b7f7ab0f5d4c35d08a52674d1cb8bf2a736282ee2767cf437e68ea23be62b5e2

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/05/2026, 02:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
run.ps1
Size 70B
Sample260502-cx2ddsgv2s
SHA256 b7f7ab0f5d4c35d08a52674d1cb8bf2a736282ee2767cf437e68ea23be62b5e2
MD5 5fcfaf4078db23e57c8d03ee6ac51cbc
SHA1 0b796996157429720c572b065a194e4102dc892c
SHA512 b0195231b08b51486e04dcf8b629f7e8a4f995e2b3d1e09d1eb453b623bc0387544cc509efc2b59aa5de44cf93b6f90d497cc53a6cca9d7c38bce055938fc97c
TLSH
T11DA0220C3B0830C02A2222F0388033E0EC83B0B8032008FA300C2C003008002B320B80
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery execution

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
3648	PowerShell.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
704	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134221625374758463"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3648	PowerShell.exe
3648	PowerShell.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
4508	chrome.exe
4508	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3648	PowerShell.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1904 wrote to memory of 3408	1904	chrome.exe	82
PID 1904 wrote to memory of 704	1904	chrome.exe	83
PID 1904 wrote to memory of 2188	1904	chrome.exe	84
PID 1904 wrote to memory of 2188	1904	chrome.exe	84
PID 1904 wrote to memory of 2216	1904	chrome.exe	85
PID 1904 wrote to memory of 2216	1904	chrome.exe	85
PID 1904 wrote to memory of 2416	1904	chrome.exe	87
PID 1904 wrote to memory of 2416	1904	chrome.exe	87
PID 1904 wrote to memory of 2184	1904	chrome.exe	88
PID 1904 wrote to memory of 2184	1904	chrome.exe	88
PID 1904 wrote to memory of 1556	1904	chrome.exe	89
PID 1904 wrote to memory of 1556	1904	chrome.exe	89
PID 1904 wrote to memory of 1720	1904	chrome.exe	91
PID 1904 wrote to memory of 1720	1904	chrome.exe	91
PID 1904 wrote to memory of 3352	1904	chrome.exe	92
PID 1904 wrote to memory of 2192	1904	chrome.exe	94
PID 1904 wrote to memory of 2192	1904	chrome.exe	94
PID 1904 wrote to memory of 5588	1904	chrome.exe	95
PID 1904 wrote to memory of 5588	1904	chrome.exe	95
PID 1904 wrote to memory of 2304	1904	chrome.exe	96
PID 1904 wrote to memory of 2304	1904	chrome.exe	96
PID 1904 wrote to memory of 2464	1904	chrome.exe	97
PID 1904 wrote to memory of 5800	1904	chrome.exe	98
PID 1904 wrote to memory of 5392	1904	chrome.exe	99
PID 1904 wrote to memory of 4544	1904	chrome.exe	100
PID 1904 wrote to memory of 4544	1904	chrome.exe	100
PID 1904 wrote to memory of 4736	1904	chrome.exe	101
PID 1904 wrote to memory of 4736	1904	chrome.exe	101
PID 1904 wrote to memory of 5376	1904	chrome.exe	102
PID 1904 wrote to memory of 5376	1904	chrome.exe	102
PID 1904 wrote to memory of 2868	1904	chrome.exe	103
PID 1904 wrote to memory of 2868	1904	chrome.exe	103
PID 1904 wrote to memory of 5004	1904	chrome.exe	104
PID 1904 wrote to memory of 5004	1904	chrome.exe	104
PID 1904 wrote to memory of 3916	1904	chrome.exe	105
PID 1904 wrote to memory of 3916	1904	chrome.exe	105
PID 1904 wrote to memory of 5676	1904	chrome.exe	106
PID 1904 wrote to memory of 5676	1904	chrome.exe	106
PID 1904 wrote to memory of 3844	1904	chrome.exe	107
PID 1904 wrote to memory of 3844	1904	chrome.exe	107
PID 1904 wrote to memory of 3980	1904	chrome.exe	108
PID 1904 wrote to memory of 3980	1904	chrome.exe	108
PID 1904 wrote to memory of 4648	1904	chrome.exe	109
PID 1904 wrote to memory of 4648	1904	chrome.exe	109
PID 1904 wrote to memory of 1012	1904	chrome.exe	110
PID 1904 wrote to memory of 1012	1904	chrome.exe	110
PID 1904 wrote to memory of 4868	1904	chrome.exe	111
PID 1904 wrote to memory of 4868	1904	chrome.exe	111
PID 1904 wrote to memory of 5088	1904	chrome.exe	112
PID 1904 wrote to memory of 5088	1904	chrome.exe	112
PID 1904 wrote to memory of 4668	1904	chrome.exe	113
PID 1904 wrote to memory of 4668	1904	chrome.exe	113
PID 1904 wrote to memory of 2480	1904	chrome.exe	114
PID 1904 wrote to memory of 2480	1904	chrome.exe	114
PID 1904 wrote to memory of 5456	1904	chrome.exe	115
PID 1904 wrote to memory of 5456	1904	chrome.exe	115
PID 1904 wrote to memory of 5016	1904	chrome.exe	116
PID 1904 wrote to memory of 5016	1904	chrome.exe	116
PID 1904 wrote to memory of 1264	1904	chrome.exe	117
PID 1904 wrote to memory of 1264	1904	chrome.exe	117
PID 1904 wrote to memory of 792	1904	chrome.exe	118
PID 1904 wrote to memory of 792	1904	chrome.exe	118
PID 1904 wrote to memory of 2068	1904	chrome.exe	119
PID 1904 wrote to memory of 2068	1904	chrome.exe	119

C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe
powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\run.ps1
1⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3648

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0x9c,0x108,0x7ffb735fc728,0x7ffb735fc734,0x7ffb735fc740
  2⤵
  PID:3408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1456,i,10613161849680419455,5636528393051584775,524288 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2076 /prefetch:11
  2⤵
  - System Time Discovery
  PID:704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1652,i,8419612452521829751,1075330120629885177,262144 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:2188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,16613903398059177179,938445448336068755,524288 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2404 /prefetch:13
  2⤵
  PID:2216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,11633308614891893329,1360998665981466869,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,1426002163800383090,12363033246669196722,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4168,i,2122603322569872788,509168807846330754,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4176 /prefetch:9
  2⤵
  PID:1556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4580,i,9127625644738810096,18042929626658864306,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,7346789382651098820,4678438823582078434,524288 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:3352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5408,i,118308151410277679,4716198204114115784,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3320,i,9658130938319943882,18093748139477621718,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3624,i,4133117323344811794,405805007469232643,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3832,i,493029873482498784,1814863859884505469,524288 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=216 /prefetch:14
  2⤵
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5788,i,7076472437242178370,1214255193839436637,524288 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:5800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3332,i,10572100179973383935,7433081827167340233,524288 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:5392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3644,i,18239762474476646019,18288286320623102687,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4792,i,5773655175681990780,10446635749231161669,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5784,i,5560824769418718087,11521263490918333500,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5724,i,4719498371404883635,6083109439514336212,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5656,i,9095260201811431057,16888244193409455423,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3608,i,12778680449420474406,3797146125119068688,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5816,i,12794986935308833896,2066454762112446526,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6252,i,1386136261772145903,14181932197509467119,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:3844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6020,i,10020994708659139892,8942078040449452990,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3248,i,12580060111779578213,776959538540149250,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6028,i,16462741304595787623,3297766284280900837,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6492,i,1840934846058961108,1304785831431857705,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6624,i,4996771617874295476,8574508200622846104,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6776,i,15981713144782749077,14010915139980988116,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6484 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6884,i,221049183967276736,8332087643815755366,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:2480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6084,i,13455661871275958246,10266449936693487014,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7024 /prefetch:1
  2⤵
  PID:5456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=3836,i,17112337100258340043,11286129319369021326,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=3500,i,14083011126338582812,17900324257502589917,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7228 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7440,i,3334859502802130177,14135040756013925813,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7456 /prefetch:1
  2⤵
  PID:792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7436,i,13393472480301769361,12218088068354140038,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7480 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7696,i,10539260703315010143,1984250710585503283,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7712 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7856,i,7282500950503480658,17333970032685935072,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7852 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8008,i,8385974830215594870,7759020249972480113,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8016 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8160,i,2122260041333152238,810869491269787272,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8172 /prefetch:1
  2⤵
  PID:5412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8504,i,3525598133681425219,1152533302943737223,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8444 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8408,i,8379717758388952105,9018189027609888284,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8604 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=8436,i,11696731872937869998,9696861290932692534,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8720 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8384,i,14538590696596182025,11331918279886899931,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8736 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=8800,i,7188884675006511216,17064627421606972631,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8912 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9132,i,11154278897669526586,14596847711372120144,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9144 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9284,i,6782436545534618148,11037848587209010160,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9312 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9448,i,17633297283585346827,11558654708599954651,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9468 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9708,i,4191201423282210417,17571823054296341739,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9628 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=9048,i,16871139205247104246,12099769448061617056,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9540 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=9032,i,11628028085569909097,4469510288640213692,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9484 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=8164,i,6129092508035848124,6557871096403434017,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9444 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=8756,i,12888965757048237758,95335319745659297,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8048 /prefetch:1
  2⤵
  PID:5708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=8920,i,15213052217252519922,10598665670294703763,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6900 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=9864,i,15544490256518520311,7675447796707781845,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6940 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=6984,i,6484651604214567895,8803549920646017923,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9984 /prefetch:1
  2⤵
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=6996,i,17254823697066234551,12194439440546888968,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10056 /prefetch:1
  2⤵
  PID:924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=10200,i,11970115694585285139,14616167709589302945,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10204 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10344,i,16956193179296024812,13910043403130736599,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10356 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8364,i,13934069135282402560,5222765936523871574,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7584 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=7824,i,5644719219379901557,12891755979363408530,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7048 /prefetch:1
  2⤵
  PID:5904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=7112,i,6882269132470498723,5398025619127974948,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=7016,i,4480405013135982708,7991210845210424122,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8304 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7952,i,8385428102035708423,18023998836879299631,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7964 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=10124,i,2946159057696789434,12042012868361621948,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7480 /prefetch:1
  2⤵
  PID:708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=10160,i,14803279677625332,16081448190264596174,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8084 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=6904,i,4125815431910397551,1450238348373201960,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8144 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=7416,i,3840135388219919485,5628722010794786247,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8344 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=6136,i,16202738734981770241,3001470925137850760,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9956 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=6828,i,14363458784576391913,8224473045616043213,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9908 /prefetch:1
  2⤵
  PID:388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=9668,i,6564756670302030296,16776870653687142535,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=7312,i,14878143132601282963,11964574468753687624,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7432 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=9424,i,16654147112538291126,15673903092749331176,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7376 /prefetch:1
  2⤵
  PID:3036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=6932,i,991810665407009184,8369092877872424922,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=7460,i,11433835910158874066,1344498857979877775,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8336 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=8036,i,12089875552123791454,17213124056708558011,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7844 /prefetch:1
  2⤵
  PID:5708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=9688,i,15524661077567647039,9313023441334558271,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7692 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=9660,i,3592877626901656045,13904853724088291507,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7812 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=9488,i,7341857075143343453,7542185202288556568,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7524 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=6508,i,5561371829419518194,6794642780458304992,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6444 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=7444,i,531680160554369215,2600584232446035334,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7916 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=10120,i,1893566398412120421,6318399209206882646,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7324 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=9232,i,824989769920186342,11878484482168395259,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9220 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=7480,i,8330937520983659696,17611354782130324014,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9176 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=7728,i,7832701044386807428,10985871205961471785,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7100 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=8424,i,9591824282395997026,12778298284401556369,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8744 /prefetch:1
  2⤵
  PID:5740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=9580,i,13625365369081603302,11242081668385862394,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=10328,i,10104583376360502852,16896286701818075033,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7352 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=9644,i,13815434862703557031,233990183083626463,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7464 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=7936,i,16567051242159303858,4295003970522621639,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9676 /prefetch:1
  2⤵
  PID:1272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=7588,i,16148989544497706695,9373336621941803526,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7924 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=6456,i,6374682682406595375,8277279599797511405,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=7408,i,6184340616235297129,12174732806791445057,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9760 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=8820,i,12942705922070761261,3350695110299019863,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8816 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=8400,i,12131213435192987989,2034485705289951256,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9128 /prefetch:1
  2⤵
  PID:828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=7160,i,13784731854153957724,12810457961230644269,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7132 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7280,i,9916529078727861383,174148460426454577,262144 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10560 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=6216,i,9554499610594117105,2341331592069224394,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=9092,i,647034476616466297,16503366463598774749,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10564 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=8944,i,6055588411890811522,16214220587319318493,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6828 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=8200,i,4946191077334486922,16165074058207607022,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7980 /prefetch:1
  2⤵
  PID:988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=8996,i,17795196537348352175,7529963317360128253,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=10472,i,336540920353005242,4817712101315817120,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=9340,i,11633958326551064036,11620034290982440659,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10436 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=9600,i,14845150100371551338,5687020104180040081,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7484 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=7200,i,3630478401191629586,9466592410721725096,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7388 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=8480,i,10421397838777757551,1434018802810598269,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8904 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=8728,i,12772568448844895514,17463309625650218415,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10440 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=10336,i,13979215958284155656,10356059524775085390,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9436 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=3632,i,2522655344700297111,5462156785250132514,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9332 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=7036,i,14364652941342329002,5678228457934527179,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7892 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=5780,i,8194586517192163439,939667153788608330,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8768 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=8380,i,3027147677057678580,5960044966963353885,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8476 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=9620,i,1702033555375435135,859288418713616354,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8996 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=10608,i,333899934840349726,5159474398606171025,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10056 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=9444,i,16868860093440395278,14219733639221989305,2097152 --field-trial-handle=2040,i,2104606699766485089,18443996521073094883,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9484 /prefetch:1
  2⤵
  PID:5812

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:6028

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0e138e10ad692b4d487fe8894d0599ce9c7f11a4413bad5b9609d0985087edf4
MD5 a20e9f13469ae03c89adebc12135cde9
SHA1 7567ae20055f90d296e062fd8db7082ed00c16cf
SHA512 fdcb272a061a39d0f8254150c6af8df0475247fd62a195c8d5c4b35d27ef699769a50196982104fbd842d2f86b42ed9703226c2cc26f2357b589269731059b3a
TLSH
T1B2E022AACE25DC7718FC0F3960544B42E748071A2B40890F7B3D960E8FB1A3E468685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000032

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032
Size 34KB
SHA256 fbc426f9fbcf351b85dcac5d1e593906dc75a29966e5e5b9756ee723303db359
MD5 b516b2037cc446fb54df3b42b9d4a082
SHA1 0a1cac7991f7f1ca0825445c7483f045af7f85bc
SHA512 532198abaafca72d6978a4a1909b9fb52ffeee6469befabed3caefd3ee896e3a5b27a1da5229221028c8b9047187091589633ce4f6d7a2637c3d8b06ea93f962
SSDEEP 768:dZdtomz5zFAKyLvnaTzy20Yh7btz2kJoHS8LoyheAOvt7:pvPQyzy2530wyPLoyhNut7
TLSH
T1CEF2025F1248D5D8E793B5DBE85A202E44230F0F72C6D4B74C9223BC809E9D9EE5C14B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 22KB
SHA256 b80a55f3030841f368032f10acbd26a829c993903294c584d998458a4d70d89d
MD5 bd0d0107c2540ce0870aec267a705413
SHA1 59eb579119f34e48f5f3fa878755ee2e4f5b6f30
SHA512 7e4037892ded6b32a95fc92742aaa6bc687674f5bb6a937e3fe0417615e34304c2125110121ce2dc285bc7bd23fe054953a7eef139c67d672a0f6306e2fedee9
SSDEEP 384:7k4vsCr3JYCTXdaUBABemdGLN51oSoTdHYZzZSu0Ym8flUzkViUMDBfROpfQCFzW:jZ5NdaeDLN51jedOSu9tNSk0zNJFCTPw
TLSH
T136B2E1A8B6CD78E6374770A7D850408498ADAB2DDE188B5B1DCEDC8029EDBC70E140F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000037

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037
Size 35KB
SHA256 11f9c953a5436073790ac71c8deecb4a80883d1e51ce0b0d6540d38809a73348
MD5 54d1303289913466fae5f4b7f7477a41
SHA1 986d5d5984557573bfd4caa3f91c248db9123578
SHA512 148d33ea6daefc8188f7ec1ac3873c9e44229f8b5c609ff0e68a1a47c3d246532c7fdf031654cfcf7204afc21263dc6af0e7cc82e94bc1890763a5e679a64d0a
SSDEEP 768:Cm8t+ZI7oPKTlAQGz3d2xnA9hmqoQhkZ4N5/x8kJQSjjxY:CmC0DPKTlQzt2xncB8bAq
TLSH
T168F201989361D510C34BA95BEBFDD6102A44F6FB08F817861026DC62F2298197DBBBE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e
Size 73KB
SHA256 95f0582481c517b9aaadf864034a92458e7631b7555200cb80cc98695e6ff05c
MD5 28c2e68218562469237e0de1c5c7c48b
SHA1 471ff79ca68ab4823af695d9c719e66e249cba2c
SHA512 9834825498634f65fa613ab1557c454a9ec22358bdfed19bf6e65371174e50f27bc3af822ff13b4967bc274c33818f95f5fd2b73291b149db40dc2eff3f1d2b9
SSDEEP 1536:9+BtIuGx2g9hqmCs7pV887zFOCWwS5Z9jBV/mDO+XJYwmfM/J82w5:KtVGllV8DCWH5zNiOOcwJ7o
TLSH
T1FA7312842FDCDC13EC66A4A3C54490D72BBA7E9E04B964055B01BFC787BE49DC92E1AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000041

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041
Size 101KB
SHA256 22ab14db588e68963aa172c4470dd54ce594f4cf6e9b59e9321c7d928f09fabc
MD5 4b4152f29cf19f9f198c0d22a8b55650
SHA1 1cbc5a1607651ba049c71e018751a2c09a37cd26
SHA512 43b8f293ec0b7fbcca257199a896f68c440a7d046332de3a43b9c6ba469f1d34d8b6ec2261ae6055359741558df4014b8f75264217cf83cd7ebb413ce8326e6e
SSDEEP 3072:SPSJuluhWbcw+nq6cqlFoh2oQ1fyxkRWK+mak2z:gS9fnqMnA9CaZz
TLSH
T164A302853585AB077224263F57310F185C9BA7DC83B27B014DAA61B4F9901A7CAE78BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000042

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
Size 61KB
SHA256 73dbe77ea5a1b3c7c799ed8b17ac9ff2033d894c774ee4ad7fb4225e093a7e4b
MD5 f6e0fe6d87eb071d7c598f86eff91f80
SHA1 3ddcf225d3d5bc92dcadc26d85de2c70b3600dcd
SHA512 30444d3679a46571c2262bfe7a9e222c601ffeb3855b424a763a0bc7039c5e2e15eb1b995d6c5832e540a8957b2f2e4c826d6f39a933e6c64db9c8fb3412f9b6
SSDEEP 1536:g+/dYAnHPUtRCuQN+g3In1lOOtc1n4Sipgfw7kTrh:g+awP08dY1RtSL1Xh
TLSH
T1695302E64558042FCD7847BBCF500CC6BB9ADB9D28A642533D6A827C51F4736F22909E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
Size 91KB
SHA256 303093687f987144fe4204ad683ab26bba9824c5120784f65f35e2a637e2834c
MD5 6b54c413543e51b7dbdd26e26876c28c
SHA1 76dd4930b78c1e6a73203f7427fde61720e7794e
SHA512 0976f37fafe2ea9e4ea1e29948ff950693d63522c0340c000262211a39142fe5866f2d16755f7a5afe6b533ea7c4dc201fab28af5bfad2c8be7127686012d00e
SSDEEP 1536:7PfTanmWMDcuuQPPQyVKJ1tmc6bgLTn9KH8FZHgbrEqPpmQRo2gmZgHTPV+YTHcQ:ynmW2PQyTDkTn8HwHgcq92L
TLSH
T102931235B1972BE6D209DE2DFC88202C82D924DD7F0F607D9DE86B6D457A6CF08E4219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a
Size 16KB
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7
SSDEEP 384:XQrDFyKFRXQQ5pGG913BahobGGOal+0HuXpAWBY:grxyUKQ53pdbGg47PY
TLSH
T11D72D0D62F2702F608F294202ECD392C679D7A25F77E6625F0659C860D58EB0D8F4F52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057
Size 21KB
SHA256 736742a465591abf3fcb8f282823859d54ce238f7d9cbf54ee136ff50ff92156
MD5 321d8597cf76a932cd990412c3fefd6b
SHA1 f3cfade1569b394a19ce89a0ebad5e78621df736
SHA512 7dc434e076973be71e49af0192a00b14953d70d2dfa741c8cea7c62de4e72523968c6ea1c0f0715a7ba08ef295a1004006cc489b796690f9cd11b0bf308d8f98
SSDEEP 384:0PXQf+RaPUcVKtrsv/HNO29gzfnVrWdqkPftjP+zwkVYrk2hPje:AQf4Ov/HNO29qf8lVCk8OLhPje
TLSH
T165A2C0ACFB47931B4AA07ADE179F63336844F4287EA58DEC5B16B397D0571A66C10220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

336a68eaaf209f48_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\336a68eaaf209f48_0
Size 309B
SHA256 249aee1566316cba1a58f4894e886217274691451325b73f7e6c01531747b8d0
MD5 e46b8a2c604d852e35bbe437e375be50
SHA1 e09bf963792d1e68d3dbfa0134fb463c6060113b
SHA512 dd145fd962eb0d410c2f992d19da8ee7115e82085c78b77daa4cb67723cd74c7ccd4bbafcbee2d8bc47391826062052db1e3bdbf677247b88c66c0893ea71216
TLSH
T148E0E7F3506C4152D7FD45F2C05453EDC73310EB2D968C8D510AC4101501098D3C1175
MD5 SHA1 SHA512 TLSH

Submit Download

f64f7ada9720dff5_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f64f7ada9720dff5_0
Size 476KB
SHA256 2670451242b018c1c928fe2e6ae118401e864dcbb67a766b486c6360fd1f34b0
MD5 9fee390606692831cbcf64116dfbb4fd
SHA1 8979cc7c09b4f7c7f8dd710405af0f0ba332745d
SHA512 6804c0b5ce7fa1446c072fef3033f01c4ce10027a8928c50a167dda869d7ef2eabe7c82b58ef89d3f5a20af29ed9a6c9795a889a9d3513946f5a0bcd802bba3f
SSDEEP 6144:G07XfVYuVKStfrLN+MADW1Tv4hm9NTAOnqxTV7RT+wAjxM2glEWbCv2a5tmBAqI+:HX9pn3cW1TvoOnq9lAUbZIGD5z
TLSH
T19AA4D601ABA1AB33CE324BF55393C9577235414C3FD7E10726E297752C282FADA96C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 816B
SHA256 46c0be3e526b732c9d2ce6192f65aae1f31bd594d650a64db9b845ce16fdb5fe
MD5 44ef77f274b607b2ddb2cf5c96ccf756
SHA1 e4e045e17740a13b8a76ef59902cd2438c288fef
SHA512 245107b472da1ddd9b2737173cde3805c06a10b10fa88334a1d8ed574f3a73b73c735bc284a55e6bc582842e7b09eb5e66e60d9f7cd76be8eba0bc835dcc48f2
TLSH
T17401788A5973F878DB700A75ABF4098D5732C6EEBD10436A1A6BD393500316E697CD80
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 f8a0bbd05a26f0c0548e158a7dc7b5e2d8dfee51dd4e16f9cc35914d65dc3c9d
MD5 c05588e22e5434db5b7c0300de012e36
SHA1 779a06dd1543e3b0d7c30fd4816f7ec7da0c2934
SHA512 027ff1affdebda43da196c64fa0741d4eeacd23b16281f21101fffc6a01dc746ce675a7c4fa058838875b23dc4b18c633626bf740593e26f3f2b09b04443097a
SSDEEP 192:Dn6rfIDXPz7UaIav9sAy09pIlIYZYfR2GJFHi:Dn6rfIDXPz7UaIav9sAy09pIlIYZYfRy
TLSH
T131E169B3C3D9852D891156F49B257F2FCE2D0A28431C3D66C9D8AF4B93E2872D21175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d9eb2d2d6a41af3af393d27a4c4ebb4be5fd1a24fbc5ba449d0d25771e8cf495
MD5 8b5d1f254805526700c9446a90913047
SHA1 afc4d8a66219b1edd69b859258ca26b9958ac772
SHA512 8c6d769d8fda149efcfa7de3f0d11d200318e66ba4c606fac2a0f4345e522669024cb11032fc20d865e0c3d9de2a14988437c9f325758c48a50052d3d6e60ccd
SSDEEP 192:/RCQRlplU9vv7gpAPRp2B99Hsb+WNnAG0el/eD4O5OoDSpJZnJldVyIsnAUgtaJ:/RC4DcnsUXq/wx0GS4O5OoDSXZnJlr8
TLSH
T15542D62EA914753B5CDBD219FD22BB57E3F1102220D52E88EAFC892C18E7ACD7217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e08ae3f85a5277f89911f8626f67d47d9a8c073e2177ab89849a215956c0dde4
MD5 d3203c23b837dab8f8b9378b84953edd
SHA1 f3185741ad1f5b9de8c04c339b4f234c49c0e4a9
SHA512 f14d12d89d214dbb1e4e80c1bc90d1a965c40cd89d9b041dece09b7dbfeaf5f96b4e04f91caabbd38ece9ff29bb303737008866c5534ba59fb88d6e5ee4de718
SSDEEP 384:/RSmz4DcUsUXgH/wze2gS4O5OoDSXZnJlr8:0mz4QRnH/w1AJlY
TLSH
T1F352E72AB9247A375CDBC219FD21BB57E3F1102261D52E88EAFC892C14E7ACD7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 3ef62f95f6dc3d2c8f8afbe5e487e8631720c6e2c57212538e3974ea9daf4335
MD5 38c497f121d104c6007f3e4cc996cf1f
SHA1 4a1eec6b24f96dcaad44bfc7e6618c4473ec214b
SHA512 5a647e0d3da04f8f2a3790037d3d6c48bdf8e82f06598f856bad4d1596fa814862cc109c6bd2df4eb8bc8c9febee5df6ce18e38572eb8837c3a499ce696117d5
SSDEEP 384:6RSmz4DhWsgXwd/wuq7f827S4O5OoDSXZn0lre:lmz4dvzd/wDnD0lK
TLSH
T1AA62C62AA9147A775CEBC219F921BB5BE3F1102261D42E88E6FC8E1C14E7ECD7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 dadde736c9d95acf611fb932cee2b5647916dac0a043e612a94189c70113ab70
MD5 826c5c0b793b32ffbf7f6fcfb41f0fe7
SHA1 54a67b5919aa4de7e59ee965119d6e770c9c2572
SHA512 a5e4e9c5aced597322eff4cf3b01caac5b33131c5d2be7f6a66c7aa66b0f51a5f5e81acbfc10c911a0aefbc1304ae3fa6f81aa1abb2059eb309a4a6bb22a45e5
SSDEEP 384:/RSmz4DcWsUXgH/wzT782zS4O5OoDSXZnKlre:0mz4QvnH/wXv7KlK
TLSH
T1B552E72AB9147A375CEBD219F921BB57E3F1102261C51E88EAFC8E1C14E7ACD7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e72b1caf577247cd794934908b2b5ec05bc4aa07ee3ea35d6312f634d2aa7655
MD5 a872757bdcd407c788248fffbba9f7a6
SHA1 d611c6ad28ba25da09faf01ed1aa1fcb39c0b518
SHA512 6c077426d77a162274cdc7c948092f1bd15da18ca20b7a3a45290a7c88199b84e1e0fcd7c1286aeaa95a7b785422c376be931ed8fe79f21efefec10a63febb2c
SSDEEP 384:6RSmz4Dk2sgXwC/wet7flW4S4O5OoDSXZn0lre:lmz4QPzC/wo840lK
TLSH
T12962D62AA9147A775CEBC219F821BB5BE3F1102261D51E88E6FC8E1C14E7ECDB217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 aadf068889f9b0ed6917c7aee96b6684b4c3b1316c2aaf021174f37ac14f8e1c
MD5 25230a7411f731a3e26f190fc1eb5adb
SHA1 1d8d65f2de3c7ef05f7ec42261a6f75a41354e7f
SHA512 dfef3727bbc96d5c716b9aaa9d251e438cc5d4689adeac915b09eb99f73c0ab1813b9de612320e64d950c13b75884dcae9722167e77ea8451732fb1676c6fc5b
SSDEEP 384:6RSmz4DkDsgXw8/wzt7bflW9S4O5OoDSXZn0lre:lmz4QIz8/wpgR0lK
TLSH
T1AE62D66AA9147A775CDBC219F821BB5BE2F1102265D51E88E6FC8E1C14E7ACDB213413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 82085f58435b7b7a260780dca3ee69a48427de11b3ece82d53af0d56f36fd555
MD5 92547e8f34c99d1b69c0e1d957604d80
SHA1 4ca5a2d93853b96b7fc565a0e16045bbcee47e58
SHA512 aee9857bb3f81b98b9310e49ebca2773ad80f91201f0efac2260b404123571baef569acba1d144b7aa20664020dd07820f3547f4604d3bc6c7d155025f48eb07
SSDEEP 384:V3jBM7KxkXqKf/pUZNCgVLH2HfgslQwl7pLuLcifTuXODBU+ErU3bwxHGak5Je0o:VTBM7KxkXqKf/pUZNCgVLH2Hfgsi87pL
TLSH
T1DE72FA67AC4CAA370F94D6CCD827BE4FADB5020B65DD886883FA581903D5ADF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e45dd5cd164fd40b7ebd7ec73a4f24ccb0da54327f357ce1111a9776cbb31526
MD5 43ec5cf5577d5c97dddadd253834b7cb
SHA1 0fa3c20bf8faac5ac19f125e83e200be9bba9e11
SHA512 e9a3a79bf82650d9224e256e671c3489f66444c6116b5696df0de096be0f65e7654914c20700d370921b7a50225fef67e4e8d75c1e08265a8e0cd82b602eccd7
TLSH
T19EB012A188416501C81307F91187088C3565DF508705230153E06979A8261D04118150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cb4a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58cb4a.TMP
Size 96B
SHA256 139c9ce3051b88b85e38e74b3369e1357cc98fa9745f3bdcd65cdfbf53419afa
MD5 8232e2b556281aa0d0bdbab9bee61ab8
SHA1 b5fefb8d8ff00ed34f3c7968eb06a7b97d0d4698
SHA512 2f003333f0df3254a447b7694dc9615176f115299cbe346f501ecea4ad9f5216ab62c9638bb1b7820b5ff55a0c135159cdd07b43a213c0cf947f769e5dc2ca6a
TLSH
T163B02280CA023202C00203F028C082ECF220EF20C303030283F02EA2EE20220082C0B0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 50c4ed558128dc0a1c750fe3363931ab9be6fe5d3392adbb34220fc5b440007a
MD5 33c138845fcf055d4d52e63e5ef72f55
SHA1 956201598421023313700d7d623ce76f53bf1f77
SHA512 fccc7d4c58de972ba58f141ce5f692d31f34ccb5c6aff5ba4c8c5ec6dd11082a30dc1b3d38c1a778f1524c4c1b6a5734b6efe6b9fdad9267d5031dfcd6d518bd
TLSH
T1A8A0025186401046C05426B865F341893621DC1006021345619002E4BCE41819302221
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 795186923ac301888b6cd97825d22a1132e565443f0877218a60ebd5c85ee342
MD5 d1a2b492bf9b0f3fe3fdf63c8812c0d3
SHA1 3102e9135c50781b003e31cf6ce1587b22247757
SHA512 d752c3d5e058585a8fd4a34a9ac345dd188a89daa291ac85bc156fddfdd451f946ea0677382138889befa5ec0fb0f973dd408506d739d234544accebc6851782
TLSH
T1A9B00254D9044066D51403F879F7436EB732AC640B17838792ED51EAE8E5A894A85A06
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 00798ed9609e29df2bdd30b98c2dac28d96adbe0dd0db25e129261977cbf999c
MD5 44041821273e00a0a957503e14cdc353
SHA1 98ff18bc2ed3a40592df5ad6cdb1c1b7a7acb97d
SHA512 e3b2afb8718629a845f4203c452cf6915c2f8ce94c8f42ddb0b5975c4a4587322146e5c1537fbb37aba661dbfa412304ad336775a04e5708c8dfca41b34e3991
SSDEEP 6144:afRvaj9WfFn2LLNNj98U8fXn6S++JjcMW2VcVLjQ:KxaAZYNEP6MOMWtQ
TLSH
T1711412796D2EBE368727C78A201FAE4C4CD299CA9404E4F861471F4701D63A1D74BEBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 a04b5169fafff78e7dd85a956844ec31294c1892f1d625c6cddbfa3ca1370e26
MD5 f2b8d8ebf44c13b12eb29ea41801b4b8
SHA1 59849eeefd975002bf3b7df2a55019237a426361
SHA512 9d549cca75281e122041f042b8bbf28cc5e03bab94a6d66771e9dbece976429766abcf1adc800eb9e06ef509eaf5e73473085b4a734f081e97fc2e87efcb8ebf
SSDEEP 6144:oACm6a1fRvaj9WfFn2LLNNj98U8fXn6S++JjcMW2VcVLjQ:oDryxaAZYNEP6MOMWtQ
TLSH
T12C34123A292FBE798727C786101BBE5D4CD599CB4D00E4FC61025F4701963E5F60AABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 928b85896ada0f2b5ddb25f1cde3f020ea68ea4fc94fc21e3f83f9e0f1cc11eb
MD5 2c4e664092b56d7806b3d800d14ed008
SHA1 a2e0fc4ffe4ea3b55814dcc6065c80e59f7adb7d
SHA512 47c77924fa3f63b3b5db9e2cefec86a0a714bf2eb1833f0786a784509d9921223c242a28c6b2fcd9d010b456fefaad4d48350c4fb71b9e8cb179bdd1e2cadcde
SSDEEP 1536:ubRP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNJm:w++J3qUQm08KMWF0bFTcVHr6zqm
TLSH
T1059302B9991E7979636BC296A0179CAC8CD3DCCE111455BC30C76F0E18BA392E31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 d1b7a7495b30b194b32347da4c276669499f489e96344533ba93ae6b95886009
MD5 2be534bbfc1e6b5720b6090f9c5f9994
SHA1 60a8b20eaacc24afe98daac1f4e66fdb79a7df73
SHA512 8552c8b6d7ea7c2de6cac625e638ef8c8355355016f3512d20b24db4fb60976b0cb6da4f0753fbe661284c13541752bd1fec36118afb85c247c2d0bf9cd8d2e0
SSDEEP 6144:GfRvaj9WfFn2LLNNj98U8fXn6S++JjcMW2VcVLjQ:WxaAZYNEP6MOMWtQ
TLSH
T12F1412796D2EBE368727C78A201BAE4C4CD299CA9404E4F861471F4701D63A1E74BEBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_01qul5vd.4au.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_01qul5vd.4au.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3648-13-0x000001F4E1100000-0x000001F4E1112000-memory.dmp

Download

memory/3648-9-0x000001F4F9660000-0x000001F4F9670000-memory.dmp

Download

memory/3648-8-0x000001F4E1160000-0x000001F4E1182000-memory.dmp

Download

memory/3648-12-0x000001F4F9670000-0x000001F4F975A000-memory.dmp

Download

memory/3648-1-0x000001F4F9660000-0x000001F4F9670000-memory.dmp

Download

memory/3648-0-0x000001F4F9660000-0x000001F4F9670000-memory.dmp

Download