Resubmissions
27/04/2026, 18:36
260427-w9dmmsby4j27/04/2026, 14:04
260427-rdms8af13k927/04/2026, 14:00
260427-ra5jvsfz7n827/04/2026, 13:55
260427-q8mahacz6t8Analysis
- user interaction
yes - max time kernel
557s - max time network
555s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
27/04/2026, 14:04
General
- Target SweetVisual-Loader.jar
- Size 127KB
- Sample260427-rdms8af13k
- SHA256 3b5c0a2a422ad56f9bbc8f558ca6dba6690407785e3f1d057434d44cf40426fc
Score
9/10
Malware Config
Signatures
- Enumerates VirtualBox registry keys 2 TTPs 2 IoCs
- Looks for VirtualBox Guest Additions in registry 2 TTPs 2 IoCs
- Downloads MZ/PE file 1 IoCs
- Looks for VMWare Tools registry key 2 TTPs 2 IoCs
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE 4 IoCs
- Loads dropped DLL 35 IoCs
- Badlisted process makes network request 1 IoCs
Network request originating from process or tool commonly abused by malware.
- Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Enumerates connected drives 3 TTPs 46 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Enumerates processes with tasklist 1 TTPs 4 IoCs
- Drops file in Program Files directory 64 IoCs
- Drops file in Windows directory 11 IoCs
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
- Checks SCSI registry key(s) 3 TTPs 5 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 6 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 3 IoCs
- Modifies data under HKEY_USERS 5 IoCs
- Modifies registry class 42 IoCs
- Modifies registry key 1 TTPs 4 IoCs
- Suspicious behavior: EnumeratesProcesses 8 IoCs
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of FindShellTrayWindow 64 IoCs
- Suspicious use of SendNotifyMessage 40 IoCs
- Suspicious use of SetWindowsHookEx 12 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\SweetVisual-Loader.jar1⤵
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffedf7ac728,0x7ffedf7ac734,0x7ffedf7ac7402⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1612,i,5913466882767933629,4685763989110884322,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2224 /prefetch:32⤵
- Downloads MZ/PE file
- System Time Discovery
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,11080077680794574288,14160183544171443138,262144 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2016 /prefetch:22⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,17620517323284910900,9065811993515633510,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2580 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,9660991454195862773,12154361984049571199,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3100 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3192,i,8101776419185550378,5153543657368428246,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3224 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,4052588521734289173,7317350287522393914,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4488 /prefetch:22⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4428,i,11922250282829793510,7195231023149600779,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4752 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,11442089110385369025,6348235721797643660,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5540 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5624,i,3811074847612544381,7318274274039975573,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5572 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3244,i,13249625876939056538,16479405207497134464,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3180 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3312,i,17306916662430743655,4259701956382296718,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3332 /prefetch:82⤵
- Modifies registry class
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3260,i,18341325878315654429,11366313190422041485,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3304 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6044,i,7363226713335555669,16222901886011568055,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6052 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6464,i,8097821444944427849,8630951926733790583,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6448 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6300,i,6669718350783677911,11016510126596561701,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6344 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6608,i,3551674792912487343,13912234613837394851,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6592 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6772,i,16719480196241261087,3220057944395558717,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6780 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6920,i,17180360208170030715,10946035694375866405,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6928 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=7060,i,15779084584327409391,15114567810486899158,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7064 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=7100,i,12620291861130502899,12060340539731410603,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7212 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7216,i,10729520073459277338,2096048916473383429,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7252 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7528,i,7298438913963293621,9891738994925726769,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7492 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=7656,i,5920806350967477419,9979870210074414194,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7664 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7072,i,11935326780678473036,8334882600379391737,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7048 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7792,i,16211179687964110773,11809983373053661473,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8136 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7828,i,3152559366882121563,9548389543586095825,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7676 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7304,i,1356025053416152815,6231018523822163422,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7776 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7120,i,7287805919654564192,7335131981452954736,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7716 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6364,i,14198506537118997052,3604533954867698474,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6596 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7536,i,14227913364836641696,2082767399591966102,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6528 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7228,i,15675972326405754854,2632781770080741269,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6616 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7452,i,13030387732823369471,15037537512194806920,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7932 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7504,i,10927291164889039457,7980708454818728800,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6248 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7276,i,6201095555739480950,2912510747271826342,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6976 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6700,i,17404839641832190304,7458230172610657094,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6672 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7948,i,1246167671374283198,11673731618936882587,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7892 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8320,i,8821237361785065704,17498016585440009127,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8324 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8452,i,15204647202214774883,5582084976491216806,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8464 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8616,i,2680929070296138438,11650794303952265509,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8612 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=8768,i,12765320739771214812,13706594935199354434,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8764 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8808,i,15289044391864197477,3749218970171489869,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8964 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=8980,i,698538799282579274,3632162817432084076,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9056 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9000,i,11235345208038075049,212878187034036564,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9076 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9024,i,12433900532814513957,17802282787033553318,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9132 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=8500,i,1422569365660442587,16041628112304882430,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9652 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=9712,i,10146191162245163315,2229925799790502002,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9664 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=9716,i,3045153776638586071,3535915418561907490,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9752 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=9720,i,3490583275760687255,10267546451823183599,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9792 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=6820,i,6098727297303099595,3205535083751603401,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8816 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=9124,i,17724836730937596315,12971705635097582275,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9988 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10152,i,7080299105775549825,6564496225784470641,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10116 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10336,i,1741740777025098408,10661340417373672299,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10352 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10164,i,5743657924129630381,78086239242739482,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10504 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=10524,i,7565407524857528247,4618661932661321167,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10656 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=10780,i,9808364777207513709,11335888978236653564,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10808 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10948,i,5322162869657309153,5643403650099236445,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10952 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11096,i,10275943228638961991,17747627866693686808,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11108 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=11300,i,16798594028127635411,12542028426499424574,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11324 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11624,i,9279211923935853269,8574246601589398513,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11644 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11640,i,6792687297982767233,5276622593126870120,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11716 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=11668,i,5716872833162611344,2715700967088536432,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11952 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=11976,i,1424107900274536321,12624529326241466041,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11492 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=11536,i,18307540108205396096,8447054845455333415,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12168 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=11520,i,15605165538550298080,16556440274852132196,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11832 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=6648,i,251732811907404765,12844955293539669738,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6280 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=11640,i,3748557974191704011,13777766820453961425,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6480 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=11088,i,8172214845597631525,17495420377681069636,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12180 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=11240,i,5808382292771586884,8417504104907646286,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11548 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=11696,i,13337720184748565061,5970285145406148398,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12256 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=6848,i,7673924163370158761,13777843879900552421,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8756 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=9056,i,11844503642843731843,4692764410417059677,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7336 /prefetch:82⤵
-
-
C:\Windows\System32\msiexec.exe"C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\Downloads\OpenJDK25U-jdk_x64_windows_hotspot_25.0.2_10.msi"2⤵
- Badlisted process makes network request
- Enumerates connected drives
- Suspicious use of FindShellTrayWindow
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7112,i,3804495283564959151,8813163072207030859,262144 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6800 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=6912,i,9146336374726838854,16629117474024526158,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6864 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=7996,i,13602948124317187574,4395044960060247821,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8032 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10348,i,1802109440848743797,1466964714132417912,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11660 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=9068,i,2286658165733418713,9480600784693294078,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9332 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=11520,i,3124584061568328501,3429351115256014271,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6864 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=12200,i,3942804722116137896,18055141426843986378,2097152 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9056 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=10432,i,15725398463753146495,2479883792749018751,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10412 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=10392,i,2930437408503946993,1932363789333658682,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11872 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=10432,i,7665533308381434280,9082089193634627634,524288 --field-trial-handle=2020,i,10526013841841068297,7157095605408140202,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10416 /prefetch:82⤵
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:22⤵
-
-
C:\Windows\System32\MsiExec.exeC:\Windows\System32\MsiExec.exe -Embedding 994A7FBBF3E7557B97C414374CB421BC2⤵
- Loads dropped DLL
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe"1⤵
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava2⤵
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Users\Admin\Downloads\SweetVisual.exe"C:\Users\Admin\Downloads\SweetVisual.exe"1⤵
- Executes dropped EXE
-
C:\Program Files\Eclipse Adoptium\jdk-25.0.2.10-hotspot\bin\java.exe"C:\Program Files\Eclipse Adoptium\jdk-25.0.2.10-hotspot\bin\java.exe" -jar "C:\Users\Admin\Downloads\SweetVisual-Loader.jar"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SYSTEM32\tasklist.exetasklist3⤵
- Enumerates processes with tasklist
-
-
C:\Windows\SYSTEM32\reg.exereg query "HKLM\SOFTWARE\VMware, Inc.\VMware Tools"3⤵
- Looks for VMWare Tools registry key
-
-
C:\Windows\SYSTEM32\reg.exereg query "HKLM\SOFTWARE\Oracle\VirtualBox Guest Additions"3⤵
- Looks for VirtualBox Guest Additions in registry
-
-
C:\Windows\SYSTEM32\reg.exereg query HKLM\SYSTEM\CurrentControlSet\Services\VBoxGuest3⤵
- Enumerates VirtualBox registry keys
- Modifies registry key
-
-
C:\Windows\SYSTEM32\reg.exereg query HKLM\SYSTEM\CurrentControlSet\Services\vmhgfs3⤵
- Modifies registry key
-
-
C:\Windows\SYSTEM32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters"3⤵
-
-
C:\Windows\SYSTEM32\tasklist.exetasklist3⤵
- Enumerates processes with tasklist
-
-
-
C:\Users\Admin\Downloads\SweetVisual.exe"C:\Users\Admin\Downloads\SweetVisual.exe"1⤵
- Executes dropped EXE
-
C:\Program Files\Eclipse Adoptium\jdk-25.0.2.10-hotspot\bin\java.exe"C:\Program Files\Eclipse Adoptium\jdk-25.0.2.10-hotspot\bin\java.exe" -jar "C:\Users\Admin\Downloads\SweetVisual-Loader.jar"2⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SYSTEM32\tasklist.exetasklist3⤵
- Enumerates processes with tasklist
-
-
C:\Windows\SYSTEM32\reg.exereg query "HKLM\SOFTWARE\VMware, Inc.\VMware Tools"3⤵
- Looks for VMWare Tools registry key
-
-
C:\Windows\SYSTEM32\reg.exereg query "HKLM\SOFTWARE\Oracle\VirtualBox Guest Additions"3⤵
- Looks for VirtualBox Guest Additions in registry
-
-
C:\Windows\SYSTEM32\reg.exereg query HKLM\SYSTEM\CurrentControlSet\Services\VBoxGuest3⤵
- Enumerates VirtualBox registry keys
- Modifies registry key
-
-
C:\Windows\SYSTEM32\reg.exereg query HKLM\SYSTEM\CurrentControlSet\Services\vmhgfs3⤵
- Modifies registry key
-
-
C:\Windows\SYSTEM32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters"3⤵
-
-
C:\Windows\SYSTEM32\tasklist.exetasklist3⤵
- Enumerates processes with tasklist
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
e5a4a98.rbs
ADDITIONAL_LICENSE_INFO
ASSEMBLY_EXCEPTION
LICENSE
keys.dat
BookmarkMergedSurfaceOrdering
BrowsingTopicsState
f_000021
f_000025
f_00002b
f_000037
f_00003d
f_00004b
f_000058
f_00006c
f_00006d
f_00006e
f_000070
f_000071
f_000072
f_000073
the-real-index
the-real-index
000003.log
CURRENT
MANIFEST-000001
Network Persistent State
Network Persistent State
SCT Auditing Pending Reports
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Secure Preferences
the-real-index
the-real-index~RFe58b002.TMP
the-real-index
the-real-index
index.txt
index.txt~RFe58f846.TMP
Local State
Local State
Local State
Local State
Local State
Local State
Local State
Unconfirmed 948382.crdownload
memory/1864-1554-0x0000027F2BB50000-0x0000027F2BB5C000-memory.dmp
memory/1864-927-0x0000027F2BB50000-0x0000027F2BB5C000-memory.dmp
memory/3480-13-0x0000029B26490000-0x0000029B26700000-memory.dmp
memory/3480-2-0x0000029B26490000-0x0000029B26700000-memory.dmp
memory/3480-12-0x0000029B24E30000-0x0000029B24E31000-memory.dmp
memory/3676-1789-0x00000183E6F80000-0x00000183E6F8C000-memory.dmp
memory/5856-954-0x0000024EB4260000-0x0000024EB4261000-memory.dmp
memory/5992-960-0x00000194D4740000-0x00000194D474C000-memory.dmp
memory/5992-1928-0x00000194D4740000-0x00000194D474C000-memory.dmp
memory/7092-1564-0x00000000001E0000-0x00000000001E8000-memory.dmp