hxxps://www[.]pngwing[.]com/es/free-png-qbwuk

Analysis

user interaction
yes
max time kernel
88s
max time network
89s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/07/2026, 01:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.pngwing.com/es/free-png-qbwuk
Sample260716-cdb96aes5x

Score

5^/10

discovery

Malware Config

Signatures

Drops file in System32 directory 11 IoCs

description	ioc	Process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.jfm	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jcp	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.log	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jtx	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00001.jrs	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSStmp.log	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00002.jrs	svchost.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4960	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134286406547281070"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings	mspaint.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings	mspaint.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
5020	chrome.exe
5020	chrome.exe
1696	mspaint.exe
1696	mspaint.exe
5020	chrome.exe
5020	chrome.exe
5424	mspaint.exe
5424	mspaint.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
6288	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 58 IoCs

pid	Process
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe
Token: SeShutdownPrivilege	5020	chrome.exe
Token: SeCreatePagefilePrivilege	5020	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe
5020	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1696	mspaint.exe
5416	OpenWith.exe
5424	mspaint.exe
6288	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5020 wrote to memory of 2220	5020	chrome.exe	85
PID 5020 wrote to memory of 4872	5020	chrome.exe	86
PID 5020 wrote to memory of 4872	5020	chrome.exe	86
PID 5020 wrote to memory of 4960	5020	chrome.exe	87
PID 5020 wrote to memory of 4132	5020	chrome.exe	88
PID 5020 wrote to memory of 4132	5020	chrome.exe	88
PID 5020 wrote to memory of 4176	5020	chrome.exe	89
PID 5020 wrote to memory of 4336	5020	chrome.exe	90
PID 5020 wrote to memory of 4176	5020	chrome.exe	89
PID 5020 wrote to memory of 4336	5020	chrome.exe	90
PID 5020 wrote to memory of 2472	5020	chrome.exe	91
PID 5020 wrote to memory of 2472	5020	chrome.exe	91
PID 5020 wrote to memory of 3840	5020	chrome.exe	97
PID 5020 wrote to memory of 3840	5020	chrome.exe	97
PID 5020 wrote to memory of 4188	5020	chrome.exe	98
PID 5020 wrote to memory of 4188	5020	chrome.exe	98
PID 5020 wrote to memory of 1660	5020	chrome.exe	99
PID 5020 wrote to memory of 1660	5020	chrome.exe	99
PID 5020 wrote to memory of 3692	5020	chrome.exe	100
PID 5020 wrote to memory of 3692	5020	chrome.exe	100
PID 5020 wrote to memory of 1236	5020	chrome.exe	101
PID 5020 wrote to memory of 1236	5020	chrome.exe	101
PID 5020 wrote to memory of 2940	5020	chrome.exe	102
PID 5020 wrote to memory of 2940	5020	chrome.exe	102
PID 5020 wrote to memory of 4216	5020	chrome.exe	103
PID 5020 wrote to memory of 4216	5020	chrome.exe	103
PID 5020 wrote to memory of 4964	5020	chrome.exe	104
PID 5020 wrote to memory of 4964	5020	chrome.exe	104
PID 5020 wrote to memory of 652	5020	chrome.exe	105
PID 5020 wrote to memory of 652	5020	chrome.exe	105
PID 5020 wrote to memory of 2580	5020	chrome.exe	106
PID 5020 wrote to memory of 4116	5020	chrome.exe	107
PID 5020 wrote to memory of 4116	5020	chrome.exe	107
PID 5020 wrote to memory of 1736	5020	chrome.exe	108
PID 5020 wrote to memory of 1736	5020	chrome.exe	108
PID 5020 wrote to memory of 3520	5020	chrome.exe	109
PID 5020 wrote to memory of 3520	5020	chrome.exe	109
PID 5020 wrote to memory of 3040	5020	chrome.exe	110
PID 5020 wrote to memory of 3040	5020	chrome.exe	110
PID 5020 wrote to memory of 1908	5020	chrome.exe	111
PID 5020 wrote to memory of 1908	5020	chrome.exe	111
PID 5020 wrote to memory of 4104	5020	chrome.exe	112
PID 5020 wrote to memory of 4104	5020	chrome.exe	112
PID 5020 wrote to memory of 3148	5020	chrome.exe	113
PID 5020 wrote to memory of 3148	5020	chrome.exe	113
PID 5020 wrote to memory of 4272	5020	chrome.exe	114
PID 5020 wrote to memory of 4272	5020	chrome.exe	114
PID 5020 wrote to memory of 5276	5020	chrome.exe	116
PID 5020 wrote to memory of 5276	5020	chrome.exe	116
PID 5020 wrote to memory of 5284	5020	chrome.exe	117
PID 5020 wrote to memory of 5284	5020	chrome.exe	117
PID 5020 wrote to memory of 5292	5020	chrome.exe	118
PID 5020 wrote to memory of 5292	5020	chrome.exe	118
PID 5020 wrote to memory of 5464	5020	chrome.exe	120
PID 5020 wrote to memory of 5464	5020	chrome.exe	120
PID 5020 wrote to memory of 5876	5020	chrome.exe	121
PID 5020 wrote to memory of 5876	5020	chrome.exe	121
PID 5020 wrote to memory of 5884	5020	chrome.exe	122
PID 5020 wrote to memory of 5884	5020	chrome.exe	122
PID 5020 wrote to memory of 5892	5020	chrome.exe	123
PID 5020 wrote to memory of 5892	5020	chrome.exe	123
PID 5020 wrote to memory of 5900	5020	chrome.exe	124
PID 5020 wrote to memory of 5900	5020	chrome.exe	124
PID 5020 wrote to memory of 5908	5020	chrome.exe	125

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.pngwing.com/es/free-png-qbwuk
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb7b9fc728,0x7ffb7b9fc734,0x7ffb7b9fc740
  2⤵
  PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,11297876343748361933,12778743531262788141,262144 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,3769564448543218780,481159052586037006,524288 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,5474593497870303838,6504083696700777511,524288 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3184,i,15966593694519838678,12025593819415563970,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3192,i,3185773970420378002,4125983131552560547,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4348,i,11791577853536170234,1636199894329267806,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:2472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4320,i,16826650709155228189,13021450390634419617,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4884,i,7037290672767392390,15551638602167619073,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4724,i,16119079361256908534,8586681360956999466,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4696,i,4472140880352350137,4551670973610564900,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5308,i,3442732088477725688,15075098868566437202,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5456,i,484687107859386648,128182334934368413,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5960,i,1123263681648440318,17847626272510187853,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6128,i,5399608751138920417,12913846881012474175,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6708,i,15308072539756862511,17820477946138346022,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6728 /prefetch:1
  2⤵
  PID:652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6920,i,12532422068303153322,12259670911244320321,524288 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:2580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=7048,i,4761858435445637193,20587078706889592,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7064 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=7212,i,3514142381370473306,1912076631848257965,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7232 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=7396,i,11298255752852519768,11845968856518302376,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7368 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=7512,i,14274547532250103832,8462668562631036649,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7528 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=7660,i,3582454979939368727,15748808748702996464,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7672 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7824,i,7056399829204110443,17876247998592354318,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7832 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7964,i,15335532430177633418,18258425626409844841,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7976 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6848,i,4798574881460169399,14857361608947323011,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8176 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6684,i,15761120692977340607,3910261368827772370,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6520,i,861503602995817391,3913508410324376474,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:5284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=8328,i,122712320180251194,908125560285978979,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6556,i,17211874862257903484,12401442371860784384,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8520 /prefetch:1
  2⤵
  PID:5464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=8516,i,5231611290395576271,351486206351496520,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8180 /prefetch:1
  2⤵
  PID:5876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7232,i,513552961340598623,16970790065417975142,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7344 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=8768,i,9448251374723466731,12220658904967978189,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=8888,i,1757978048273385055,16924837207279756058,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8928 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8892,i,1219354748082012688,15232097011891407192,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9076 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=9048,i,10214419032979173611,7039355106588748167,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9212 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=9372,i,7285286685940614783,9347650564121922291,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6856 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8140,i,14952849818228742306,13792179120062787395,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9672 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5072,i,16209900409819950434,10264942138953437632,524288 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5032 /prefetch:8
  2⤵
  PID:5516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5048,i,3251108446953737645,15875319719487300718,524288 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8940 /prefetch:8
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5056,i,6393971924330791667,10754128332038949020,524288 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8960 /prefetch:8
  2⤵
  PID:5540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9232,i,5571573313023299503,5885308906033405435,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8584 /prefetch:1
  2⤵
  PID:5384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=8540,i,16741062631285870834,5492409222031964413,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9124 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9672,i,7617843784746099277,6929639579272953654,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8608 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=7344,i,17380899434647625702,10085417480923376688,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9048 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9672,i,9315960317687272636,1242279630920257625,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=6448,i,10213302951821507560,13744983027303010994,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6460 /prefetch:1
  2⤵
  PID:404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7224,i,13757208324162558878,10114278494956114693,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8532 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=8576,i,987967706297816288,244565283430529478,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8560 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=4476,i,16131228273503967149,11466388153924924888,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9148 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=9196,i,389840737092600207,18320415726985742087,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8892 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=9684,i,6124140552621648974,3102842416104475996,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8800 /prefetch:1
  2⤵
  PID:5612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=4376,i,6755926826787873844,15715421406315106195,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=208,i,1524931504796224490,9156269398092073376,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=8796,i,14375629316420433064,12722044717685012652,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8164 /prefetch:1
  2⤵
  PID:6336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=6848,i,7966214101003864856,11983017641426496998,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8240 /prefetch:1
  2⤵
  PID:6344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=9000,i,17193022601739651473,7995811701035407974,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:6352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=9680,i,150332611318584848,3975332211767537484,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9676 /prefetch:1
  2⤵
  PID:6360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=9544,i,14492872550458142902,14327998929197140773,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9584 /prefetch:1
  2⤵
  PID:6368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=9852,i,5926890618348464183,15409147194780974915,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9864 /prefetch:1
  2⤵
  PID:6376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=10000,i,14745638609578250366,11611163007204976765,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10008 /prefetch:1
  2⤵
  PID:6384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=10148,i,12610592550854041708,7297836760764613306,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10152 /prefetch:1
  2⤵
  PID:6392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=10300,i,5091293024267475939,11705162685815698950,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10304 /prefetch:1
  2⤵
  PID:6400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=10448,i,16955254688093458233,11725093724260755404,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10452 /prefetch:1
  2⤵
  PID:6412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=10584,i,11985280610010262727,14060855810041934090,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10572 /prefetch:1
  2⤵
  PID:6420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=10604,i,2357468344766373981,3988428224456650064,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10632 /prefetch:1
  2⤵
  PID:6428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=10656,i,1434941983755828623,11387077626342458169,2097152 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10716 /prefetch:1
  2⤵
  PID:6436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=9820,i,5058118853018995303,9398562057650851119,524288 --field-trial-handle=1924,i,4550661609303659722,16164511425841451002,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1072 /prefetch:8
  2⤵
  PID:5508

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3796

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5444

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5808

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Downloads\SaveUnregister.jpe" /ForceBootstrapPaint3D
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1696

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc
1⤵
- Drops file in System32 directory
PID:4792

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5416

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Downloads\pngwing.com.png" /ForceBootstrapPaint3D
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:5424

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:6288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

93ec1922-e654-4342-a625-19698664f3ff.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\93ec1922-e654-4342-a625-19698664f3ff.tmp
Size 12KB
SHA256 242c1abe7f9d72c89547a2455f8fc2228bf930ae334f5bac2195a71dff862977
MD5 ae16b66460e73004ea5ca02e41a7b563
SHA1 2de1e2c336f68d68fbaaee36bcfaf70702dd9dd3
SHA512 1f1f5d66d951f7fd26ca9be7b51a656f72d72eb07662eecdba298e63a6578283ce36d57e428e44769a1f8548865695a6f840c0bc8ad9f9a60039f88ac0c880b5
SSDEEP 192:IRL7Cc9yiamv70pAPRp2dSZ9+Hsb+WNnrFotd2dfhiGw2DMXe/GVyIsnAUg5T:IRL7b0SgUXH8wpq2VhiGRgO/e5T
TLSH
T1F642C72EAA006D7BACDFD225FD627B93D7F6102225912E84E7FC8A1C15E75CC212701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2a778ccf4f103a378dc34fafa0b3b4c338e75bfa2a69d987e18adb86fbffd25f
MD5 f5af40bf0e148f66c168916d70b42da5
SHA1 5787c4d9c7d7ce143ec9ff9efea3d591ba860e12
SHA512 91d32fc340ac2d2c6c8ebafa47494b5f5e3e40fe6c7cf2766e037e80128c25e9ad6fbec6eee5241adcb24c7a68b9144cb5477e5e89f5eda6a454857909c6dd10
TLSH
T1F4E02B6AC8A2EC2718F90F19B0505783E754136B2A80994B7B3C814C8FB163A4585D6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 a33758a2c2f8d0e4936f91c656f2b20f9134dc2851b55903ab233500c075b889
MD5 18b551ed7384b83045220a0e7b66892b
SHA1 d1084594901535b548cbea185b996861d9ed1fae
SHA512 1371fe902feb261da9e8a27a7ab2422cf31d8f2e97d922b3b3f20c3c8b8ad633210625afeec870f8199aa33b960852fd1e4b37fa959719273947621e64bbf6d4
TLSH
T18F418602CAE25B1FEF202675A4AF3C683920F5E581A78B7BF701D4F6A6A36C951D0314
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 120B
SHA256 407007ce20185707feb1fc6db5a25b6bd72b12c1234e18e90f5f5e4ddc719fbb
MD5 dc702825f3b110a7b8c70bb88c20b29f
SHA1 66a98141a30a1db4d073dd290837463cbaf6ed14
SHA512 493b64199e6ca7e104f9abf20f8f7406f5e261c2e444b52416b4348a667c80dc962f225417fd2263a1a51f38ea779f92504002cfc835ec9c2ac8c2b0c43a3754
TLSH
T10EB0121841441653EF0049B1754B65607384ECD1196B133BF3AC064ACC271C0CAB2009
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 34KB
SHA256 a0cde73f4198681067dbe829b1e4135076334a1262c8261d5e33e721be573d83
MD5 508725846b4beb30d72fcf6d3adfd058
SHA1 cf031a55fa70212ee97d3fe008ef7d601c303c84
SHA512 a0ceb5839fa61a7f725ee71bec7e338edda0af6c4b3b02c32dd47b96d43fe526bdd393f399bc59874c430c9d27617ad40875adf05b2cbd8e670e87d8c5fabfd5
SSDEEP 384:DomAAJzSe4ezQz6Be51q13oeWuQJhNZOsg4pde4F0OnJBloKaIaEdMtFu+w2Q0e2:xMtNgNbnDckNm3Gee7
TLSH
T10EF2ADF383EC463DD81552F46B9A2D2BCE680D34431C3CA6C9D66E0A53E4471E29AE5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5aa7041b498cc6596f6ac4f79426c190a20a61a3d06c2542a94a338d20c48a7c
MD5 25b31a9099dd629279197f678dcffdba
SHA1 348d100e4091c5f946577f7b50124da5898e96cc
SHA512 74e169fde99e0c589d9cae9e41546dc9cd32c144f092d5902c963508c926dd15a2a953cbfa55ed55872c7821f129c9cb43e7600f4d246d10d5c1d90807e6a1f6
SSDEEP 192:IRLXCc9yiaxv70p7PRpndSJ9+Hsb+WNnrFoTkggfhiGw2DMXe/OVyIsnAUgvT:IRLXb0hgBXA8wpJgYhiGRgO/GvT
TLSH
T13252D92EBA006D7BACDFD269F9617B57D3F6102225912E84E7FC8A1C15E75CC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f4df89f095632262e1b5ecd690087c5bc8bbd0e82bf751f5920efa4f96045cb0
MD5 0310509f502d0250ac0d96154442ce3e
SHA1 a7faa08cb37b935ff62f6219de1af1365fbfa039
SHA512 7c8f577f45acf6e357f9726a4df5a55dd30c9c7164f38cd770de1f22e7a399f01704ccf18e47a47efd5546761191bb6f7442ebb0fc766f7a387131269b3727c8
SSDEEP 192:IRL7Cc9yiaxv70pAPRp2dSZ9+Hsb+WNnrFoUCYzfhiGw2DMXe/yVyIsnAUgvT:IRL7b0hgUXH8wpeYrhiGRgO/yvT
TLSH
T10C42C72EBA006D7BACDFD265F9617B53D7F6202225912E80E7FC8A1C15E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 8e510e7485b1a5e59b1616672c60aae1847130a40508f4503f10dcb5d3216a9d
MD5 5cd6365eefaacb7db7c6c011e2fc7f97
SHA1 e70d75a95e8b58a5f72af8666ddbf5d67c0ee06d
SHA512 63ff4a5e9cf3af118d38b0089027d32a647214620b5b4ffa1c694d46cd61280534d60aa52f28f952f1a82da15933ffd98dedb8982ad461588f3c399ad075992d
TLSH
T112B01210C0125141C04203B4218324ECB1645F11960B270653E0A92AC8271A18019150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ec5f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ec5f.TMP
Size 96B
SHA256 1a431375b8de3a747573851cb1e46f2e29983161d15f767e6bbf70beb38a22c5
MD5 8e0eaa4ead34164db0e1651333c98c03
SHA1 66409952e62a95584dcae2bb0b7bef8abd428ebd
SHA512 716f953e08def61abba0d4b3e64bc9f94d3a3e45fb72fb5184e4e6f3b6e1936999ca8cd42cf87c050056a12bc92a28b8026cef1be42ab4340123b75fcc327bee
TLSH
T19FB00266C2026227C04207F06E9999D8B664EF25D6031223B6E51A66EC2967185A6360
MD5 SHA1 SHA512 TLSH

Submit Download

7818bf565bfdf118_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\7818bf565bfdf118_0
Size 63KB
SHA256 e0445f7c99ef1070abb32f9846e0fbc4e0e4816bc206dbffc4c2a0079d756e79
MD5 335d3ad73362a692a0b0477a94a17451
SHA1 ee7594a0150de14e7796acb02d79d5a415aafa78
SHA512 d78571a65c5ba18a1f801237d8427e00579f9c55fac620b8186e5a9aecdaf9e670e703e7f7985b83d18a645261e1e3b0159607e691845264f5472c3a05920646
SSDEEP 768:HeJDcwZ9olHJrD05l7eEFfgoAxWhrJTV9/5oZ+UyA2xGu/5374WAiEAXnR8c6BVy:HDJ0VPVR5yyJxGSV4V1C6c0VVEO
TLSH
T1EE534CA633707477827BA1F1905F230B713AE167F40494E8B194EEE54A44BAA42B7F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 58b88c096d0b6dd8d309a887bcb3e2da58e95fdbe8827a8bb0bd6b771be7cce5
MD5 ad9940207ad5f7e69b89d57f81a5434a
SHA1 455c262cfdb703e08567a162491d574f7c6819b8
SHA512 ad1f11c3f498a19ed532f4139e9a8951dc9771f5edb72931c06915ccd7ed433741857a184034c486f5e3bbc94647a4b5ea25713bfeae97e893c4fa4e0a9bc560
TLSH
T14EA00294F6415119C85036B615D2C9853A506C9205018763A0D45956C97C1D94667504
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7951e03866433fc74238eb361458de804902a008433ba52851c9b22672424260
MD5 6093bc849df88d3a0e2cc83bab4f48f4
SHA1 35974614103c79c400cf7eb913f25c7b91da169a
SHA512 cc8919c3eb28e3220b6749a7fa62b238ebe3ceb3a156d68dc09cf72a9b9dcbb3a32eebe6541ab105b509e6c6b963a5caca193c9c34026780004d1d4b0d3fcd6d
SSDEEP 1536:4VhyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:o/qfd7NtZL8cHQRZEQ6Sps3
TLSH
T180C30237ABC21E339DD2DF64B5130ED793F644AAD034D301AA6D37AB7893591A48249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 c27bcee2a64e572c4aee1661c3eef0b3cd7d8a79471a91df3bee7d989387c388
MD5 af46eb979e90a870b9b2d69e67ce020b
SHA1 2a397049dc25efc58726f9dd49a6ec9cc0fff523
SHA512 675c42ed87418f36fe05427a9bad3fce4e3f93b74d02ac657cdf6348eaf0e6fd255de96ab39f0ac218ce0a79ac0600882c252fded95374e321bd495839027680
SSDEEP 1536:bYLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:Eqfd7NtZL8cHQRZEQ6Sps3
TLSH
T12EC30237ABC21F339D92CF64B9130FD6A7B644A9D030D301AAAD37EB7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e88395deeed9115a74a3b8814ac75714db12fc4589f6af450bd4cc393d76116c
MD5 b1b09425dca8ef774bb211aeaca21c47
SHA1 5245045d2269e68e30421bc1bbc0efddc9bc2725
SHA512 ea3e5ce171c8d826e4ca32acb8b75fa927b7acb9659ad2bb68ab7a7ef808e6ba996dac0cf76fb43193416d703d9e423cd00b0c314efe78ff2c174847de6161c2
SSDEEP 1536:lajjyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:IjNqfd7NtZL8cHQRZEQ6Sps3
TLSH
T16CC30237EBC21F335E93CB74B5130FD7A7B644A99034D301ABAD37AB6883591644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b7a0f1b551fbd6d165c7e7352bd423400d00d951fdafc07295de240fd07326bb
MD5 da484792e761c2c40a93eea540b44140
SHA1 a18e338bcbaa02f7bab8c4d2dcd291e3e4e08895
SHA512 bd8dd29ceb34a28c6836c760e0d542e6a813fe53ea12e40f0388c48af0af6a4a5fa5c486a8e978d89e988c86cfa9ef5b35931474d480e90cbd0b941577115c65
SSDEEP 1536:4ajjyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:TjNqfd7NtZL8cHQRZEQ6Sps3
TLSH
T193C30237ABC21F335D93DB74B5130FD7A7B644A99034D301ABAD37AB6883591644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pngwing.com.png

Path C:\Users\Admin\Downloads\pngwing.com.png
Size 1.1MB
SHA256 e566b108a151224be2b72bdd2c9a7dd0fb1189eaed63154ead450f01d080dd53
MD5 c6513a3280c4303dce6223ce29e5c8c4
SHA1 5c7db1168559748b22cd3aaa3c3348c86299b5ed
SHA512 7db241a97ac5238a18843d0f070366255895eb3f94b15a76b2aba0d5e6a1a7d6f75d074bb2d4919291f8be4618297d9d806b7fddcd97047b4a1fb9f6b9e5aea6
SSDEEP 24576:TqCumzqprenzOaQOuwBCwJEa8C8Nt8NhMH5U0gPZ:TNq4xQhjWD8CytqhMZI
TLSH
T16835333987918410EC4A3E9434662AE5ECC5235D1FF4E1FAA42CBC7942A5658FF24FC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4792-382-0x0000023AA7170000-0x0000023AA7171000-memory.dmp

Download

memory/4792-385-0x0000023AA7180000-0x0000023AA7181000-memory.dmp

Download

memory/4792-384-0x0000023AA7180000-0x0000023AA7181000-memory.dmp

Download

memory/4792-383-0x0000023AA7170000-0x0000023AA7171000-memory.dmp

Download

memory/4792-381-0x0000023AA70E0000-0x0000023AA70E1000-memory.dmp

Download

memory/4792-379-0x0000023AA70E0000-0x0000023AA70E1000-memory.dmp

Download

memory/4792-377-0x0000023AA7060000-0x0000023AA7061000-memory.dmp

Download

memory/4792-364-0x0000023A96D60000-0x0000023A96D70000-memory.dmp

Download

memory/4792-368-0x0000023A96F60000-0x0000023A96F70000-memory.dmp

Download