ce7d6fdbe43eff57bb876aadb602875245e9ef0853a4cee990e90b56e46c8f70

Resubmissions

29/05/2024, 15:20

240529-sq294sba958

29/05/2024, 15:16

29/05/2024, 13:42

29/05/2024, 13:41

29/05/2024, 13:41

29/05/2024, 13:40

29/05/2024, 13:37

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 15:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
run.sh
Size 6KB
Sample240529-snretsba43
SHA256 24306ec71a02ecfcec3aff9dafa69e94e202c03cd116003f36d7bdd2f5922849
MD5 a19ea6e0b80c0ea089a45a5df67d5135
SHA1 1f3c7988f72994c5a5e6cd016b6873110462190d
SHA512 0c4f25b1876864f7b245e4de53b5012da1696eb7277b19c27f42474f094cb4951afa1a7c4d38b9b348505e3325aa4c1adb5bdb729ff19254ff78a9c86b058418
SSDEEP 192:1A1MIPVGKsSJBHWBYqX78scQa9xS/+TtD4z:1cMIPVGJSJBHWBYqXqs/MtEz
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133614694343575984"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings	cmd.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2636	chrome.exe
2636	chrome.exe
3436	chrome.exe
3436	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3496	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2636 wrote to memory of 1416	2636	chrome.exe	103
PID 2636 wrote to memory of 1416	2636	chrome.exe	103
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 376	2636	chrome.exe	104
PID 2636 wrote to memory of 3608	2636	chrome.exe	105
PID 2636 wrote to memory of 3608	2636	chrome.exe	105
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106
PID 2636 wrote to memory of 5108	2636	chrome.exe	106

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\run.sh
1⤵
- Modifies registry class
PID:4188

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3496

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fff6659ab58,0x7fff6659ab68,0x7fff6659ab78
  2⤵
  PID:1416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1616 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:2
  2⤵
  PID:376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2272 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3104 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3128 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4308 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4460 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4612 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4748 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4900 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4132 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4836 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4544 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4844 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4316 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3216 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:3336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4012 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4324 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=4576 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3236 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4456 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=3172 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5276 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=1636 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4784 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5268 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4172 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=5676 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:2984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5496 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:1000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5256 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=5528 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5240 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5356 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=4748 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4736 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5640 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=3196 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=5532 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=5440 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=5276 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=5680 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4420 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4716 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=5928 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4644 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6140 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:3436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=6440 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5356 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5732 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=6868 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5188 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:1436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4480 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5344 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5620 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6092 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5964 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4828 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4920 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:2840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5996 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5784 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=5052 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4880 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6020 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=5400 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=5248 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6428 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5760 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:2024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4356 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4828 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=5360 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6512 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5700 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5920 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6404 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2872 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6724 --field-trial-handle=1900,i,16437225481430227014,8740408348383282054,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3436

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

f_000032

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032
Size 5.3MB
SHA256 f0031f9d7f25d4d29581879f62565a5a565995899adc60213f9e218147c78593
MD5 fbd9ad001bb2719f574c0705c5de05fb
SHA1 d07e77a490ad677935ac8213b88237e94440e791
SHA512 5724e3f858ae7ea92ba4ce325f3f8f4b90ecc6d7c19476e2888c4b09f0913463191b977f71314300918cceb0a6ae0b80e29d3c70891e8aeb9314da233a929e96
SSDEEP 98304:oeZOuRuvqAgef1ndGaX6tJJQv2FKA75OpVclc02vDRZTEB:1ZOPNdo3u0jc02vVZoB
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 43cccfd0a2da8221eca8780ad1365d0da67c93b6b808339dea72dba2391f41b8
MD5 ec023f74d4c5ea9d0f685f0ea6f4332e
SHA1 f2b67105a5de84a10c67328abce21aff0fd28d1d
SHA512 ffdf361ce972a1900084f599788e6e4914628e5e6e1f3d236ddcbed5b53efbf5aeb4fdaf7edde6a9efa53bc3608cc21523f594e76e99e067e88f342ae88ab33e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1008B
SHA256 356fc54d5e3d079c54646b9fd85971b84bd0b220d208feadc8b059810ab0cc20
MD5 b11b14927334b938fb801a1c6fe7dbc4
SHA1 abcc565843dbcb39dde8267a2fd0d8e62f4a514b
SHA512 801a735467688b9855f9706f2700df38213776fa07220bb7d0c6083e4dea36e3995fd43212fffcb01347f4cf3addbc37992754d0040f82fd1177f899c1bde968
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 9ce1d573d600c22e82a6a0523dbbd749dc373edbfb925bb5c17ce4af26eb4ea3
MD5 43332108e4624c232cceaabb986bcc55
SHA1 67ded4eda3730c7076b6cb8787a2d629ee3a6fd6
SHA512 26d558585515a617ea7f86e49fa11b5faf558f7245a1bfc42cbab0cfcb767ca7fe4e9e793ec6931c85f9411054f200b60d86b178f048100f82e6318f8e3de989
SSDEEP 96:6HxHyH1HyHDYH8HDH6rRHIHGHiHCHGpRHfOHKHGiSHGVH6VHGyEWHGYHGNHGajHP:6HxHyH1HyHDYH8HDH6rRHIHGHiHCHIRr
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 4f8bbd540e43947a02e5069d8e7fdfd0ed983e76b887a0327fdd141ec6443007
MD5 2839a79fdf528b2a880f24f7eb4717f0
SHA1 1214963a6dfe47e073c6839dd6bdd55358f3e598
SHA512 42302a01db59e2458aceb8e39294bd26a88f25fbe9a0f4f625dcf4e73f0edeca27307e2dbd944a27e81e42c724da7c081f42d8d7a125f1502a711f7745704347
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 f8f513ede6fcab3cfaef4910fca10fbed3db385e446cd36c7f7efccc804490f4
MD5 561304b8729c625ad4400d74e03334f4
SHA1 7d7e7f3dc11d1c50c820ec2dadda75d51f5da0e4
SHA512 a1578c9ea0cbf1ce8108e628a3882eac54fd5ce91b49afed3fe1407155ef92fc7c3859351a4bf6329cf4616c439dd381d6c75f1b90afe39f5aae5ded27848486
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 96440a26e3d724f4fc7e8744515ebadc1a47e799ac7eefb125c63dd038582c52
MD5 5a57876ca2d0d9e904caa1e4ae2ba951
SHA1 ff5361d09727b66e9b2da2bead0cbe1af5e149c8
SHA512 b24df58f6d3598826cc3db11b81b5d9275921c00a46b9f732c9f76a27b8b46ad578777d317cad44e5182d7a7093a4c30fa7592607447c2d8d9a627aa923b68f3
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 4230a86e489d47432b44f641807a3e701aeef0fc58ca75b8f1acab1404dd3fa7
MD5 a8ecfa6a34bae834fd8a29b4cde096a9
SHA1 f581352bdb5f2b1d6e7b5cbcf8e9161c801356d0
SHA512 3efffb31dab3315422157a517cb65b9b7107d1c3a9aa0b855c1ecd663a1e70b25818e08598a4af5a42ce692adb9308936db6d54361f8d8aea342e67c5cf8168c
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 84ed586c7e112118a188e794d567f3d7e3f2d10eff911d4eb8e0a39f2836ea83
MD5 fab8c8694751612a50c270cbafb7e827
SHA1 704c20c603618675443134c5dfb53b0947f797ca
SHA512 52f434ebdac626be7e764f02166af908a48626b48574eec280913376d46ed3aa8efacff6b67113800d953b0fcd12840fa9f6846368010d7f3f75922d1b5ad8f8
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 6ca872ebd4ed9904c41d50f5a974340cb05e4da454e95241445253275512e47e
MD5 424cfb61e5a351968e0957b79160b09d
SHA1 2394d46a0fe0e9c3553dc065febae0f91fe0d215
SHA512 eccd6035b6b097b24d025eba2655b2cb34957e407179bd12784f9c4447838edd5d02ad833e5244aaf0d77372e92934b5064c6afabf7d5a2a7347796b1100b6b0
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 9c8cd4b1b18b5d715ebe906f171d36506479dc1449dccdc30fa5ddacaf46eaba
MD5 e3368e39f3153e43000ef673a9804754
SHA1 65fe0e01f45471ee70d53696641013957ceb337a
SHA512 051c6a6da8542118015ccb33ff6719156293a664a8277cd9e7214a37e820d56125a818e78f7daa336075389904310c3fc0bf13344a4ce845c2a1bc52d20f5373
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 52b42f1cf69fa112882cd0119bfb5e1c6554be05b3a66d4ec1f665d7d222580d
MD5 b53c2ba1768a7edebacbf8f27841221a
SHA1 e10a722af7298b7e81b3f36cffa8f4b37ddd48f1
SHA512 623da5826802d1cc549b4cd72826588b0536d5d9263a0b0e756a9704879416e4b279c5d08d6cf7fbd81f2b6b6069074de6ec4f5b47feca1a8dccaa9723d593f0
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 524B
SHA256 85ad742b9cd49205d1a7664e43947bce35fbb061b0ca370b6142e72a5a2d5ce4
MD5 37a9e59baf4d220e76b1d2ed95672c71
SHA1 99dc48fb7e41b5bbf93a8b348cb4232648f3a20c
SHA512 dff7b4e2884ad988e07e191cdb9ccbc2d785796f13c0dc2718e9f77d1c7c86826ee0dfdb811812a412b652f9937a4de724a572595064ff57cd6ce0b2001cf51a
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 765cc366ffe160967e4a729020a3965beffb51f3a978496f0f2bc2c28be43ef9
MD5 650626c50eba9e39ed240b34d7540341
SHA1 bc9ee8e9ea3c1e70d3fe393b17a8ffe83920a29e
SHA512 16eaad57fc68df9a5249aca050c0bdeee0170dd0eb96f7c611c5f3cc8046821bdbe6c1c4fc4bee00b663625164b8f8f4e83dc4209ebf0a2ab5d9d1ba0547e5ca
SSDEEP 192:xZc2kJHLN/q2qaJHP8Lyh+Fqrejva+P5tjEsXtScR:xZcHLNHbHKyqeava6tIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 2fc30b5f38776f4af83e1801ab978cc429f9c2b870278ff56bc1300adf601ce8
MD5 61224c1c8e2d6f198e546753b4220506
SHA1 e195aecf68511278deeeeb839eef2efc66d49bc4
SHA512 88b5976e5e8743804f102b2fc304bdf0a6f93ef2cc8fb332fce7cfeed26a39fce0e5c886d4c66870c73c5ff43d1f7415365cedde4504f40fed344900a22368a7
SSDEEP 96:x3V1o/XaWK03qKIkJ59P8iZRy7Dx+6MSmueAIOVZmiK+2MEVhYtjEsXt0/cgVup:xla/q2qaJHP8syh+FQla+P5tjEsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 19e641b5bd6130ddee9021069aeca6a8ec4a32a97ff5f8c292e7fa015f1f7a48
MD5 3f69c39818f0cf14f949434dfb443f0b
SHA1 071743a58379b944d7ab98641bb9bc9d5686edec
SHA512 84fcdeeb9552a42b59e1bb4f39eec72ac86342e1eb1de9e9ff96c8a7e33dc302e920870c4e918d23c282035c8c127ecc740e2dd3b61aea73343c2f875dd38e04
SSDEEP 192:xZc2kJHa/q2qaJHP8Lyh+Fqrla+P5tjEsXtScR:xZcHaHbHKyqela6tIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 16KB
SHA256 199b1082caa2b53270e120c29cc754c726affacba51bcfc3a0e0de5522065396
MD5 3c02ff543b746fc53854d8bccc996107
SHA1 20f54e8e9535f1f46515105bb43ab2dbd432fcbc
SHA512 c7ace5ee33b2e0e4657d833c2c12585fc93b722caf09a327e44c2f8dd8fb8561b5cee68cc3564520e1ef53405a63c2a0b97065306f0b3866ca6af710b73ea12b
SSDEEP 384:qK5ULPLedbXjV1kXqKf/pUZNCgVLH2Hf9SLrUS/HGVSQO3RM:qyULPLQDjV1kXqKf/pUZNCgVLH2HfUL8
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 56B
SHA256 1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649
MD5 ae1bccd6831ebfe5ad03b482ee266e4f
SHA1 01f4179f48f1af383b275d7ee338dd160b6f558a
SHA512 baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038
MD5 SHA1 SHA512

Submit Download

index.txt~RFe581865.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe581865.TMP
Size 120B
SHA256 f0b71e968d1b0b91e6667e702c28ae40958d70cd25e812ce8814ea0cedbdf6ab
MD5 54d151a1c3ecfdba2ad4c605d81a213c
SHA1 d5620df5be05908fa7d93a66c4443893d8a3f01e
SHA512 d3ce5537dd5bb75d41c23bd3398e9b081baaf1f36d3a3d8feac56f4c5c2ae13f664e1452946c16f915894c872a050e43ec9b9a9ff62fafa689a01891bd450385
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 a39dbe01ce6b1093fb53d3bc367e94d72a8af4250bb4ed6a2094f8b3da90b106
MD5 3ff7f299c2b174ea01a6092a73f283d5
SHA1 802b754f639a85c66ec7ebbe8713e7454cf77467
SHA512 5766d5fc9033748d40a7097cedcd2e481fbdaf0df7871003f3ab8cde4f70c29e31927bb6440625be01d815b41dd925cdb5c2061710e94377bfb77c5e204d3c72
SSDEEP 6144:fmCy/GIFEOfJPJSN9Rz/CtM6w78rI1Qo5yzkpeXjnJFzXsWL:fK/GMRSNvGw8EjCkpeXtFbH
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 e98b5130518df5255fbcb3291dd81c67c8c0f02a92275e7dae838b106fcd85a6
MD5 bcac4d51e15ccc98c9ca9946aab07852
SHA1 8152ec9ca2e083f6516ed8199c2879308ac77055
SHA512 bf0a797a2fcd438620ca734d88416ab891fe71d406c3af991a55414d72bc07431d7aa5e7c4a8253a20ac48c6baca4ba73ae04a620ce499108ffaa56875c07d3b
SSDEEP 6144:WmCy/GIFEOfJPJSN9Rz/CtM6w78rI1Qo5yzkpeXjnJFzXsWL:WK/GMRSNvGw8EjCkpeXtFbH
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 791488454b3ca04690bb0ebd9dc3ed050e849cf3797f4eb86e02454f183e4169
MD5 b94bd85ada1db219e1bb87cf92a9f9b5
SHA1 27476417518262de341e0986a0ebd94ba5f78744
SHA512 b92cf15fd8d831fb2364a735b050ca2325777fae6c7217e0bc0a66043777bca626a927717f630c53d61cae566bd23806308638c30d58334f5562eac00736bebd
SSDEEP 6144:gmCy/GIFEOfJPJSN9Rz/CtM6w78rI1Qo5yzkpeXjnJFzXsWL:gK/GMRSNvGw8EjCkpeXtFbH
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 2408393cb96eb055e4aec02c493cebbe44f38245884e7d51f31abb2c368cbc0a
MD5 b4ccaffff9196d5592cd66dcfcb2aa2c
SHA1 b533f0e330e4c77ceb0df104db4b3ea399be978e
SHA512 b7ddf0301b5841619acea3685fa6e45585c14d3a9c8a72e8f2ed955fd91b3b8870da3682668fdef994a862ff5e463380020af7b69d8c876d7d9e9327154aa43c
SSDEEP 6144:vmCy/GIFEOfJPJSN9Rz/CtM6w78rI1Qo5yzkpeXjnJFzXsWL:vK/GMRSNvGw8EjCkpeXtFbH
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 94KB
SHA256 0d9f1290f0ee72fbfbce461c92ac7cb7241732c79cd868c36b511da6dc725bd4
MD5 b5297fef47da96ab3204415675c59f72
SHA1 50d71c1e3cdee53c865cc43422951186d0850919
SHA512 e585406867af0453c511f3a1b1394ecf0410658c6f2ca5c47f99c3193bd8bddf952778d9c12ac7bd7e21a2b4495061fe7baf8dfc0709a8e554fb8b233b6d608d
SSDEEP 384:nvh2TxEQPbpL1b0qqcCnH57ipfPacbEyQOq89OVNj19+ykbKd5ruxlXcMbdR1zSo:n6iQA8Lzul25RxVUGK6qJU
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache~RFe58e0f5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58e0f5.TMP
Size 89KB
SHA256 020cfa252b43af1ce29fde081d06015c62f1c66487ceb12ddb25b2dde634e8bb
MD5 4adc4085eb8bfad722c060dedfe1f9cd
SHA1 bfb25988ffc3aa36f2f78bfa52c2ceb93312402c
SHA512 844dd15fc8c2602e2743d2b2885b20636a5b8786262de0038130724cbcc8f516556b0d72f3170e8c0e1b5c5ea4abbff74cec25e18b2b43299a65526aab9515f8
SSDEEP 384:Vvh2TxEQPbpL1b0qqcCnH57ipfPacbEtOq89OVNj1Mykba5ruxlXcMbdR1zS2XZg:V6iQA8LJull5kTVUGK6qJd
MD5 SHA1 SHA512 SSDEEP

Submit Download