SSDEEP 1536:0liG2lgQtZ8oKQIysPeKUUYeCq5KRV/xD973MAK8:rG6gfovIH1USvcxDRFK8
TLSH
T15153023AEFA2538AC1364674F4280B8CAAF69F7007CA514B587365116639F87DCD3CE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006c
Size 500KB
SHA256 170f66fd8f50b09a14dd5eacdf2fe8aa231136c20bc19500ddb33dfc25002ab9
MD5 6bd2242bceb0419d62141e660cf7e24a
SHA1 47cfbe7e995acecf70efd9894e7fbd93767c97e7
SHA512 a4083819833b1fa218d26e6b890644e5e9d430b449e392c9effbcf7c61c5ac416a07603cfc1ddee28328fde73b47fb2591c70d64daa113dcdc9a0daf50dde301
SSDEEP 12288:W0bEgvM67HF+xHaxLkigBIk5LQWPZQWKd2PSJiaFk+It5BqW:pbKpx6xAiTZWP6vJi2kr5BL
TLSH
T163B42316E34FF505CBA86F7CD1DA226630772B2AF90E597E37A02CD825431A44A5DC8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006d
Size 365KB
SHA256 95201d0d637db1f9006822202d4ad9a92b681f223103bf8258e291cc5e34f30f
MD5 947e769e1b2ee5b7bedfef22c91e4812
SHA1 a2876d65091fbb8f96acb200707e2a5943a963af
SHA512 59ecf4e4fc9843d49f1bc75e9df47e8b4026132d36ac929f196c9bc0c17129a4d228978db1ec0d35e9d024fd3818faee6f6d89f85fbb78981ecebac42cbd4efd
SSDEEP 6144:2K4I05ZSRaOtJt2Ge2BE7oJdaGUZBhMRCo/5hIRdaGGMTjsF8z82EjDruYkCX8Ja:2K4IoZJCbN9K8daGIOv/5hkdgqsFd2O1
TLSH
T17A8423A9056F81FAC285AD12C0F2225777D60C719EEFFBFB083080685D959DF2B05A5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007a
Size 1024KB
SHA256 e1524ad92cfaa4c1590ae4fbb34a851c542703c384d656c570169b4536aa096f
MD5 3196f43e967baafd828bfa7a59bc7ec5
SHA1 3fc41395624211cda1e3b04f9ace9609424eeaa5
SHA512 61327265a99622abedd9877b99910fccd902d514a7eccd0289984dd40622cdc27107c4e110f6886c078a7c049dcacbc083e9657fb868f295a9b31ed9c28ae27d
SSDEEP 12288:N0gMoH8kmngN13S1DUkshnqGTu2KnaStJOF3:78kggNxpnqzrtJi3
TLSH
T14E2523D11BEDE9D4DF21A73390CF010932405AB8FF4DD9122CAA6D49424BFE596B9B34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007b
Size 314KB
SHA256 b162fbbd76f294128041fa3171a9a468214ea66d76a6acb390a23640ba885a52
MD5 755d115b20087287725b41b411f5e908
SHA1 8d05f4b76b75aab427bb2d284557cf58ffe3b455
SHA512 d78e5a07113b72d44a03255b4d84f40215336a16011b07b7bab22d18eb7a8836839904670fd18455e2e7287de61d4aa2bd1e7a69e71825dfbee17c7782d69071
SSDEEP 6144:gMiXjQTMA1B5uKTUeyFZNO5/G/RSV+U38C6bMakHUkc5NJHzDt:gMiXETMxKTUe+ZEG/pU305kDQNJft
TLSH
T1C164239A018D354742F53B6261BA9681B4EE525E0C3DBEEBAF3D391C7C4CFC11823928
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000080
Size 52KB
SHA256 aa186e3622b91c607283fa1743998250f025d52a231eb941cbad2651b5e6d605
MD5 92da102d9f8a9d587c726a26709b98c7
SHA1 049d4faec342d9573eaa7932928e0c6faa356ada
SHA512 6949f80c9eac2f31c618847f2a73ed2cdcb34f94912ffd611317f5f3605a87bfc742f1c27be60e32f6eaa12c10879cc0ce9ea32a306a47516e1c02d2735cd392
SSDEEP 768:5QtXDlgA2GGFjlJ2hBNrXqpcys52RgAhO68wyBfDPHK1YYdX4Fl6XBT+vapqt8Ss:KPOlGXsc75mUXF0X4T6xkapaDK
TLSH
T17133F1D6FC9CC192AC27B7554ED67F19A4165382A247AD8C5173E8C0983B73BA1431F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000081
Size 65KB
SHA256 03a9ce9dc5f8dcdf2f866e2a4f04aeb2c89162e5f5596749cd294782281bacd1
MD5 26f3386a44f86e6b82658403cea49737
SHA1 a5cd94f8432ce7c8525aa67628871b3adb1dd9f9
SHA512 7c6504d08d02412f455f7301739cd4a3cadfed0e2c01ebcce67bd975e507b1a141701939ebb2b69bd8430f1730d3664febe5c809daf7924635887cbefcb2178b
SSDEEP 1536:D278JKue3bSGubitIB4IwmFBN6m6afq2Sc84T4+0NLxQSJrSdUNao:dJo3OGYit5IdjfeZWV0FuSVSdUUo
TLSH
T1C9630277F8FE49F7E399708122DA4E0A749C29471B71C347BEDDE2C053A921DE2A0592
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000082
Size 70KB
SHA256 2857d93e8cac577890440198fa28ce99ecd463f848bbf2f6e62dc4bd94d94891
MD5 b9acff54c219bfa3d80e3237adcef261
SHA1 5cbeabdc6d50650dd464743d6c47d0f1bb020716
SHA512 76162abb064de98ff86f4d9ffe012a3efbe431f3c97e7f7f20b46f56d3538391fee4d7984d28bebd919ad0cdb3747108be060de102aeee4f9ce8fd4a7484e121
SSDEEP 1536:Xzy9cjfBmkn8AbrwgY4nal20LGtiz1x6VxEZq+Zv9J1FGeMb1q:XmCjZmc8OwgY4al20LRzOViZvPxFp
TLSH
T1A66302FE3E2969C42F654673D884C4208AFF44AD77D85E8BF8D704168E6386BE97C052
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000084
Size 126KB
SHA256 46746310076e5021e6fd8aa5b1fd1b09ddc0f362102aefe5934044bb5210fdbf
MD5 784b9f70b87ccb8abe92eae38172bfca
SHA1 6378dc64c9a6c36882442b9086be6e20b20da264
SHA512 64920785038ef95ae4dea29cecb4de63a536bd45f9597dbff871583771f0a8d6c2838b8a27f4654f81ad2c95b96282cfa449963e41d9cda0e3e9fbef4b4d38e8
SSDEEP 3072:pdZa5s+3TmNKqcl5lUar88jvXIWxg/BlOkqGPE6:85s8yoqQ5WtY0/B3qiX
TLSH
T1B6C31263EEB0CF1F1040755B2D6DD1F41715221C6D21E0AE234FDEA90DE197A2A6A4FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b2
Size 24KB
SHA256 a6bd92a60031af223b1d015131b8911d71c3945c71aee5c9ac53af125c4ba720
MD5 4eff5c260fa873ab4df9932d0a9dd573
SHA1 cc4a86791f219c83875ea529080ecf2cd84d7d2c
SHA512 899325ce8f0820dd49fa1c1894c493dd61f59b6dc0f77e182e684ce2434056761581f51e629367b893180b1da14038f27c8ccb157ba7d5cb1e6374393f0d7649
SSDEEP 384:pejZMot1hi/5CWSn6zT5OGadGcbnqvZtRkqKrL6s43yH+9Kks6:uZMoA5CWLpOGJcbQfnK3ju1N
TLSH
T1EEB2F19FF16CC1233FA5D86BBC9003F2D604FC658AE5127E70EA18C50635A8A66DE40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b9

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b9
Size 285KB
SHA256 3aab0567ed8796efc0e997d0411851dad094f48f5e69b8e67d75c49c4623d167
MD5 5d3b9c5b9985828dc9635c633fcedaa8
SHA1 d42ca6856e6edbdc4352fce304f5ae1817cb8fd6
SHA512 ae64d9fe724364e4164885284bf935b1a841d3dd48bdce30d4ed30109ba2888c851c2d31e0410ec38d8d887b792941d595da90cf2e929c2311acd99945a5595b
SSDEEP 6144:V8DicS5ojuhbC841uLqEyfjJ5EcUlgDxX9wEAjNc04NLQ:iicS5oju94snyN5ERlKlivjKrN8
TLSH
T136542384DF0D87AB8BF719579B00F73D798312A0744FA5190BA5DA28B064670ADDFB0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c8

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000c8
Size 17KB
SHA256 295740fc3f72362470549a14e7d110ad1ec865b50d176684cfc52be96070cad4
MD5 bb061e2ea41c5bba21369d759d01ce47
SHA1 e7be50fb7263bce04bd46235d252772b436c630a
SHA512 0533c9329962dcd06f265aff7bf22a38b8307e9926fdd7c6530175148754187a99aaa789f3960745bc012b8b675d36bf6695a0d9eccc0c88bc46fdf1ff47f710
SSDEEP 384:/dk+zc+f08sKVN1Pud7S6C2wXeM6EZeHNQ0EmAgf/CzqZHAyT3oThZaf8f:xnfIKVNBudjy36EZiSnmzCO1oDafO
TLSH
T1D872CF8639AE6C7D74925BCD921CC61CF7C664D6840736BA8B033D488637F8718E66E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cf

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000cf
Size 18KB
SHA256 1fe53f98c65e156f3ba3280eca6e304d7d76491c97346ce56f90911b14df288c
MD5 f7bd86c44ff66107b15007d3a0eda7e3
SHA1 4c413a12a093555615b9fc2953c3a2b88f566da8
SHA512 f6e952761c1beef291325083808fd927c0a997e242da6fce1be22fc328d29c99ff5ab3b4a540543c7ba4a4cc2bf8db9c02c59278844b9f735f00baabedabeb6a
SSDEEP 384:JPc1UhRKJ0zwcocVByINNu09rQoFLQEFDCT2o8xyqN0e4Mw/zZ8+:xKqRjFocDNu09jFLQWDsJ89MLzZp
TLSH
T1F482D02395D1CB98CED3A52482D28275BE321C33571E7F757A678A1DB1E437E3623201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d0
Size 16KB
SHA256 31b8af5d23addf7e2458d83082c0a19c0a4cad8536722ad119d66091debc7423
MD5 6d6500d74bdb62d26f489953a29a4806
SHA1 78ad9cb6440f40f2f423010ba750300cada596ae
SHA512 1408a622d07e454e07218b65119011f0909992c8f25bc39c9030324ebf395aa9525e54024d9406597243b63deeab0d7f4f67f88c1603ced1d6238036cbbc2181
SSDEEP 384:MOoJ0OpqyxAT0/k8NaYiTSSkvu75hjBSk1yWosD7FYozHKjb:ZORpNibpTSSkQQOF7FYoob
TLSH
T16472D07E24761178DF9BDEE71B6B721374A50E2B073EB07292BD245A055C709320A768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d1
Size 18KB
SHA256 adb8949e4b3ef7657771e33c93acac92c8fdda08304ad8ae83c5361534929750
MD5 475a5f25cb5f54fe8aec9f25232e512f
SHA1 58bc0d83a2a35fa4f5bdb430cad1e9db2f34b307
SHA512 7317fbe42f15088882e6da4f6948a680a199b86e510f74e9ee63291c77e18f335056fa7c7659d18966aaba12700a6e042bee34f8337b369babf4d63543d316c7
SSDEEP 384:OhBHx7qX6UGYWFblTghZjbfXxZspZoUT2gvkaPEe7z2:m7hUGFblTgHbfOZhTdvkase7y
TLSH
T1CB82E044B70A771BD10E8F3B8EE36A4EA94B9F6C321D599C9018F5181EC1A94453EF36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d3
Size 1024KB
SHA256 3a1ba276e87cc237571abd8b064786cc78709211c4491444034a49cc9156f387
MD5 0e08a02baadd645d0770e2669bd67a39
SHA1 7f810b75483e981b825a21e1bcbdf61ac15ff452
SHA512 15b4b52976d0617b76149f853370645cb8bd3f37d69aa5787472cef8fec310a6041e3880d96312a39b0a1acdd572420e0fb73960be362c9693df64df492b4ac8
SSDEEP 24576:LQYOCv94OL96QNVertbMYzc6i47bxtU68EHN2cO4:LQYOEycQt379tas2A
TLSH
T172252361CFC40127DEB671FCCB55E31D609B3AD49EA89BCF48511AEC2828DD87B962C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d4

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d4
Size 24KB
SHA256 179d94355da6a7ebfae4858086d1fdec8f37454ee84c0f162d1bd44f843dc942
MD5 575ec8f074aaae9d849d391ace5cc38f
SHA1 221b16bd2af2362b5825339af8b1b9d130ea7df1
SHA512 2fb33f62ef7003490a9437ab6e51be00d2b851ad9236b10d71a94e66bee70104aefa2994e3dee343325b7c25250317a7eec66ae8f3385aafe2ba53968bcc02f1
SSDEEP 768:zsNALnSvgOWEsDPITzy1/o7V5sc6JhCZlN:R3OWVD2zylo7V5drN
TLSH
T1FAB2F1BBDAFB2980D55CE44A38F501519368C65C0A855AB8F83FCF29E8A6FC148D31E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d6

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d6
Size 25KB
SHA256 6e1793408c76c7631218b6d431eb7ee931167b112207ec71b220f9340fa62eac
MD5 1d5fcc6a2739783a562af6fc5c7f3f94
SHA1 7bec6ee10208f61c972631a2f9798dab083e0bf9
SHA512 59b0b67bb1ed6878193cbcb1ab5c3c97e1adb51e593fb3ce940ae45ac6d49486cfe2865f8562efac0ad34d7652bf7b605b0dd7ea930643fc21693bf07f0c76d4
SSDEEP 768:OB1BEyOXheDEhtADyFSqjpOsdscgYXNDfG5:ABEyOX8DEni8oSdgQtG5
TLSH
T113C2E1CDA4CC2B33A25376344E223B409E92DAA095BB4454ABD8E556DE2A7F0D59403F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e3
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f7

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f7
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000100

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000100
Size 72KB
SHA256 e38b2892bcd7e491a7c7ae035451b90bfb8bbeb73af674665af7cc921a5d8662
MD5 4774810ad009e7a586343da1c94002a3
SHA1 e63c3b48d08b31959e91d88d6807a91b35a54d0c
SHA512 303b484fab7785d00319db7852587c587c5dbe4a96c4603bd6060a554aeef781ddb7a4e403c5240772ed2dae04e774e674ffca472a207e39d6a6fe4792200d9a
SSDEEP 1536:JlaM5/itP4gezyd4G3NgbKwNtscSYO3qOoT3mgd8mTD:faIqtP+2dXEKgscS5vil80
TLSH
T12E7302E5211027A4AE78E360ABA0617A8ED7511A4D0C0125C2E7368E5C95EF43FDEADF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000101

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000101
Size 92KB
SHA256 b5bd318b35fe0e225f0a201085a2cf5ec236a8fee0641264764e0e21a831cb4b
MD5 3510dc7f63f293cf433d81f500698432
SHA1 685d3c1d6e0fabb921f524b6b35c1f4cf5e33daf
SHA512 5783ef170bedc39649a76a02a72357782340fa3a0f05cdb5ed537fe06d715760cade5a0d784303d9a40456e3209c5ba27fb730fcb3aae29233d2cda7b565ddb1
SSDEEP 1536:8bAhNdJibG1nF5o/roIWbS9kt2La3x8XU7Gj7bAH7s6NmmvkhZE3WMppcbuKCS2z:8bsNHiGYUzS9YmU7G/dWHvuSzVKCS2Go
TLSH
T1A29312F311707CA512F75A2184B6B6C9AE67D0D0147B21C7A2E82367F950B6872D3D8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000106

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000106
Size 72KB
SHA256 882fafb50180aa9ad8d1718fd5518bc784ce9e95f8c31d366b5f2141aea4bb21
MD5 e65295a37f3f68c36e0feb3429af1e34
SHA1 a2af2e4959daa74e50dec0e66866f5465ef6f7e6
SHA512 3215da13e25c27509e15171cfd466158371d8d849aab069e15113c181e84883a18c4497cb50cc968bc7ce0e9867c98da552db0872031003442a4f85fa2091026
SSDEEP 1536:0eC4IUNgFIAkrUv/Mbh58iwCPUpZAKU8RN+xlF5S:0NVGZgXs58iZkAKXyxlF0
TLSH
T1E973029A049E694150321DB6B5AAC5F92F1B2266D143EEFB8C4D88349735BEF13F0683
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e700161b7d90a9b_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0e700161b7d90a9b_0
Size 223B
SHA256 84b309dce7cd07dd683bbf40313b46afdfafc42b31cfdc97d448778979830b9b
MD5 be28306e32a1e5aae7134a97b37669b4
SHA1 106b0e187829bb671e2449a5a22eb3f5aace79fd
SHA512 ab0edd463bf241de8fe64179aea2d5d00c43eb9950036206c408b24421d9241c38b97944efafbf036209797fb93444f3b0589c589e00103748811f63b63a1d1c
TLSH
T17AD022F700A47D04CC7A5AF2E5FB119BA3038088494AC2EA500280A267061FE3B42467
MD5 SHA1 SHA512 TLSH

Submit Download

1f1424a94db7d467_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1f1424a94db7d467_0
Size 262B
SHA256 090a3701c81c40ab866945f6a5ef6df255de79f23bcae84d512a037562c61c1f
MD5 6adf400f956a31e69acb020775899879
SHA1 410ca8659cecf2309e8543ef53f9e56d6c3524a5
SHA512 53236be5c842f22f8f7014d45cba510ed818f1df142ff4365ddc2d793dc979054cb963a71ab3b1fe5d756643a81350217ca91e1c52418456099b8d27f62be0c4
TLSH
T1ECD0A7F384AC7458C83A85B156A963CE861351CD088E96E590A590B60A178FDE7C1567
MD5 SHA1 SHA512 TLSH

Submit Download

8d0dc16f2a11d8d0_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8d0dc16f2a11d8d0_0
Size 262B
SHA256 154d31b4a95fd6692ec1ffb9ccf23b71be53678b5666286a6dc9968eb36518a7
MD5 83efb73b9d79d26e9e08fe61f30ae423
SHA1 40498807230afa5695af7d2bbb8ae88acff8f51a
SHA512 6f55bfdd1dc48783a3c1354dc16d2d642bbc1ff8559a9ab47623d97987412b2a14a97c1e7a855ceed9fa936788d81d738fbebfbe5918d4c206c1cae21ec15dce
TLSH
T106D097B7904C3804CCBD4EF697EA238ACB0340829CAEC0A51412A2A233043F32B502A0
MD5 SHA1 SHA512 TLSH

Submit Download

bcd99aec8cdf427e_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bcd99aec8cdf427e_0
Size 288B
SHA256 1e40764a81006ea4c24cfca6f3adf8f2222ea33b0abd63f04aeee80595cccecc
MD5 b934e85450fd6c27938ceec4908674aa
SHA1 8cb50015e1aefc98f3e6df4ec9f6a4eea93bc6a8
SHA512 12fa1da35ba16c58056210f846d3ab02b86dcb36b2a45e046e5570c1f036ac6a1291183a229364c86e9c0fb1c0b9d49302641b159f3130bcc22ca02149fbee4f
TLSH
T1F0D0E77740193040C53D197159EB030563272085046599F04091007727407F82FC1346
MD5 SHA1 SHA512 TLSH

Submit Download

bedfd05aa7ea76f7_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bedfd05aa7ea76f7_0
Size 4KB
SHA256 059f158a2ec32add7a34233fc32a2ab5593e6653d84b7cf91b6151c042796097
MD5 9c67ad7192c44b3b66b146216981c7c1
SHA1 f0cd5979633ca6be7b42ebde6e5e55aa94d96bf5
SHA512 31dc2898c2d04602628ec0a98989bf6d21a7ae8e2e66cc8579d3b6117faa3f15a672d59aa4d079b7a8470e012cd3a957caa6fac6236349661b237a6d919ce842
SSDEEP 96:BtWfruNKVfPpKHL4udaadmLdupdxyOKzKyWoi4y2EGhbP:BY7hpcawmupLylKyWoi4y2F
TLSH
T136914B7202567C2AFF958AF0BE76658D6CEB145F81CCE27C3949C2B0D4A0819D609A77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd954d23fe310f1b_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\cd954d23fe310f1b_0
Size 10KB
SHA256 6eb9e7c9997de30976a8bc4ee5230d32a312e25993b4b883680b83d1e23bf948
MD5 5a6c952d6d04376d73ed98e6a96b2a0d
SHA1 e3c14bc372b8ea49e2595bf8bc117738259d56f7
SHA512 1ad40eb6e2aa729af12725de68016c7cbc37c2bf2b18b3b1fab73cb6cd555f64f3a6eea97c75d11404c01c410c5e81fed49f261bd714fdf06f513eaec8c803e4
SSDEEP 192:OipG2isi2cqazQjz0XgoS1PiVyZy6hiU/w0PiLz:rUzV1J0j4z6y4iU/x6L
TLSH
T16F221F49A7D1EBA9CB3713F502428BAB7731554C3EF7C28321F1A6391C8B1E86B55C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d12e24afb698e057_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d12e24afb698e057_0
Size 232B
SHA256 470b746232aa5e832bceca2b862fdffcaea64b4ceec8903e6c417fa8f45584e5
MD5 7f78787d1c79543e5c52230d54683778
SHA1 3acc7625830c16fe8c06af799a4fffe3be2a76b3
SHA512 b40f23d2cd98cdf1b95974bea2730ef3f9ca7a938d268f2856ea72a1c4fbf578e13c679a36da72f72da1f153af65c3a64e49b7e048d094a7a98898919f1b4793
TLSH
T173D0A76744596414E52D34F8E8BB72898E0250A2680A81928055506B95169B96B45521
MD5 SHA1 SHA512 TLSH

Submit Download

e3e3fa7d34a563e8_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e3e3fa7d34a563e8_0
Size 269B
SHA256 42402d3df8a4fac9f883ff7139b839110ef15c5e1514cc5901195d77d0c18c39
MD5 47ef1c3b01779c19330803709b275b78
SHA1 e71d75a1dda1231927ece69322fa4fbe28b87282
SHA512 305ed63b5f8d3a42a46513a3a5e4cda488a5c7ab06faf0e10caa90a0ff914e7e5bc278436f1c48bac32673f32dc4ce0131f61859fc7929bd0dcd5c5cba652518
TLSH
T18AD095F75A003400C47F51F0C56E5F47D39380491C45C5E5D02391623754BF637C9101
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 025b22b14f6ad9675243b4abf36beb6dc6f45edc3a31fbbc4c0e2bcda8b3af56
MD5 35c20943f19c6979e7e17d926ceaedb5
SHA1 60f8aa751541d11599a7edb4a8d3e7e32b7919dc
SHA512 b79cba408900243dbfccea3ece6c735f30e699a294635749073296640abeaab252a0aab1fbe166a0ba0dd011c1bf224e38ad1418d23702f3a8274b4894b2392a
SSDEEP 48:NEis9wAoza+Teyy5J4ihEvvQI0PLhyd6QUKOvFfF7OyEbxwqjrD:NP6Fo++TU4RYTLMd6dKOvFdqyEGqjH
TLSH
T1AE81C519A1E45623DF7A9A32C9DBDE5A387C658B4F070FC3015E0AB82A433E9B384053
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 c693292df6a59fd05fc64a51961a0093d6ab967cc9a7eb4607947eedc76cca04
MD5 c2b048bdde1a296b1adb04400afe33aa
SHA1 2860a97f4e973ab1e646bbd6f132f5fa5ff2a6f7
SHA512 42859150dc7bf4c1be1fe45dc1e7ebf783a85b9f16a0225979be50e9058e0b0944749e8c808ad9f1d3edc82720d67b939d5d9c90aaf5fbb4686676c115f04d50
SSDEEP 96:AdmLGippywPicPKkXpmSCEZ8xLUeV/Ct2DLiojLt7ryerQF:uyGAsclXpmS3Z0U/+OuAiQF
TLSH
T10DE1432991E0565BDF69AE32C4CBDD48393C698A4F070FC7407F6AB85A833DCB34645A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 8KB
SHA256 b9fe92c71986dac464066f3b11ab7345b84ab3966704cdd66515daf4a5532eb6
MD5 4a8cfe84c07b8034b73cfdaef940db46
SHA1 83f87d8803e67748b9cf64e4120c9090fb28dd3b
SHA512 85a993cc954ff86abe3a02debeefe78c0a6638f3ee24f474a005b714c47e2ce682fa54a533f64371662b062bbf57c31d6ed79a9b6bc5480c1b0f91d09f782007
SSDEEP 96:AOwEuokKJ/lA4OUSWUNP2Z/+sKkpmSC3ZroLUeQw5+/DxqDd3NiuoMGtUOncJecj:CEuPe/ZgNvkpmSIZyU2YEqLaOntLQdv
TLSH
T119028315D9D1660BCF58AE3194DB9E64393C998A4E8B0FC3407E57B816833ECB74605B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 7KB
SHA256 571668fa8f803a0f18ff7bcfeec4537317bfca6c7133775b3a09279000351168
MD5 6e7646db486b745c6628c67d687148a2
SHA1 e073b0a05705427d0c49973903f6ea8224655633
SHA512 fe924b33b6d18b9e0b7874e98578724dd18550cf33ac6b1613e0abdad7324c8ab89d95c8114e037876785975b8610ce38f06ab0a6f0fbbd65995a1dea9c3c54a
SSDEEP 96:wmR/lA4ZySPiqPKnzpmSCQZ8XLUeQv/CZD63/ikMGtUOVJrerQdg0:wU/ZSqKzpmSbZ6UY5z+aODiQdd
TLSH
T1FFF1721499E0364BDF69AE3294CBDD64393C998A0E870FC3407E67B81A833DCB34244B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
Size 10KB
SHA256 965203d541e442c107dbc6d5b395168123d0397559774beae4e5b9abc44ef268
MD5 90f880064a42b29ccff51fe5425bf1a3
SHA1 6a3cae3996e9fff653a1ddf731ced32b2be2acbf
SHA512 d9cbfcd865356f19a57954f8fd952caf3d31b354112766c41892d1ef40bd2533682d4ec3f4da0e59a5397364f67a484b45091ba94e6c69ed18ab681403dfd3f3
SSDEEP 192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
TLSH
T13B327DA05F9EF1DB9F9873F82F132C12A8564B518A95E9647F90DBC5B38D20F520243E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\verified_contents.json
Size 7KB
SHA256 52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69
MD5 0834821960cb5c6e9d477aef649cb2e4
SHA1 7d25f027d7cee9e94e9cbdee1f9220c8d20a1588
SHA512 9aeafc3ece295678242d81d71804e370900a6d4c6a618c5a81cacd869b84346feac92189e01718a7bb5c8226e9be88b063d2ece7cb0c84f17bb1af3c5b1a3fc4
SSDEEP 192:RktDNJ2UzsL5KcASyoH+CouKP/iNGRo/oRHMIT:AZQflcsU
TLSH
T1EBF1A568CC5D758CFC56B77987AA36768B48C5C9E14D3E2E12C30CA178F6A4888B30DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 44KB
SHA256 447a754e4cbdb9a1f60772fea2c7220375eb152137affb240d6a74ad3db9a7ed
MD5 bdb33843639c46b0c0eb93844405e0f3
SHA1 67cc57d260ad0707efa2afcef03cce7775bf2108
SHA512 b9dd2faf5d1a3239014efa7ed09c31996e0e48fc1d4d55735fe854f66dc780e8328e4e2264e4fa4e9844d4f056579ee05fa77af21b444456c990a696420e2c9f
SSDEEP 384:nak2S7uC3gZzSvUu8Kc7h/dOMZbFXn0pS0p8D0:ak2SP3gZevJvCFOM9FXETs
TLSH
T1D313AFD77FB4FD29FEB09EBB90126588D93990065CE764C0C22852331EBDD67583A2D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 224KB
SHA256 26515fc68a873be6ba7c2412f9cc1e6ed8a5320649dc98deb1331bc136a2bb2a
MD5 0f7408692afda53c4ba855e370bffb67
SHA1 b0e33192b73d987a848a529808f77a5574b0ea6e
SHA512 785ede33f4f772da702f532686823605e22ca97ea9183c027d784952b175ee18f64b4539c732f7107839a3a267d365e40b02b5499e51b7a720a40f8d65ddba9a
SSDEEP 6144:kOb89MEoBMQIyB0PxppiJXn2ZwzBVkTk+:kOb89MEoBMQIyB0PxppiJXn2ZwzBVkTF
TLSH
T119245CDBBFB0FE18DDE0CE7BC462659A991D602358E751C0C36812335FA6D36942E2D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.bilibili.tv_0.indexeddb.leveldb\000003.log
Size 9KB
SHA256 14bc05c69e139bd1a7ca0eb8d0bbe35d6ce4b9b80cb422a147d39c1c0683b7e9
MD5 097f0b6c5cfcf45d447d071bc3eeb5ba
SHA1 bf19c904d91a5d9f63d1986054e5d89b95c0f98c
SHA512 b4c41131d8af481d860ec9c5831bb762fc0efbe0d4be9ec7a070c22b79db4a7844d4c8ac54431a138f737b4490e396ac776985eb3063b03d3a9b3aab04744532
SSDEEP 192:z4O7FGCiRPQCWqCPWlqsqYuv5ryhmwIP1OAkKZVnzys707E6/58:zNiRP+P9v5ryhmwIP1OAkKZVnzys7074
TLSH
T12C12706E2EA09E63F069D63B08E70B4762717F807864DD4AB0D27F1D4A722637C50B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.bilibili.tv_0.indexeddb.leveldb\LOG
Size 389B
SHA256 871171cbdcef0e044e0238ddcfe504b4cf4e523f1c5ad662ad82455d5270428a
MD5 c180826099d559b1fe1dc992de01fb25
SHA1 93daa9f5759b687bbf4e281f1bd985c0ede3ea90
SHA512 19d92bac29263806ab3335fb73cfe4e01cfecd2fecf05497d5e7fec5ac9401f435fa75effc7f4998e48861923e628f2ff093f28df8540e75c472d37b6b73346b
TLSH
T1F4E022A854BDC33F7149803323BCBB4D8BF26B2BE6CE2D953B01C64478C8008D1A5AB0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.bilibili.tv_0.indexeddb.leveldb\LOG
Size 389B
SHA256 b22b34c38abefd039ba2090bcd6bf9991b9e80e15de03b6d28d10082705dcd95
MD5 c6b72c77d7ce9a38c5001c2bb4586706
SHA1 ed926d9c2a38259e78a3064219b3a647cad7ee43
SHA512 ba66275d4c935f19ca1c422c41668e4324bc3399b93a8ab0de3c803f7b139f1b0445789103a7df36d009b40e7ed8427c1058ae47929291eb64ce57d58457b468
TLSH
T10DE022A054ADD33FB049C43B12ECBB4D8BF2AA29E6CE2CA53B01C44060C8018D1A6EB0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.bilibili.tv_0.indexeddb.leveldb\LOG
Size 349B
SHA256 9f394a3e6748d7508fcb2c4d7d3efc2546405e8dc8000256c47422b7414629a3
MD5 8eb25d5cfaec2729ac63e8886ec0c69f
SHA1 09d99f33170661ffd298fbc0f3179bb0d9cf1dfd
SHA512 f40644d89b46cca2dce6b0922b1b4b12bee2e238217f7558605fbb04d4be65fca041af576c8d3a2f34064e7e6e85c6ace65a8d763222af899000a1cfb4d6f808
TLSH
T1F4E0D85494E9C33F7194C0B31564BB4E8EB25519E6CE28455F41D50460C9008D4A8675
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.bilibili.tv_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

50b10bd8-7fde-4cbc-8a44-a72c5a814f40.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\50b10bd8-7fde-4cbc-8a44-a72c5a814f40.tmp
Size 14KB
SHA256 2efde60e76a4eb8bea903e9b381645f78e60f5dc07f29d365db1bf978ab5199a
MD5 8a79853ec8d05922680c5d15dd97eb69
SHA1 9195cee3d8ef7396b2b4ac1dce8a323082446e29
SHA512 20eed13d441e93d2458151717b72a29a8835b3457e7650065f1ce4b1969a2cc5f9984c61e1145ed58bda4de9914e1ce986f21bd60bcdbbe581bd1c450774ccfa
SSDEEP 384:DNEhGJ2aJSJPqO/IwZl1Op4K4G4KV4/IxexzX/4ZTxIaBZflNqCsAT8YoAsIO2di:9421jf5W
TLSH
T1F2629EF7C3D58A6DCC11A6F4A7147E1FCE1D1A28832C3C26C9D8AE4B93E2471E25564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0883f81-ef7e-4eba-8a84-a9ae1894b407.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\a0883f81-ef7e-4eba-8a84-a9ae1894b407.tmp
Size 70KB
SHA256 e08e0be3208a89211520f9dfdf3f30d056211e4bdba7be26bd8488ec8ac63ebb
MD5 c4e82b9172aed2d4fcfa02823aa7aa17
SHA1 500f06b5970dbf5a2682fb8ffc998fa3a1027a25
SHA512 4b2b2f5bf10f18e6a3d8d9de647d19c108db8b5ad2bd22266a2e76b8c2e580b865d7109670fda8ace9ebc7f7f4ca7bba4d470882195c8fc23e9116c2b51f5443
SSDEEP 768:FDrYfQIj/UN00rQvhrpFKODr+E4CiSPums14n:9B0jYGum8G
TLSH
T1D663BCB7C3E4C63DA96151F05714BD1BCE5D0868072D396BC9E4EECA93E2873E28164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c364d1ce-afd1-4c76-90f3-e5513ddf2e3a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\c364d1ce-afd1-4c76-90f3-e5513ddf2e3a.tmp
Size 1KB
SHA256 c4154663bc61ae07f43b5d4fb9c6eff677679e3175ffd78e90a0d43a1b85daec
MD5 a81d7e55b873c3817c464757955ce169
SHA1 ae4f6053a8e3399738779a94d60a664a64faa75f
SHA512 3945b653289a8634c1f36a3f76a1e780c88a2a0eb70d51edbfc8f55085be9ffe27f7bd0063643f788789ecc465569cc8005b585ebdf482ecea236b0588b59ce1
TLSH
T14E217C67D17AB82B10691DAF1E14BD096EBAA432424154F8DEDB86BC70C15A30A126A7
MD5 SHA1 SHA512 TLSH

Submit Download

f2865c9a-8876-4a0b-9c0d-37afe4721a9a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f2865c9a-8876-4a0b-9c0d-37afe4721a9a.tmp
Size 66KB
SHA256 a39230ee8336d4d6d0634060c2456d51081e88879b5583a2dc08dcbc461ad5f6
MD5 d644d02021f58f40e900251110cad6dc
SHA1 71dbdbc1e91891acdc48ddd0d753eb62eeb80338
SHA512 4383793000f328dd8d3fb4f0e2d5bd84123127a56542acb474afd90bf42e74510c3d4ec647199318c38cac6fd73341e1ca882a0a1acd69dd6a983476556b4356
SSDEEP 384:DgRcH2t4JwJidzGpt8EKxi414b43V46F5m19teUk82kaceuwoylfYJJJFeKbR4eh:t2oYfQIj/ajfCE0rQvhrpFKODr+p4CT
TLSH
T12C63DBB7C3E4C63DE96111F05614BD1BCE5D0868172D3D6BC9E4EECA93E2863E28164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 1494e10400a1fd2fe00d6cc22dc6dc14e99a16ff02e7fd8965f8ecdf34dd46d3
MD5 b6052c287602b32cd9f79fec4b99ec90
SHA1 1ddab993b0c7a681eaac734e65b9a764972baf33
SHA512 1b758b8e5a15e04893213c820fa53817b667ef3abd4abc3bccac362984f14fe006294182721cc406368d979c91f874324b6ce8727326a0974cac5e1cfc7ceb59
SSDEEP 384:c6jY/7KxkXqKf/pUZNCgVLH2HfgslcLXODYj+ErU3uvHG1Vt7Shdg:cqY/7KxkXqKf/pUZNCgVLH2HfgsqTOEs
TLSH
T19E520A27644C9A3F0FD8CA4DDC16AF4FADF501576668092457FB9C18039A7CA214E2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 e8a43579c895cc088fa8cc60dcb89266ce80484f1ff4493e3abbfed571fde9a6
MD5 2d536cd801da76d2b3a47e1a83380542
SHA1 985c7527a9204de013c4cd7527463516422bca61
SHA512 f4563f7f0891f23bb20bfac35c369ae37c7d6640d2104bcc6ae7cadcc41be2093b676644ba691fd292f4d007f83ef576d4eb754a0e5c9cc42935d0947cc7fed0
TLSH
T188E086D82AD9C27E549A82330268974DCBF4A627E6C83C272F45DF8519DA908F1936B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 144B
SHA256 054de8c0c4a5132ae2fa0da0d254ad88880424217670d6778f74c31f8199e2b2
MD5 70ebc90ff58156fb74d111fa268fcc03
SHA1 4d99a6cb3526e0edf31c392e913a28f5ed933090
SHA512 8dcc1366ae1d896bf9bb23aa01f76649eb42820db7a11e77528ddb3b3d206ca30ed68c53292467f5d5501334a86272e9e09a8a2b18fced9c3c5fa334abacc499
TLSH
T162C0120FD00A60C2C80086B06946644D22814E36C9209BEAC6F456EBDC872B04323105
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13437169746428118

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13437169746428118
Size 46KB
SHA256 462c2a8c5906d1784f56504aa8530cda775b183fa1b79d65b1f6550c2e7c4f70
MD5 bfdc43e6611cc8d207356ae594bd1291
SHA1 878bda2a77150e35708cda0fca595df033e371b4
SHA512 304df5b945269914659ccadc0cf42aef07cbab750e1418337f80a68888635fdc3fd0d4a904587d8d59f327dc14e304b43fde6c9bb09c20c419362ea8b6890cb6
SSDEEP 768:Pd8cShIDPXeKymf+TS3XeKymf+TSEKoKGK4DN+fD6fAI:Pd8cShIY9Y4hy+fAI
TLSH
T12223C6157DFA902CF573EE716EE878EAED9E75236849644B408103074B22F51EF22A7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 168B
SHA256 c5cf4040752ea5b8c1fe9683b04eba89d0a5b5360ab6082b13753e2723a14e1f
MD5 8ade84ed26a1be0b72e227ee2f813856
SHA1 617fbf00e4ab9b1b2dd846e51b3eabb726072c63
SHA512 5b33c45d388e64351fc63e98d1ebfdf5e0966d323b5c5078b26c974a94c90b8acc228a66849451e22d2f9210be41cb89938135cedd2dbd0e517be6112cc49076
TLSH
T165C022C28CC20A23C8000B30A2EA82A03B80EA08230A228300A800C28CA28C288820CA
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 144B
SHA256 5600c60c1d12a952ed8edff82eed68cdbc61b5fc837373f637b968d0390253ce
MD5 50079cffa5cf230aaabe501883983853
SHA1 cc7b27bff34f83bf74336dfb7ea938af7a4265b3
SHA512 9cb5756ba4288a7329ddaee606faf871f297934127b07ccafda0e752a3825a59426cc04c746b8ad0b99f8dd66e82661fa3ef334ef5ed3e65a0a015ca46db67b1
TLSH
T1DDC012918EC00523D9504B7563C301D53355DF00071E278B40A400C1DCD65C38E37246
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 d5ff206d0ffce6ab6d5257a8e951607214be0ecbf5c3da9cd526abe92ef74cb8
MD5 22c2e82692fc4d6fbceca93160d3d282
SHA1 5ecdaa4521e9b9f601682480345977c6c38f18c2
SHA512 ec3f42b9190b9bae75eff3bfcd7ee20ddf8e889989279f564f6aef8827e8b4be66998421fee0e0cf8476e72433494a12c4af19d8486daea3ddd641e167b7d523
TLSH
T1CFB002B44881962BF6D48F70A3D118D53366AF59638B8A9689E400B5DD93B97E22520C
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 448B
SHA256 b31d1ff9ce082112ab78c60fc1f1264ea4cd2a919727ed40663ec7d9d91468d8
MD5 ffe2ad7f72acf483cf032be3576dd59d
SHA1 b936a18d03021e3da3d8bca547534278514a8c48
SHA512 cce8c4ea1f9a3da34f982d1c2207ace874b7da1de5e4b99832f12da0b680c28bbd9a54d42d4dc4ad254580651435f79cebc65cb1b25b1dd6a0a1ad147336ddd8
TLSH
T1F5F022447F34B404FC9417300A82030C4FC6F49A7051A0F7E259D6A4BC2B9689DEAED6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 171e3616473e55a9a28f8000ee1318ae0bb7ed448822190a4aa8e4c8bb092a3f
MD5 0c18847ba4ecabd62c57f496150e5d80
SHA1 cf672971039eb71b919c1def6973eb24b0261c6b
SHA512 88f0edbf9b4a8494af231fd28daa3c0cddc5484f7cff22596da5df55d7fcc2170f78f52755a0f02ca0c5100ea4333ec7ee2b9ad090b3c19aad183b09770b1b50
TLSH
T1ADE0D8E426C9C73F108A90671278E34D8AF2A512E6D929362F0CE68556CB404F182260
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 c7afb56e0430adf4faf92005208dabee24a75348ac3b2d43801ea93df4a0078b
MD5 57276012ed7d856af1cf4f471f311d74
SHA1 bdd254ab1f43a037b6b7e7a38d69e15ab01b9263
SHA512 8dfbf5a0c76c4d86c900c5e60215f5fd7cf6d1ea9489e7b342f0bd5aa899f0edf2503b5e8d3ec496012a775eac73b49a517f016cd8ca42f1ec18a2374c7b77f5
TLSH
T127A0022045C10833DE04C2B16065494D3FB188551EA59787B8E258788D6B9C06165105
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 016e363c780762f4a0a109c105dd84792cfb1ff557ce36a127046034ed337e48
MD5 9229925877ff3e4285dce15029aac64c
SHA1 0fa7d2cd2bc6e054184c92ed4a822f9ac705674f
SHA512 3477691da78f032289fc53fcb3b3a7f720242df2609a1c1c72e34316a3f4ce5c4d72c76732e056afe7c5b70d31c4a0cbfd69ecaff40cd48d5dc3a067a1ea6d0b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 c7a0a00d360c87569491a903728524fba51cb16f8f04cdad7019b68f656d2f9f
MD5 ffe3d2ecad57062b6ad137f1c7eb913c
SHA1 a7a648d64c426117070c8fce809ee2c69b34fb09
SHA512 d45d9ea259b1598343c0d7d2bb090006713874dd96cba9ecc9749ac612dc66b336e6fe973c2431deb72424adf116dd702d0b3c80444f3c53df9f08c3db949a1e
TLSH
T167E026F826C9C33E0448C1A30278A39ECBF0AA16A3C5362B6B0CFD446DC6008E1A12B0
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\eb419bc6-ef1e-4f56-837f-ee356b84ca64\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt
Size 157B
SHA256 b2a677d4bb68bad09e0402d9ae2665776627772fccdd7f984919581644a453f2
MD5 65b5690012160ccead2f61cbc161e296
SHA1 30e3d33c43b885b4a878032328757f3d0015e09b
SHA512 fdc0c4cc1d0f5e1e6223578d7654619b2e1b592e91d20bea2a42d2be8e8679731c5e1e1f49cbb9fd2eae889dcd1cbd051d865f5b85c938d540fd255855a674ce
TLSH
T1C7C08CD31560028B4731B4D81028710DC17B8E0DCCD4CCF89906B51B28B8E274801968
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt.tmp
Size 150B
SHA256 7da203f56e369628a78459f339f16c0d895abeb86c57c1d3bcfcd1bd9a846c54
MD5 8323b8952783ca65666cf514957f4a88
SHA1 f5f572f82101ab8840ac086f690957854db9cf63
SHA512 19026e19cb7ed5497e69f9a777b847bd4fa5ac6e82a55819061375c7b3f62125c62dead28063048b8aa4fcd722d6806640d8208fd53bc9803ff316b1910e8152
TLSH
T185C08CD35480408B0630BAD81018711DC12B820CCCE4CCF8A904450B14B8E2308029A8
MD5 SHA1 SHA512 TLSH

Submit Download

b737fcb6-2109-4ad5-a021-309fd9697ae5.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b737fcb6-2109-4ad5-a021-309fd9697ae5.tmp
Size 414B
SHA256 08f63b5a435288109dc1cfd47ce1e64fc0c414ed80c06d1354bf87a153d2d76f
MD5 6665ff4b9da706236e900c2f96da8a8f
SHA1 a48829c97b7d06c9e2adb6047b77a8f9537d34de
SHA512 7724ff5e5905e75f6ab9a2a873e9e971ed6cae0a01e7b33bc0e1afea2bf49ac78ace0ec1b388682135362c9c544e9146f438f7364aa5c51b43fb3a27459f31a4
TLSH
T1E4E02BB9CD39EC2728FD4B1850904746EA80131726904A4F373CC5098FF527A458AD1C
MD5 SHA1 SHA512 TLSH

Submit Download

c5e7aec9-6f5a-4c4c-ade4-c142ead4974c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c5e7aec9-6f5a-4c4c-ade4-c142ead4974c.tmp
Size 12KB
SHA256 e25bd7de48fff6fc1d2132719be490077af087ccd39302f80c8173ad38e4128d
MD5 215ded29f037af9be547de63b215d58d
SHA1 3b15e46577749676bbc8fcca7467972e85a0d16f
SHA512 8413ec95b2402b5c64972e8d016626584fb6ecd49ef5bb714f1104cc27eaeeabee000fccee6ee68a340f8057a5fe0c83a3247d5c6ad337767a77d25876f575eb
SSDEEP 192:vRjcBzUDvx1v71vAPRp2aPmVX9IHsb+WN1Xrw4ZO2MW2+QaePc+DjVyIsnAUge:vRjmzUrxF56Xk2wyb2D2+0e
TLSH
T1FD42956AE910397BDCDBC22AF961B71BD7F5102225942E84E6FC883C14EB5CD7117407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d15c67d1-e4bc-4da3-afb5-3c46711e4e51.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d15c67d1-e4bc-4da3-afb5-3c46711e4e51.tmp
Size 16KB
SHA256 1c2c6e0b9a41b933fc8a82a9d30081dc05e9c03b86397012ad77c6ecdde6c433
MD5 d9eb509571073f9be04fd0a8d0d20c61
SHA1 10307489c16679a19011726ae5c7f93fd96a01b2
SHA512 8b51cd71b80e84f330d2e86c5c6b132a6ecd52309deac5e47476e03f14113a1ab0e6db88955e6ef2975fa7b43f7c83d630685f71289e1ec570c44a0108b68d9c
SSDEEP 192:ORjcBh4Dftv7uHFPRpQK1vkRdzvxcrxxcq9IHsb+WNvzvLwPb6L99kiR46uyGqEO:ORjmh4LNCdXfcBq2wjzDEyEA2+oe
TLSH
T1B872A55BA9202A7BDCEBC229F451F71BD2F5202655C42E84EAFD893D14EB6CD7107807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb5979d3-9aae-41dc-9da9-a3b9d3b23ae6.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\eb5979d3-9aae-41dc-9da9-a3b9d3b23ae6.tmp
Size 14KB
SHA256 3905647b837ac0d654ae7a1f228ea63d497f7493c36a4221b873c67a8fe3fd69
MD5 8da827f6645fe198a71e870ee1fdf4b0
SHA1 45a7271aea4a4e8b35d2d3717f0250df78011611
SHA512 dd543318ea4f97ea0454c0434cd30ade367ff48e79204b6a1ade463b7e1ce3ef1f16379fefd928646577ae4c4c4ad68fe23d9c275f35f3519482f93f9e068fa7
SSDEEP 192:vRCcBzUDvxVv71vAPRp2K1PozkcrxX9IHsb+WNvzvsfmrw4j4eoW2+QaePc+qjVo:vRCmzUrxl56X82w+Lev2+DE
TLSH
T1E262946AE920297BDDDBC22AF951B71BD3F5202265C42E84E6FD893C14EB6CD7107807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

faf107a6-3b0e-44db-a76d-e92b7036609a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\faf107a6-3b0e-44db-a76d-e92b7036609a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

fe0936bb-2ff9-43ee-9a2a-31046cdcd0b8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fe0936bb-2ff9-43ee-9a2a-31046cdcd0b8.tmp
Size 13KB
SHA256 983b31d6e5cd69101704d066107bb5a57583afe04ef601ba294731a9fc817209
MD5 936b1bf60526e42b1b2ca11022ed073a
SHA1 b43a7ebc3850a2c67628b8f3cdf959e7c2d14b3a
SHA512 7db3b1685dca7b2cc31807273594e77f859d978b5a4db7bbfcda960d85b5221208cdac62c8399085e14bf73b9468da28233bc94df6ae4f62f2f3713c6c7ec8f0
SSDEEP 384:c6jY/7KxkXqKf/pUZNCgVLH2HfgslcLXODYj+ErU3uvHGoVt7Sh9X:cqY/7KxkXqKf/pUZNCgVLH2HfgsqTOEY
TLSH
T1DE520927684C9A3F0FD8C64DDC12AF4FADF501576668492497FB9C18039A7CA214A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b476e141ab20cc7f5e070e3575e9a70f2b6431c745847b036563c4df7d313fb2
MD5 b22787b8e98d32a911d3fa7c33fb6e8f
SHA1 e8e1e94e87bdfc4934f63343d8735aab8a9e4d70
SHA512 998d5b9384ca1143010a2f5b9a2c35309e526261de21cc9e78bed32e032c939fc1cd55c9757a8a1ba9f4337220a32b33201d8f135fd26c4daca37f347e236a57
SSDEEP 3:MsEllllkEthXllkl2zEklLpYal:/M/xT02znFt
TLSH
T11C4404047FC00405C50050305511C3710373DD1007135FC334570477DCC75CC1C00010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

a7e67fbd-c1df-4c3e-be25-9878b6a5d53e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\a7e67fbd-c1df-4c3e-be25-9878b6a5d53e.tmp
Size 145KB
SHA256 aef4ae3dd85c733456a10becbd00734ab42345a04976242c135b0498e99a4e09
MD5 2b01eadcf0729e42aec6c8ccdc6af36b
SHA1 0f4f40a51b15fcfade683859515aeb38621c11e1
SHA512 b158e646622f073e701b9890d32f6bb5d0c36f441d2e427b064e58d622f96c1b7300ea99cb4b4ce26980f23daa61759c7c8f0dc3f4950c709a614f7573554af9
SSDEEP 3072:M2a78IcIDplOWG8F/zPN/FFK8H6SjgB1Tes3PnzEvqy03u/Vd:M2aaCF/rHo8aSjG1Ss3fUqF3qd
TLSH
T198E313B6DD3D58A3C56A4586BDCE3A170FA6C6BF04C12E4C8AD9161226CD44DA7F3F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abd1a074-375e-4ced-aa1f-b203b8e692df.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\abd1a074-375e-4ced-aa1f-b203b8e692df.tmp
Size 269KB
SHA256 2066742935313c7eb8329eec07fe410bc23a10f31f9f7324151676ff16333a6c
MD5 dc797a05a591fa5969a801f66689fd38
SHA1 28d09dbacb16f3ab980188fd59b8934249cb6bff
SHA512 4b040b99de5327e5b8bdb432439d5bf9779eb3396e71e56a2f29d692cb6d634ff52ea23e2f59c466193e68c434d1051f58b955eed1950cc5070265ee06765199
SSDEEP 6144:L3ICF/rHo8aSjG1Ss3fUqF3qX+hFD+7t56OD9ZfSApprF:L3g8/GRl38yFSXD9ZfS4j
TLSH
T1DA442362DE2998B7C9BD4481B9CB37120E6699FE00C63E4C45865B57A18EC4E03F3F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea300246-2fa5-4288-9c68-e904d80b58cd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ea300246-2fa5-4288-9c68-e904d80b58cd.tmp
Size 130KB
SHA256 e4e81ba10930bc22225272ec0b83fd546463449b61b41a99acda5068b46d94f0
MD5 36ac36d2187e833a098783c5a221e894
SHA1 3489843dd2271a7c7c6c57de995b061202170e02
SHA512 85d615495443e702ff1608829e633bebd868b3d66ea4f9d8fec896831e5806fe59713e2bbe1ae3e6962e5b3c414a725efc7701377aba99ce81ef1e298bbd1bfa
SSDEEP 3072:dHJ+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:dHJ+hFD+7t56OD9ZfSApprr
TLSH
T1C8D31232AA91D8BBC9FC6541B157A304DE766CED41DE7A09444A5F8EE09FC4C06B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 52KB
SHA256 d8b141169f9754c27cdc5735d3adc0bc664357843e1af79274570b5800a70e2d
MD5 064604b834b6e98d3982e29c0c251cb9
SHA1 8487d3733284d18b82e87018cd7d5b7e6a7b1769
SHA512 2d4c8b74c92d5517970ec57a1a8b69835dc48c796fac464a816901f434a235e6a4b635bffe702113abe8bfa49663e6cb5ec4c471d42204810d463657a9993661
SSDEEP 96:5UcfqLUua0LUuHeWgmUr9u294A+DBqHexNxHell4FQCi+dME17Gp0gI2PAJe4/B5:5UcC40gkef4RWe7xel+72PAJeABak
TLSH
T12E335CCF6A64AD5DD9D05D3FECA25880B86D07168CA764C082E41D331EE187A681E2FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e87d848-d9cf-410d-a807-0c33c8681ddb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0e87d848-d9cf-410d-a807-0c33c8681ddb.tmp
Size 22KB
SHA256 b7c8cafc8516317023bc8c575a1653a8f3e971fff056e7a57083f0ceed036ed6
MD5 4374983496a24e2e8874c94066e2534f
SHA1 c8630e0d24e1a1c3cec90d72c9af122a436ed79a
SHA512 29cf0028ecf098883d9966d1938697744bb195d5e3ab39baacf2ee389d5dd727981987cd89abb46c9508b4398d4ef9df58f587eb73f1da80c04467e519be786d
SSDEEP 384:njQkUSv5sNjgwuE1vj/zIGmuYBH2iFxA8tkIdo1MKWdzivwQTRIIlv:N5ILZLpYBWiQ8o+KWdzivhLN
TLSH
T14AA24BB5D8B57CE78AA2E9C4A546F913ADA4413BD2C41E4CD5F8763C30CF2B81317952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29e9ac8b-5533-46e2-a586-39ee83c179a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\29e9ac8b-5533-46e2-a586-39ee83c179a8.tmp
Size 18KB
SHA256 947f13abd68cf5a9bb97d4cc77b2e56aab05cb601451f757960555e2b2b2d06b
MD5 ffff016e93394507bf910ba3aa5cd383
SHA1 ec9b800c696c07a29509fd6834dc8aaba66b60f3
SHA512 7ea4103e138be4bf2d97e3402cce37a30cae14fc6d6708b7fc21cff96907c58fa29f8c4ed6d573325b38b886d48484e1393bb3e24203ecd1661fbd9547dd1994
SSDEEP 384:n8QkUSv0sNjgwuE1vG/zIGmuYBH2izvwQTRIIlv:80ILkLpYBWizvhLN
TLSH
T15C826C71AC7AAC779EE3B504F5863A53EEB45167DAC02F94E5DC5B1C00C6288270BA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 86788ca5ca7fef7f10083df937e9ae5d0b7ad97c73a11bd065eab327a3a3accc
MD5 3fb8eb7bfde3d8102a06490273bc620b
SHA1 41dee86f27971fd3f90e44b41ebb056a4b3c0b0d
SHA512 5261f86c70a6d0ae8cb560d97ec0ece97904ab587a39c6c3ec2a0151fe33d72b60b271fe8448855de37981e67315ea16bb3a85e3af9a86bfb740a64d972b5045
TLSH
T16AD080F07AA779B9D17E75750078D5C151489F53515406212A235C1C1D940C76965FDC
MD5 SHA1 SHA512 TLSH

Submit Download

0a08afe6-deae-4041-bcd6-f36a4964ec43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a08afe6-deae-4041-bcd6-f36a4964ec43.tmp
Size 11KB
SHA256 04958b6508bd99cddf33ab4773bde5405210b42abd89f106dbebaea7b8c5781f
MD5 6ac227092ae992b11692455d385079f5
SHA1 2ab10f3f950c8610e07955b567ca3fe290d4dc27
SHA512 45bdee5b161b18c723a970485a44f80d014322c8b7ac33dce8831c9d6a0d4628f0a782be52f3dafaed1f1eed2b037db7c861a3c215cbecefc3db49e00b5395ba
SSDEEP 192:sxZRR1Zd/fYs0HWpVavpFIdpd5HW6+WNGYepPEJROIgbfJ:sxZR9d/fYs0HWvaYrHbGN9
TLSH
T10732C856AE28A97BCCC6D21DBB657F13D6F91032A1D11E44EAFC862C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c2fa55bedc62049226283aa03b1f9cb1628e023149e6774bcabd7399b7a24961
MD5 728535db6cce0f7d41902647245684e2
SHA1 51d1d95215005a737838a3bb7565b03c782fcc8e
SHA512 3d34510e44043b89eec3cc9d2b5d36a4538048b781b5f7cf56de5bda5baf9e62a0502de41872bc61ae8479a6c1629ddcc3a9a3056836e0e14977abaa92fcbadc
TLSH
T12A5172C487705052E3A9C0F0A5F922C73AB0C8BD3F8B1E5205A8D5798F4A353936C19A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 100c4010c44e468ef141c258f713dfd5922715fe9e02eb868a1de6c3721e0c48
MD5 99fcee22cefc128412e305c4a0ac9914
SHA1 ffdcbf3705a6397c0eeb53ffea931efc612f5ad5
SHA512 16ae3476fcc18f5ea081cac8bb90e475b3d46094c825c72b56a785bf8abfcc66df1f4c97bf8068b7f45174c406e27eb833988839d9a0fa96dac8aeff063068cf
TLSH
T1E65171C48B705052E3A9C0F0A5F922C73AB0C9BD3F8B1E5204ACC5798F4A353936C19A
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

09703d41-80c9-4cd0-9725-94a6f6fa4fb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\09703d41-80c9-4cd0-9725-94a6f6fa4fb1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

21e80fff-44be-418d-bb27-f030d83c5d51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\21e80fff-44be-418d-bb27-f030d83c5d51.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

4038b64d-52a9-4ddd-b359-d50b4346ca8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4038b64d-52a9-4ddd-b359-d50b4346ca8c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a0907882-2e90-4766-9e3e-111eba59ac50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a0907882-2e90-4766-9e3e-111eba59ac50.tmp
Size 1KB
SHA256 e10d93afab387fc9cac7effdc46adc59ab7e237b9c8cacd0faa413e221ddef35
MD5 9c6434251ce132c7e96611a13f5be4b0
SHA1 5e0b173ad34faec2281305e013368a2334ef4499
SHA512 9681e271c4fce12169b20adc40c4d53844b959587f6cfd483fc48366d2186c8a204a664ca008467b6c65f9865cf53f3bab911bef5a0f842b7bfa8ed33bbb64a9
TLSH
T170417FF7C2E8856E890156F0A618BE2BCE1D0A54432C3D5AC4D8EF5B93E2471D14155F
MD5 SHA1 SHA512 TLSH

Submit Download

a1613071-a461-481f-af20-b99aeeb79dc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a1613071-a461-481f-af20-b99aeeb79dc4.tmp
Size 10KB
SHA256 c0f84ba1d674e8914fbbf1f61c551b0edf70c88cbe7fb97d7eac150681133e86
MD5 230e4f56b8afd03e743223c252e43403
SHA1 c8a37b2f9ba0c2c02ede09a8e566f1f5c1510b7a
SHA512 1187c27e9b6fe2a83ffaa5a886ff34ceffa682080e6eb66e87771888ba29a36bd3537931595fa02786871e5a94afe9d8127fcbcd280ecd2d1f87e4e078d4409e
SSDEEP 192:sxZRRgsd/fYsAvpFIdpd5HW6+WNGYaplENCkIg4J:sxZRPd/fYsAYrHbGIc
TLSH
T16222C8526E28A97BCCC7E21DBA657F13D6F95032A0D41E48EAFC861C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa5ce182-97ac-481f-9dfb-3fe64627cb8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa5ce182-97ac-481f-9dfb-3fe64627cb8e.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfbf1659-8312-4159-8647-2d7d590f28f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dfbf1659-8312-4159-8647-2d7d590f28f9.tmp
Size 32KB
SHA256 a9808b32b2982922ba771b032a970992d2726161be9dbfe10cf001873130fc53
MD5 83b5e0da9eccf8c145d3f3c38fadd13e
SHA1 e84e376105b98674532bf1e5590a3655d666e3de
SHA512 c40c5a149146f21e7eb4e5ace649050dec196053ab5b1772175a7dc340d528bb7818fe8554317e02c5b5da90494117c468c50c35b46829948b7c78bf6108e906
SSDEEP 768:oEWPcUg7pLuLjWKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjbClLlACy7Lroc:oEWPcUsEjWKWvKeEeu1ja6bClLiF744L
TLSH
T196E2EB7B680CCB7E4FC00A9DDD5A7F9B6EA8028B96988D4047FE945C02C67EE51160DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a91c5d28-28cb-40a8-8985-7eef8bfbf425.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a91c5d28-28cb-40a8-8985-7eef8bfbf425.tmp
Size 8KB
SHA256 e188df97d0fcc8c6d0fab2189df3c6844ca00adffe59cf8c6619bb5784c0bbda
MD5 5b290bd455477d8c797f3e5d86c414d2
SHA1 dbeff890cc2a8c388990c8268370084604fa3a20
SHA512 917390e508160e9df88b93288a4d790e25172331a64b0a92544275e99e3187779ebe8a817fa2c7cd1ad0826ad0f74567b63113202b51dceb2f424a760f43326b
SSDEEP 96:3qONkgQsjpfe/tyng7X5ih/cIPURHl8h4otop55YDBNBnP9ZvEI0IG2jbN09PqsR:aONE6IE7QmiUysBTPuIGmuY6/C7s8IU6
TLSH
T13A02F935ACB87CBBDEB3AD08F4877E27AEA5112BA5912F84D9D81A1D00D735C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9e3de04-b865-48e9-b4dd-c92934c018a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c9e3de04-b865-48e9-b4dd-c92934c018a3.tmp
Size 8KB
SHA256 42d20c2259eea7863d185084a4fbdd52ebad06c9f96af70b7727762e3024ed78
MD5 11577c069e2082092ad0e2c8a1debdd4
SHA1 fb9d64ba9943946bd5b8483abd82678ab700d10c
SHA512 74e7d04f6d2e918d31470e25fd655067601a534bfbee9e0ca0ede02038b1981dcb0e7c27a389d62a30a66f71814b10c508e465f56fa58771ffd3169420691867
SSDEEP 192:BONm6IEPQmiUyvBTduIGmuY62HReUk27H9qZAU6:BONm6DReduIGmuYBH3HzU6
TLSH
T1B8121A719879BC6B9EA3B804F4C33A239DA51277D9856F40E5D85B1D00DB34C270B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3757068-acb7-4c65-9331-5188370d42b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b3757068-acb7-4c65-9331-5188370d42b0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9493f55fac5a99a4b8fd86b1ff6a7f32fc9fac600739dd9c374409ce9d6568de
MD5 45def757751e79b0838559893b0d5f98
SHA1 4317dfb1cc0d60534f159e9ee05431adb2b337fb
SHA512 78c364ebb40cd6b115886e86328007bafde83d9d907ccc440700e5171a76061674741d2e2dfe7bfd9d1582f98889fdf8a5ef1e0f909481f0e56e62a07df8dad0
TLSH
T174411858A6F91148B3B76F1A5BF6696D987B79272E07C45E00110E4E4A66B40CCB1733
MD5 SHA1 SHA512 TLSH

Submit Download

668eafe1-7c36-42ee-ba4e-8c943485d006.tmp

Path C:\Users\Admin\AppData\Local\Temp\668eafe1-7c36-42ee-ba4e-8c943485d006.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

689ad268-62af-4c22-b28f-ba1495bc2735.tmp

Path C:\Users\Admin\AppData\Local\Temp\689ad268-62af-4c22-b28f-ba1495bc2735.tmp
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
TLSH
T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

907e9628-46b0-414c-81ec-6b17b0235079.tmp

Path C:\Users\Admin\AppData\Local\Temp\907e9628-46b0-414c-81ec-6b17b0235079.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4228_72497618\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

9f37e3c9-a071-4822-aaa4-0cff57f4b298.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4228_742392023\9f37e3c9-a071-4822-aaa4-0cff57f4b298.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4228_742392023\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1790481643\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

931557d8-de28-40e5-af11-88de2ac05ae8.tmp

Path C:\Users\Admin\Downloads\931557d8-de28-40e5-af11-88de2ac05ae8.tmp
Size 12KB
SHA256 10ea520b5188a1c95cfb7a392f6ed137bf9b58ef756c78eb44989f73a830e552
MD5 e5bb4fb2714bb1445b4c80dafabc1192
SHA1 828184494a540782f1e49bd77302a8f092ff0c98
SHA512 d4a253c7c8139b23c15194a31367cb4d0317a2a69c0faf09796859cb0033022c4b4ea632a0e2f6cf6d5d45ee54527539df081e7d502deaa2c185b88bde82cd9e
SSDEEP 192:sXHNsGeTHQpD+da6+888+UV7tDoj/pxzdbqFtCgdSbURUz2TN:sXX+/DV7k/34Ft/RUz2h
TLSH
T139421A5CEED1A1B0FA1707CEB3AF25690228A0C76009C484F54CDDE87F467DC4A56B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download