hxxps://www[.]google[.]com/?zx=1767663177914&no_sw_cr=1

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
900s
max time network
894s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/04/2026, 03:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.google.com/?zx=1767663177914&no_sw_cr=1
Sample260416-ef52cse18p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5032	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134207852650905490"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
5336	chrome.exe
5336	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 38 IoCs

pid	Process
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4400 wrote to memory of 2036	4400	chrome.exe	86
PID 4400 wrote to memory of 2856	4400	chrome.exe	87
PID 4400 wrote to memory of 2856	4400	chrome.exe	87
PID 4400 wrote to memory of 5032	4400	chrome.exe	88
PID 4400 wrote to memory of 4464	4400	chrome.exe	89
PID 4400 wrote to memory of 4464	4400	chrome.exe	89
PID 4400 wrote to memory of 888	4400	chrome.exe	91
PID 4400 wrote to memory of 1616	4400	chrome.exe	92
PID 4400 wrote to memory of 888	4400	chrome.exe	91
PID 4400 wrote to memory of 1616	4400	chrome.exe	92
PID 4400 wrote to memory of 2616	4400	chrome.exe	93
PID 4400 wrote to memory of 2616	4400	chrome.exe	93
PID 4400 wrote to memory of 1640	4400	chrome.exe	94
PID 4400 wrote to memory of 1640	4400	chrome.exe	94
PID 4400 wrote to memory of 4980	4400	chrome.exe	96
PID 4400 wrote to memory of 3808	4400	chrome.exe	114
PID 4400 wrote to memory of 4724	4400	chrome.exe	115
PID 4400 wrote to memory of 1792	4400	chrome.exe	116
PID 4400 wrote to memory of 4388	4400	chrome.exe	118
PID 4400 wrote to memory of 4388	4400	chrome.exe	118
PID 4400 wrote to memory of 4348	4400	chrome.exe	119
PID 4400 wrote to memory of 4348	4400	chrome.exe	119
PID 4400 wrote to memory of 4652	4400	chrome.exe	120
PID 4400 wrote to memory of 4652	4400	chrome.exe	120
PID 4400 wrote to memory of 2624	4400	chrome.exe	121
PID 4400 wrote to memory of 2624	4400	chrome.exe	121
PID 4400 wrote to memory of 4752	4400	chrome.exe	122
PID 4400 wrote to memory of 4752	4400	chrome.exe	122
PID 4400 wrote to memory of 4280	4400	chrome.exe	123
PID 4400 wrote to memory of 4280	4400	chrome.exe	123
PID 4400 wrote to memory of 368	4400	chrome.exe	124
PID 4400 wrote to memory of 368	4400	chrome.exe	124
PID 4400 wrote to memory of 2728	4400	chrome.exe	125
PID 4400 wrote to memory of 2728	4400	chrome.exe	125
PID 4400 wrote to memory of 3312	4400	chrome.exe	126
PID 4400 wrote to memory of 3312	4400	chrome.exe	126
PID 4400 wrote to memory of 872	4400	chrome.exe	127
PID 4400 wrote to memory of 872	4400	chrome.exe	127
PID 4400 wrote to memory of 984	4400	chrome.exe	128
PID 4400 wrote to memory of 984	4400	chrome.exe	128
PID 4400 wrote to memory of 4064	4400	chrome.exe	129
PID 4400 wrote to memory of 4064	4400	chrome.exe	129
PID 4400 wrote to memory of 2164	4400	chrome.exe	130
PID 4400 wrote to memory of 2164	4400	chrome.exe	130
PID 4400 wrote to memory of 3304	4400	chrome.exe	131
PID 4400 wrote to memory of 3304	4400	chrome.exe	131
PID 4400 wrote to memory of 456	4400	chrome.exe	132
PID 4400 wrote to memory of 456	4400	chrome.exe	132
PID 4400 wrote to memory of 1456	4400	chrome.exe	133
PID 4400 wrote to memory of 1456	4400	chrome.exe	133
PID 4400 wrote to memory of 2256	4400	chrome.exe	134
PID 4400 wrote to memory of 2256	4400	chrome.exe	134
PID 4400 wrote to memory of 4868	4400	chrome.exe	135
PID 4400 wrote to memory of 4868	4400	chrome.exe	135
PID 4400 wrote to memory of 4288	4400	chrome.exe	136
PID 4400 wrote to memory of 4288	4400	chrome.exe	136
PID 4400 wrote to memory of 3128	4400	chrome.exe	137
PID 4400 wrote to memory of 3128	4400	chrome.exe	137
PID 4400 wrote to memory of 4928	4400	chrome.exe	138
PID 4400 wrote to memory of 4928	4400	chrome.exe	138
PID 4400 wrote to memory of 1452	4400	chrome.exe	139
PID 4400 wrote to memory of 1452	4400	chrome.exe	139
PID 4400 wrote to memory of 3044	4400	chrome.exe	140
PID 4400 wrote to memory of 3044	4400	chrome.exe	140

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.google.com/?zx=1767663177914&no_sw_cr=1
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff969a3c728,0x7ff969a3c734,0x7ff969a3c740
  2⤵
  PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,10084193900043951962,7174785428266328897,262144 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  PID:2856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,13003712308858322845,8254584919141295487,524288 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,7964710894916523473,1602481559093114865,524288 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2476 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,9762500163637264231,16480737641419013504,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3240,i,2209531375696275631,7533976046618441469,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4348,i,1393610815316857200,386279986084170906,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,7716850441884904284,16329351150353052870,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5696,i,10911545419121082763,8996344744704686453,524288 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4880,i,8764393026555536243,8275129000403660872,524288 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4896 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4900,i,1234048824071769818,1230798791164027448,524288 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3936 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4844,i,10045514023490354824,2065121646978067844,524288 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3948,i,2785297250216770377,13626845940166417973,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4460,i,3263931338419184890,11802101646417341642,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3260,i,39871695015422373,8549908581455922375,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4768,i,5166912672187673712,12049908618843473336,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4880,i,1779574485818924831,11759371598735502855,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4476 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4372,i,10461266700329041583,7423631225163061271,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4436 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4844,i,14659091570470834926,6845190852457399649,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5872,i,586958515822627405,9669475330689822993,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5944,i,12648626995977480305,15229764044179073620,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3432,i,12636496898878750277,757155712190321036,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4920 /prefetch:1
  2⤵
  PID:872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6184,i,17625612630713843770,8121346433438106092,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6304,i,6440489608669960932,6784709173406134271,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6292,i,14324172884670748063,6929562662736298046,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:2164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6488,i,4140318567309424825,5295435198328560360,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6624 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6752,i,13799246450321691444,9979472468465150110,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6768 /prefetch:1
  2⤵
  PID:456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6916,i,15233623185462978576,2670361034909804220,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6912 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7072,i,2539514524668523239,2060262551465325006,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7100,i,8968921393921712317,12240643822126827416,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7372,i,1432219841906976284,17570932119278849318,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7376 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7400,i,2332328773283137310,16684135535908745463,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7532 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7668,i,14212928795801871675,16653891435776549492,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7684 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7820,i,7974912665594567136,17840851785372489509,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7836 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7984,i,16306035860270158803,8654553733176800686,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7988 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8136,i,5149520494700197117,1634328637014997911,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8148 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8280,i,17877366311721306008,9087209708701794057,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8296 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7212,i,12345754616005777645,13165545688969046028,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8576 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8716,i,12317882184419644690,3183931245199136947,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8696 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=8572,i,8816301923317606552,15010126730518825385,262144 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8656 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8244,i,7146807219814772432,11532690370620570522,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8524 /prefetch:1
  2⤵
  PID:5400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=8744,i,1371462876547695088,15236240107364048128,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7344 /prefetch:1
  2⤵
  PID:5464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8560,i,10463036060639005912,9135300150741964279,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1496 /prefetch:1
  2⤵
  PID:6116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=7924,i,8479477008896191423,10924100529254323690,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7840 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=8808,i,15611534679411634189,4338388781251736352,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7832 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=8796,i,7671771331298346683,6254849817134952243,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8760 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7628,i,8183711649546015517,4956079602694496513,2097152 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=7272,i,12920983666125765695,3634166788071362786,524288 --field-trial-handle=1908,i,731875905893577876,7684153658973849392,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7196 /prefetch:8
  2⤵
  PID:4220

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1280

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 896d9d00543fe0b4d292ecf6fd5711ef2493b555fcd681b28603cedee81f0900
MD5 70f90ebaa815e658b1e4f98ae280ef74
SHA1 5bb230af4c729d2eaf38769c0dd5786b29b4cb48
SHA512 7d03015b99db261b96d4f628fee1272493bd31d50e17d201a103df05bcc1d1062826c9650d45837badcc43675a06a02a9a7574a5165cf4929a6ede3abae317c5
TLSH
T176E02BD9CC259D3708F92B1861A44746EA6153572F50846B7E3C830D8FB47364256C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 20KB
SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
MD5 8bd8220ca4c1c9bf2756086b9cdd2737
SHA1 c4b09065bdb49f26cb911e6c724d49cdaa771b6d
SHA512 16c22bb9f89d11df3db453ab71365fd27de31ffe97b1159b5ba940932773b0c4fd02903d9ed55cb1f05eb88ede1b3561ee555e90a0a592abda4f826ebe5eb691
SSDEEP 384:BoikZS4VhesCQMQABVDUA+6SxKg8Z848u3eI2Vci2jRYxqEafv:dGcsCQMQCVDUA+VxKg8Zv8VGi6GPan
TLSH
T11E92E17988A32D89689D4E44A3FF6B5A5E09C94B1D2F05FE59181CC863D4E8BFC2C45C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000066
Size 21KB
SHA256 bd1b082fc1c23c55ceddee1adf35d03d950555820bf56ed5a9f1a1f3a52e03f5
MD5 007225af22bfb3e76c18bf445f301d31
SHA1 afe274c3016fcb3afbf39f90ceb6f37cc410bb0d
SHA512 7ebb02342fed7ceacc0104f84a714b4ba8e36c7e08586146f89561bcd89dc8c879c8712d56841957b527d82e9ea2a9c4120211e6f42970face03685d7ce4c9d3
SSDEEP 384:ACdSyhEQD/K0akMiOEgk/MbQItTbFv2U9+cKtQH9JUym:9UyhDD/NWiOEgk/MTt1v2URxBm
TLSH
T1BCA2E1108C5B516E64559074F7C8A9DAF722CF6BBF6621ED6961EC3F0F903E04427864
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6221e690473c7a1dc93e67a96d7dfd7cd78ed7a49b4b52346f0606c0b4de40a7
MD5 1f675395f2e9e44fbe9bfdf23cf46a42
SHA1 dc3337c34def4e7d1d8972ff7060b20e5dc1eacd
SHA512 a56cff2d89c9e24cef21282a2d2a889951c0de2293cda9a225e1dbe3bc0a28c4a06d0c5b8070ef8d7fcc2f36dc8c61575228b3d906242711732b948f4ab4f089
TLSH
T1FD815F8AC783E625FF190BF302E1A5D03A31D5A138874FAAD9D6D63DD693BF40904C69
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 af1c0c40100859fd0031a09f37cd4dfc5ff212a765e6c80ed5bf71d276b59ef5
MD5 98ea4797eb00a7673abde7ded251d8dc
SHA1 523a937e7970b755f5eb32ba99932d2c0da71919
SHA512 b44e13534d3225aa99f5c570726bcbd7df3122a3e9da574b6e9d92fe5dc8e89d39f8cf9ac4e7d3c64897185b917ab15f73439b1eff618d1d63446c26ec987e12
TLSH
T15E518CB3C3DC9ABD890156E4AB153E2BCD690A65731C3C56C8D4AE4F57E28B6D20024E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 31KB
SHA256 117c12dbe8009375df83666c7083fc44a11411e4c640404d4c860d8a2973c837
MD5 4182dfb9d42f275d5f2c596ffa1f1e44
SHA1 b3296e2fb50e74c68457d80bdfdd045573e6689f
SHA512 f73a76bd162d67fa4bb807a1ae2c8ff9154b51ac23a881e62e0baf581de8b0ba46f35d030236bc5578a9c5b24e2d4d09b2a3f3d0042bda11e8c3dae1590d70bc
SSDEEP 384:D0AwQ8Q6NbWJsJKuyake4N0hAD2nEEhrEgbIwqgbCFevaIaEgd6tJIrcRrIhiaV5:Z+QlZD9DJ0IxJlgDCwKa2
TLSH
T1F6E2BFF783F4863DDA1165F1AB24AE2BCF6D0624431C3966C9D47E0BA3E2571E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 44KB
SHA256 702c4038f32c7a74721522f2a77960099a04431de036ac1cc565d0248d5cbdfb
MD5 b0df37c286e7ddf5b30519fbd5e5f7d4
SHA1 a4e4b404a91d8ccc4631f43704aa372ec182ea55
SHA512 1fcfce10aa31411db2657d3800882568842b74cd33df205df49d2fbd9854fbecce5bfc2668102d31ede55621af075a5801efa66cbbdcd32eed2b9196c2b0a2d7
SSDEEP 384:D0ittxI6NbWJsJKuyake4N0hAD2nEEhrEgbIwqgbCFeLgEf4HepU8nJ0PvJLKdJD:i+QyYsanIDQsJTyJlgDCwvGhckwXcW
TLSH
T1D613F1F7C3F4862DDA2161F16B24AE1BCE6D0624431C3D66C9D4BE4BA3E2471E241B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 36KB
SHA256 7e9c5cb39af4070207b3d5362bdb856466668fdb94b3ecba714ce617074611a6
MD5 31ec443a2f25c31b4f20663b80602ffc
SHA1 db202124dd3036a4018573568154ae4fee9c5fd4
SHA512 3b7af5c5d7554ac1c1f1511d2e7ce388be6ac668c4cc53ed34374b82b2864adc8e4ca46c41e13d23d9cb130dfbbcef46f2d35de02517a9ce94ff4bd0dafda317
SSDEEP 384:D0ittxIGZJJ5JNEpBelcMfy1Isl9wdO2MJhPgVZKebVGZiOeNn9FJmpXJZsEJJBQ:FDmqctXpDDrJTyLlg+Cc+GtKMEWr
TLSH
T13FF2BFF783F0863DDA2165F1A714AD2BCE6D0624472C3976C9D4BE47A3E2072E241B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 d61f6c980fc2d7597ec9dee8b5b3a62e6dc8659c648da56b8fc47c7a6d2c7f89
MD5 3242e5e657a04e3f369f1ac6c0a882ac
SHA1 fc824d2ddc85f02ea5d29d6c4ee3ad6297929106
SHA512 82ebb27581e0f4af20cc6c1c37909d955137fe831a2a126ce0a12dffe337e0f94798092b6818bbe4a8d739b5656bd6ec94878c0bf9dff94c7d2c7db6e4d55f7d
SSDEEP 192:D0AwQ8Q6N/aIaEgd6tJIrgECJf1GrIh5NPqaPFfPWiva:D0AwQ8Q6N/aIaEgd6tJIrgECJf1GrIhy
TLSH
T115E1ADF7C3D8C52D991156F4AB15AF1FCE290A28431C3C67C9D8AE0B93E2871E21579E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 41KB
SHA256 e607e5d6221d0daafe3bbe2536f03c2ecb496b1f941b83786181ef2bd3eefd46
MD5 448c203c15852ab36a148dc26de32dce
SHA1 ca56f7a3360cbb2791066e4fd0649801b30ed336
SHA512 4906aaff503cbeaeb497d08282ade5012fa027a96493af3c394f30c87ee0cab5105121ef1a87da5113f01a808992e1977a35270d24571f75929ce585dda8197c
SSDEEP 384:D0ittxIGwZJJ5JNEpNBelcMfy1Isl9wdO2bIwqgbCFeLgEf4HepU8nJ0PvJLKdJd:gDcyYsaniDDrJTyLlgnCwv9GK6w9qe
TLSH
T1DE1302F783F4863DDA2161F16B24AE1BCE6D0624471C3976C9D4BE47A3E2072E241B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 36KB
SHA256 0ce0882c08866cadad7c43fb788d9f9b151063c1da4f9bb1ba7925b163c6225d
MD5 15e846fbe3b54e8bf04376e2509fc082
SHA1 2239a692226e8cae95cdc451eb5529c95663cba9
SHA512 c1875db52033e2d4caaf95d90a1d6e1aba8f3d376a3aeff6d10ab7cd943a2ca83992a2fe4a46caa3978a3c1c8257dca63d2b22ff5d2266029bbafb01fde258f1
SSDEEP 384:D0ittxIGwZJJ5JNEpBelcMfy1Isl9wdO2MJhPgVZKebVGZiOeNn9FJmpXJZsEJJ7:gDmqctXsDDrJTyLlg+Cc+GtKMEWx
TLSH
T1DFF2CFF783F0863DDA2165F1A714AD2BCE6D0624472C3976C9D4BE47A3E2072E241B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 7KB
SHA256 c23c9f5c00ca4325c69acce9916de2b426a7d3ff5e1a8f6ca2518e8d991fbe6c
MD5 0143db69ffcf977fa8adeac9518adcda
SHA1 f6112762217a20aa383cc55e8debe4ac90156d8f
SHA512 4d82af5dde5f3ef34f9ea863f41102f1e4415040bcefc22085f7811fe6750ae4a6df2cb69f9e36fa3b668f716d51775f14b7378ef55a80f389e78649d678e153
SSDEEP 192:YUIUIF1U+U0AUAYUtUoqUKJU+UJhUE1UyUWFEUUUYUBUQLUaUYBU+UyU/4dUh6UY:Y9X1rpAJYKgX3uX1/6llqxTv7DLdBgof
TLSH
T17FF19CA3D77FB86B302E496B1E05BC09597BF83101D1A0F4EF6A912E74C19F3165B42A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e28d93d4c8443fd13bd70a97e48b7a5da14af944284deeac05391208078203dc
MD5 1fcad7d5d4bac07c33275de7c3b06ce1
SHA1 d8dae86bca130ab7da247ea0d54d154902bc5ca5
SHA512 84fe3b5cf2376cd2d49a7f898a2bcd2a3b41046a5466cb9803b5ce8b8f3ad407a5b9c4abc76a3e6c6a3c781b759273a1077e57ff6a9c8de11e39346d43dce85c
SSDEEP 192:7RI+cBAWc/YrswZ9gv7ZpIpoPRpCNEE1d9wHsb+WNX4HsIZ0N66n2b62GecqwA59:7RI+mA1MB8EkXIOwyi/2+2QqwA5M7E
TLSH
T19662D76AA92469779CEBC225F921BB17EBF1102264D02EC4E7FC8E2C15E75CD7213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 adec4eae0fd8b6ca7fa82467bdc092103d4883b8505e72ce1a636c811a7c8ff9
MD5 6c49a70365f65eeafaf62b96ff67e670
SHA1 5b1a4e29cd1e2c4de380cac1880f0a47609c04f2
SHA512 d7222f24639de3d826198158045d5a1411289a90affc49d7d5217705da116203c2b1ff75a5aab4fe41198a6999bc7a1edd28ae3062ae47dba6dbc09366d78193
SSDEEP 192:7RImWc/YrswZ9/v7ZpIpAPRp2N2M9wHsb+WNnsIZ6h2b62Gecqwc5MtVyIsnAUge:7RIm1MBXEUXsOwb62+2Qqwc5M7e
TLSH
T13A42D86EAA14A93B9CEBC325F9217757EBF6102220D52EC4E6FC8A2C14E75CD7213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 edf2f0978a3184f5943f363d8b66b4eca6d1700553246588855e55e12df57610
MD5 83932807fe152d10c87dd4a02ea91f1a
SHA1 1379ab82e1bb8f90d708112476939621c418426d
SHA512 a964b16b3ab7dc5df4d1202924bc9b5a1263efe739e820d19bbf83052bd1e45377c3aafa042aad256dc79ebb2e0b9aa59f878c75a9ad02c95df6f805067dd8f9
SSDEEP 192:7RI+cBAWc/YrswZ9sv7ZpIpoPRpCNEfd9wHsb+WNX5ZsIZ0NEh62GecqwA5MtVyN:7RI+mA1MB4EkXXOw7iE82QqwA5M7E
TLSH
T12A52D76AA91469379CEBC325F921BB17EBF5102264D02E84E7FC8E2C15E75CD7213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 959b7c9ce5d02647d6f3c25fa7ef221e5edeaca5c856def9c4beedb8f50d7bc7
MD5 278773e18ddf52329dbebb63924f2c4d
SHA1 d41deef1c35713314083999787ca9b6d2219e4ff
SHA512 e1678d4e9305b28184f5cb819090d68386fc2a673a9a81dc7aa84909a46e33329623e54a08f482dd595ef36aff7a00758fd2944eb0d62fc265d788072496448e
SSDEEP 192:7RImWc/YrswZ9+v7ZpIpAPRp2N24w9wHsb+WNnsIZzgeo62Gecqwu5MtVyIsnAU3:7RIm1MB6EUXYwOwbOev2Qqwu5M7E
TLSH
T16552C76EAA14A93B9CDBC325F9217B57EBF6102224C42EC4E6FC8A2C15E75CD7213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e1a0709932b4881e61f72667f153cc8085be31abca18e80aec15cb8900098aba
MD5 0282317ac1c796568b9a9cd7619591d0
SHA1 d226577945f43e0efc0c756c1873a63952e4887c
SHA512 dcfb9ae3f32d98a288d6fdf475f224c34453d5ad878d4d06f0a8f4f4a8f0fa6df673b3f66e54e2be9ede2511a6d2b6146b9c76f0f49bae798fbd9829de3df097
SSDEEP 192:7RI+cBhWc/YrswZ9sv7ZpIpAPRp2N8rY9wHsb+WNnsIZEjYz62Gecqwu5MtVyIsv:7RI+mh1MB4EUX2Owb+Ym2Qqwu5M7E
TLSH
T16B52D86EAA14A93B9CDBC325F9217B17EBF1102264D42EC4E6FC8A2C15E75CD7213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 0a8cc5f9fcc8fe8e9333e4f5e8797da3e2588acfedf5775a4a63234f836d33eb
MD5 7ac1392c9c2d1c62696c7bb53ec34f6a
SHA1 f821e59685c2d801f03429da412c8d27625159c6
SHA512 f8adba8c960964b786aa349df38a79cfbfad215256595075ecaf0e5bdcd361acf57b607fc757c00e957bb5c717c1de54c640112cc7e8c76158829befbf9cace6
SSDEEP 192:7RI+cBAWc/YrswZ9iv7ZpIpoPRpCNEkG139wHsb+WNXvCssI3Pt+0N66n2W62GeN:7RI+mA1MBuEkX/OwXVz/2l2QqwA5M7E
TLSH
T1FD62D76AA924697B9CEBC225F921BB17EBF1102265D02E84E7FC8E2C15D76CD3113417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 efe86bfb0e54238fd5a6dd07c1a0002a98a2952d6dce1328dc60bba68819222c
MD5 501a79c305a7fc28b109bb980f030394
SHA1 8bf5e8167d7af131951a7d89de6b62650373db46
SHA512 a584b92cb52e1164f2e3b6cb0287fb3de6fd4589a13a515260ccba5a9e4bf35eac3d722f5f4e0dcb2a9febcf0e42e1a9e3932152a930f1c10319fcca0733f810
SSDEEP 192:7RI+cBAWc/YrswZ9ev7ZpIpoPRpCNEkG139wHsb+WNXvCssIZ0N66n2b62Gecqwy:7RI+mA1MBaEkX/OwXi/2+2QqwA5M7E
TLSH
T18F62D76AA924697B9CEBC325F921BB17EBF1102265D02E84E7FC8E2C15D76CD3213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 72bb4c4e568a30d787b318f71b216f9e49a6620f878bfd7221fccb4348828991
MD5 5c629b7248fd9ee53db667d9576c254e
SHA1 65f52dd8ec4d2ba677ac56d41ffea0d41a53f79d
SHA512 89220c3b62fab44cf6d36d8e682b371518735f73dc3053b818c8332938cd848d1db5be3f4304df3bd62b63e346338a00e490d14ce6b92fad09697adde540f43e
SSDEEP 192:7RI+cBAWc/ZrswZ9Fv7ZpIpoPRpCNEkG139wHsb+WNXvCssI3Pt+0N66n2W62GeN:7RI+mA1VB1EkX/OwXVz/2l2QqwA5M7E
TLSH
T1B362D76AA924697B9CEBC225F921BB17EBF1102265D02EC4E7FC8E2C15D76CD3213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7085bd26a00ea25f436317507845db76624f1e305c5ea5c1633f0710fb2525e9
MD5 6fedf8e0cda28604a18bc21b3b3a9b01
SHA1 6e736322a4f9228617a8d1dccd80d010032b80ff
SHA512 7c43690cde2a8678a5465e416e0cead981d993013a68eccf60d0f0f8520df5a31229546fee29023f6dada5f06f5e8901b2628e5ccb2a58fa5dcaf82771739eca
SSDEEP 384:UO62joO6z7KxkXqKf/pUZNCgVLH2HfgslBr7pLuLcifKO6/XODoO6P+ErU3f6HGy:UO62oO6z7KxkXqKf/pUZNCgVLH2Hfgsr
TLSH
T18972E9676C4C9E770F94CACCD816BE4FADB5010B65D9886843FA982903D4BDB11462FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 95f980c7d782086d3314a44e83d2aa659d8ab55847289593af27dc7653d9e9aa
MD5 b4148c2674b0c9472e0aaf4952bd4e02
SHA1 5775b8bc81705760d20c8a40b3620c0d72041d4b
SHA512 8143ac8dd58f292d4fc43f486ef3019fa8cab9c576f3e92984543c344ccf2650f4447d70002e63271fb43f248f27df770dcc86f097bd355fb8ea3bcb9ff2568f
TLSH
T1E9B012648081E941C0C302B011D2088939249F1087451302A3F4A975D8361E1403C152
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a3fb.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a3fb.TMP
Size 96B
SHA256 b007ee79bf190dea0d70135a0020f21e825cac0a6ff8993441eabf8804aa7b01
MD5 5fbab19796d73ee2396af06df43cf9d0
SHA1 46fa41b1a5212a2367ca1c26cec35a8d5be104e1
SHA512 6bb3348e580e8c46abfcd724be7c6f2e300e7faf27a2406470fb6d37ea4b9d12263a13f2f60386bd8405a96cb6c4b79bd29fdeb223c8b7c0042f2f57c6d0c8ba
TLSH
T1D8B02200C302F203C00203B0208EA2C8B0A8EF28C2033323E2F20E23CC282320030220
MD5 SHA1 SHA512 TLSH

Submit Download

0724601c6202c008_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\0724601c6202c008_0
Size 171KB
SHA256 052d67831046ebd5072f58ab5fe6e5fe1dc3609598eebbd4eb2887f87ffd9050
MD5 d18206db29598ed737a81742c160a2b9
SHA1 dc4a21a930ab833ebd81c5a44cac55ebf5f4f409
SHA512 047f856d1f8982950b644927b0f7727b76055b711acc43651f2fb29f67453df5f0320ee27898cfdbc8f1a60439521342fd2cee92d5056afb1317a96fb99b79cf
SSDEEP 1536:7oOegBegBEcLS23bJnd3bW/IV6QjtIsUnZlZ7W32WtvHabHXc50iIReIN/lTrW1:l3ZSYbZ6IVDg7Sr9IrN/lP3
TLSH
T1B4045C326300B83B6513CE61A57E7F4E3C35E16BED0686FCA5E4E570AAD6CF20525788
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 6535eccc40c82290cfcc4d0fc9258ee8e720c21aba4db3ecf787d8dc9582aaa5
MD5 ebb9a0653c1d0173f1555cf3bfe497f4
SHA1 fc0e785e773fc791cc28e8a4797c4d11b5425554
SHA512 537d8f1db05d3adf3e3b1c4a6a57cc87e7edb1a32f7b0a5a2252291648f7fe55b8374ddd2ebf0c8156b9443c4a6b63da5ba2a35e710d3ef1e94035fac89ba9b1
TLSH
T1DCB00238CA82C45BD5112376BCD3DB9076B18CA2C347475B939711BA98127D687164E1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 c260167c0b39c205702dfd56a0c98164991db079debc790407a11f7dc28e6c1d
MD5 7acdd96852bca87e97cfc5153f72a9d4
SHA1 d5dcc2b9b4a83758346de3e376a7404566520248
SHA512 09cc97c799b419e7496282603b8665fe4cc8b51b9ba22a7be595e4c8b2fc5aa6de6976ca4b3280767dbaf5cc7d2778df7acb1e8033251c28deb2511eb1af76f3
TLSH
T1BFA00258C144D157C00142745893574833B58D160743071E9F9910E6D85478185924E0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 8287fd7b9f02c0ba89f2b136c55bccca1317821efba4d2ddcc4afb0c86bea26d
MD5 97f207e3fec28ff7232c55fedcefbeca
SHA1 a01b9a438cd6c3f6ca41f72dada79ec9ea3599fb
SHA512 b53676a99aeb5fdd5d1e6327bb2080f3ddd16bbe2b7396576ac39cfced953ed58090bd790e989b6b86fba2112db148695b2c0982a1c5d802f7152fa126c77a64
SSDEEP 1536:75EcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE+:63Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1F29302FA9E1A4AF795BE4691729E790ACD12230D709F69CC729C538C21C41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 a89c4ff37bb2227e95fa13c81bdd4a66b9bc0538cbf7fe51c3cc5193dc8503f8
MD5 a74363651a824ce77f0ec528fe018964
SHA1 09a626a3709bc7cb9768a3742f0a1004eb8ff23d
SHA512 3b90595b81a620f36752f3cce72a16ad5a8003084648f697056887f37036ef715a0a23679e56c3c3dbd4d7a85c8dca31c5fc4c1073e2ba2a31e3fc09d4db14a9
SSDEEP 1536:YgcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3u:r3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1D59302BA9E174AFB957D4A8176AE7909CE12230D70AFA9CC315C538C21D41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 efb9af9bbeaea3147e5d753508b9ac8e41039e9cfcddf406ab1367012a98c3c0
MD5 f7087647ef9e06a358ea49604172015e
SHA1 3860f17b71e8208b134dfab381de61b719bc0227
SHA512 ec9233ade7968a5fe9890ae40b209c521aad0d61ed9c5e9a1e724571ec4478cc49de194dc3f1d2eddc664aefea7991df3b7d84b4da5df9643c84953f64857263
SSDEEP 1536:D9XWcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YJ:Zm3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1B79302BA9E1A4AF795BD4A91729E3909CE12130E709F69CC715C538C21D41CD2B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 b82c63168e9e7d6dfe3076f6d396014fd78821bddd762a318c93e8e50f817a4a
MD5 9048cb6d24faa5ece8660d284d601640
SHA1 52216bb318f438b7b12619b38c2d89361a7e7b80
SHA512 824a639d4fcfe6189a0309955fcc80a1b21b9bfba85438af6450cfdd1189da68f03cf20f39925f9d92cb17a7bbce5281d8808dbe55706a0fda4469a571c5244e
SSDEEP 3072:OljieZVpaXMg3Qw/xLANk0mUW5GmRntSFCjEEN4:mjieAMgrOk0HOGm/SFyEE+
TLSH
T1E3D31279C8170CFBCABC4B8131AA6807CE36130EB65F19DA756D628D35A51C80767EB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download