hxxps://www[.]w3schools[.]com/sql/trysql[.]asp?filename=trysql_select_union3

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
03/08/2023, 18:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://www.w3schools.com/sql/trysql.asp?filename=trysql_select_union3

Score

1^/10

Malware Config

Signatures

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133355626903763382"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
2356	chrome.exe
2356	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe
Token: SeShutdownPrivilege	756	chrome.exe
Token: SeCreatePagefilePrivilege	756	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe
756	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 756 wrote to memory of 4740	756	chrome.exe	71
PID 756 wrote to memory of 4740	756	chrome.exe	71
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 4196	756	chrome.exe	87
PID 756 wrote to memory of 460	756	chrome.exe	89
PID 756 wrote to memory of 460	756	chrome.exe	89
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88
PID 756 wrote to memory of 2032	756	chrome.exe	88

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.w3schools.com/sql/trysql.asp?filename=trysql_select_union3
1⤵
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ffdcf059758,0x7ffdcf059768,0x7ffdcf059778
  2⤵
  PID:4740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1756 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:2
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2212 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:8
  2⤵
  PID:2032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:8
  2⤵
  PID:460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3148 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2984 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4704 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=5124 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5332 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5508 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5692 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5856 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=6416 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=6288 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=6272 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:60
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=6244 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=6136 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=6128 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=6108 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=6100 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=6084 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5512 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=7916 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=7756 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=8420 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=8280 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=8040 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=8608 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=8588 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=9116 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=8976 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=8844 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=9420 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=9756 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=9400 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=9144 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=10048 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=9916 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=11236 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:6812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=10984 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:6804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=10956 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:6796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=10928 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:6788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=7876 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=7828 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=11900 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=11768 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=12040 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=12704 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=12496 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=12356 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=12220 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=12316 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:8148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=13004 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:8180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=11576 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=13620 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:7856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=8856 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:8124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=13940 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:8608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=14104 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:8688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=14232 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:8788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=14588 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:8892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=15040 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:8716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=16148 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:8964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=14260 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=16464 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=16632 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:8
  2⤵
  PID:6476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=16620 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:8
  2⤵
  PID:5792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=8612 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=15156 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=16472 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=6772 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=916 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=13996 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:8
  2⤵
  PID:7132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=16732 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=920 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4804 --field-trial-handle=1860,i,13846352565657196055,15787499643975760241,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2356

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a

Filesize
95KB

MD5
12967f05d76292adb67ad5e94622d783

SHA1
37589416b1ce024f74e229e060eee7bef32f6d22

SHA256
0b621acdfb723d6f8e9d732ef4707e1a49fdf54894e3f65f207a7cfc46a08228

SHA512
883c03526ff80108673a37abcbb8e2d7fe1fac96757e19b7682fdc1d3d2b36e83eb9ad71d0cafa1c6a8579fe8cceaf0f7e272023986ff6ec5e7790bee8b5a11e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
257a76e756ca532edcbb0c4061aba3d8

SHA1
c967459a842e864f1a1ac45e276b195ef9dc5be5

SHA256
ece571941f7390726eb47b1e6e82633ba6051c9a746034ce289521cbba2b1090

SHA512
2144116a3e71b74774efe580e0c19c6e56775987bf26ea33b4bfef407565bcafd918d06de266a316f54ee24b89baf64f879fef94a9caa3887c2fc920e766806f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
d881ea1a54bbd122308f276cf957cb3e

SHA1
fa25ef557bd07541cc237289f492d111782e8209

SHA256
76aca7758618041f9cc7091cf09ed86fc7e2ed60ef3e96463828eb93031693e2

SHA512
1d65384f3da86f94862fcef5231419d154009950698805ffea4af0c354564eabb0cc4825b495d8019d7cd152b54e0296a4ce9a379b60a4295fb228a66956bc9c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
c9acd1cc2501b04c792095597a4950b7

SHA1
a584c51dd262edcef2cec8e71abb760b47798cff

SHA256
7538e006fce0bd92ed2e4dd0cd8ede50d04343c501c92b4b8c7442fb966dfc38

SHA512
323d8b7a3148a3e4a97592b833e75fa6a49469c9c2f570fea51d8aa270b20238743e0cea47caa9d7691691e51051c3d785972acb399a14f4d60ab2dcc5008900

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
142dccccf5844a59e1c78119017fa946

SHA1
d0936b6568ac4ffeec86343c658ca47fc897aa4c

SHA256
f1d6f2defe3fa87ef2182b7b2182fff333735cb096f2bbd798dd120b283737fe

SHA512
ca4ee090385a0259d6690c90dda0d098d62625f6f58c7058a2a1dffefaf727a11aec82edd96ce991dea6bb0414ca5f957607351baf963c4d8d73a4d262c372bc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
20KB

MD5
2599281edd5c64b129bf86ad9d8f7770

SHA1
c5ea5cd851ecdb76f29d0340ebc6cc982141ee5f

SHA256
4801f4f9a8cc4f68ecc5791a8d30477e92ab1fd46627f3e3b28cb1e4d18533b4

SHA512
d59155bff3ee8725b4d0d6f3601cc977b72b069d8540f5e4d2685fdfa8f9157c7da4ec834f5c8679e169008ffc75fe92e807ccd711b1ee27dd8612e8c666b716

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
19KB

MD5
d7522e4c2a97b214a19e239c529532bc

SHA1
b45880bf94714d2ee497066b8d0ea47e29f81a15

SHA256
05d40bad3d833be8afb5b1d1b3c78de529aab15da97af4eeb7c1014e90e6ae0d

SHA512
94df3a8f9d405b13bc6c484f46b961ee13021aedfcd458d253970c4b3ea3643d3b7261af4d41484fc1cbf6bfd4d88bb0b98f9dc9e3bc472e2ebf55815892eb28

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
1697054d47ae67d023d5a592e3203c5b

SHA1
38da94392b371ba0d5ef93c1ea2a193d382c7739

SHA256
68fb50f6ab4c4c387f8659f20338c47d0329bb091a9160f8ee7a392957dd268b

SHA512
51c07587997788be14b10ee687418df82ae6bdf72109132556d1830cb1cbabcd955a3a605cfbf9aa313588971b0c7c48809ea9bf558be4dd49c9583f4eac5f41

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
78cc8d8976d8eb873f5bf8a5cfc42097

SHA1
2979f2cb89f9d1c106bea9afc7db61b91b63ccb1

SHA256
b5cdc9bb584c8c343482a5ad33cb3e5f5d8bcd3e48bf72e93e89ac62882042e1

SHA512
6ad0a0819a8001234a1123b6ff4a47ddf3eb20827e4c325f110881813f742505096afef7a3647039204ad3d4a60c893d36dc5d9429c5229f6d5b85a6fb34abf1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
d06a1bb41bd17a82eefa4c5cdfd61fb9

SHA1
8ac665fb3b0f00a4ad01d93b92df33ad91ca895c

SHA256
86256ca1f162a1311aff9a0da6334e4ad8c43ea31f4b221d76fdb7b34a958128

SHA512
7d4b2385e34c739330d0490df387f876c9dfeee3f3e4e04f257a9080a70286f233a84126ca38df13853d24b0b2e3a1363830245e5d9fb921e2080d1577cc77e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
291895ee8f44a25594dd3bc90733e700

SHA1
dd0dd2d9f1cd3c8faf162fa54bd1ff3d300b83aa

SHA256
9603261445e51d440724ef602c4def0c80ac7cc93d3ce56ad4c981420666982a

SHA512
41c1138f255469d2f57446155121542ae246854a05d566b0d4b026bd27e6662bc103edf906ba7bc8bd3b203dbc55e7af91dfc59c952cf328617334a669e8d077

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
d31d34efc242e139bb0c5e158965703d

SHA1
cd0aed929452b04afe2136dc936ea575a25f27c0

SHA256
de9b4dabfe6404da9fb2c77e1568e198a8394ca09928a07d0df0a6e61b4d08e6

SHA512
a7a9772b7358d87f627cc3efdfde307a0483eec625b2c13550c1d01300f31ed4df50f0ca08eaf104dd489bca994275f6a658b85b2a7b6c3fcad51f4eff449068

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
70be952cfe1f6c8d0388c7c1bfb32817

SHA1
c5f71c8a37f8314b6f4cb175f2feeb336b5748dc

SHA256
b8d34081e8cb717f57995b5224f5a449e0abe327724184d747dd3947b2f1f52a

SHA512
4e0bbe48a0ceb7e065515a203b3171bed7400bb20b6fe788d8ddd44e4341632f6864adf7613bdec69f878aeedbbc56ea1f5b58194cff5b9b57dbd2c4d2e7549c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
b51df6ead3a8cc31081442b76ee01c78

SHA1
91ce995306dcda56284348bba62a064cf86a8848

SHA256
16f6b8a7b8b2a0b3d9e3ae193f131987cb1a872f6a321dccd5f42f9f490c67c0

SHA512
e545736a31ddc9c40b5fbe3b0c033fa29c29d35d6bd225bae3a6989fa7910fbc9c333add157d15cf4f783c0078fff26e51830129b2f2896e9fab918a7a69ec69

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
47d4fdae679fd52ccce8dedda7872ae9

SHA1
0dfeb36ebd6142a54c61d38705ad3781006fd4be

SHA256
bda3e7b004507f27938220bb3600dc6012fe22ba8d6584cf75df0fe6caf3356b

SHA512
00be1551aa94a83ee94e10dec59191e0718109103fc34904f091abfed3219ed231b2f0cea46e25ef86cce80fab03da81ea2ae9a48868684138355aeb5e2307ef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
b6af0a1623ed945c62db939803ae7f1c

SHA1
ef04a8bfee764d4131ffcfda6e44c45f6e50d189

SHA256
83f239b37ba31de145a05f728df50353a705c42dd412330ea0d5b22fe1cbc908

SHA512
346a2ccdff524124c83cf341e4fbed9660b57d1ff0e8db9b68f1046fcaa15685c23c593004bad9629aac99bfc015fd2dbbdf31c17fd7a572ddcabd39e43d7e22

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
108KB

MD5
cd88b7e0692c53eed7027e76737d1d4b

SHA1
62a100d2c15a1980a9edc3f285152a403fc6ee20

SHA256
1e722787b6c026273136cbffc2cb4448b92a09e0822aecab6ea2ea81cee3aeff

SHA512
63d8560a90115d8ec262b04b4632ed8cccc1fb7389bc55b579f2a766ccd2a63dd47ae536779d8a0174cec585f8986fdd10c218a1e36b4dac726ca57aded77c91

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
89KB

MD5
d63fc5bc4ceae56d270dfccf7ad14279

SHA1
4e94cc8001984e288cb88e14101bc3ef58270a61

SHA256
c8cf70cd4bb878a63c4537921a6f1d08d0fbcea59aed30b1dd6f28e5ec4dad3d

SHA512
793d0e1083bc6f75996559525596cf9e7d8ae60ea30b58618672c62976399ab18903fd214636bfc7a81631efd43127081cb7b5987bc540ce0057c060053970c7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
89KB

MD5
e426ccd099e4187d261c8c2b530601ed

SHA1
a3eb97de54523ad313fe4d9a14fd3a61bb3d9c52

SHA256
ac89d299711e00596043147fee7bd62fb07ef783c1dc9d69b9d81709076ea50f

SHA512
85dedd14f8e3ca76e2bf6a554d307572eb179a0d1eb6293bd77e7dc3c3c8ddac715195b98e4edf3d64edb88bda9ffa62ed1793af45e0cc3cd53ef410b5928924

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
89KB

MD5
f47510199ba4eea8018bc3023658c38e

SHA1
2d8e5a31745cbc149a0a8ae3cd40383f83ea1480

SHA256
4dc77010d3108831b59650464fa75440f1a8e720d9324511664f05200b1ef357

SHA512
22505cfce15d0e6aaa4ed71f6e5700c182b7d2503288cbca26130bffd87b591b920915a89e0977553e9940cd6f6e01b901ac3728f9ac71999c40fa078bb6b550

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit