80ffd37a74c3de114d1ab8842651a08887afbc58ddecdfabd466448c16e69615

Analysis

user interaction
yes
max time kernel
899s
max time network
898s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 18:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 33KB
Sample260730-wx64esvbld
SHA256 80ffd37a74c3de114d1ab8842651a08887afbc58ddecdfabd466448c16e69615
MD5 6bcddc95ee1b53e46cda1cc9a71616f4
SHA1 ac2b3d9911da04a72aa81f1e8d94fe5809b7d825
SHA512 818a05dd9e4b43de79d2c1627e00a30df41144d26f61722d3342e7eb607a11de3be1a869e4fab184960019cd71bd949471dee03107a8ac90c4a8efe9f691d79f
SSDEEP 192:zrHNpwhWdI3ZwZow5h+zGi27BL+kDXe7TeXsIgQ/OnQ1ErCg7wOL+qg9oi:zsCI3ZwZow5h+zCBX6DnQ1E+g7wJqK
TLSH
T1CFE21675AA5AB41B06F391F07750B70DA5EAD72BD49366C2C1EC47CA06C1ECAAC3207D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery motw phishing

Malware Config

Signatures

Looks up external IP address via web service 1 TTPs 4 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
66	whatismyipaddress.com
78	whatismyipaddress.com
229	ipinfo.io
231	ipinfo.io

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
890	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	1252	chrome.exe

Drops file in Program Files directory 39 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1252	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299091788609544"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 37 IoCs

pid	Process
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
7040	chrome.exe
7040	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe
Token: SeShutdownPrivilege	3732	chrome.exe
Token: SeCreatePagefilePrivilege	3732	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe
3732	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3732 wrote to memory of 3880	3732	chrome.exe	84
PID 3732 wrote to memory of 1644	3732	chrome.exe	85
PID 3732 wrote to memory of 1644	3732	chrome.exe	85
PID 3732 wrote to memory of 1252	3732	chrome.exe	86
PID 3732 wrote to memory of 2144	3732	chrome.exe	87
PID 3732 wrote to memory of 2144	3732	chrome.exe	87
PID 3732 wrote to memory of 5020	3732	chrome.exe	89
PID 3732 wrote to memory of 2096	3732	chrome.exe	90
PID 3732 wrote to memory of 5020	3732	chrome.exe	89
PID 3732 wrote to memory of 2096	3732	chrome.exe	90
PID 3732 wrote to memory of 4680	3732	chrome.exe	91
PID 3732 wrote to memory of 4680	3732	chrome.exe	91
PID 3732 wrote to memory of 3296	3732	chrome.exe	97
PID 3732 wrote to memory of 3796	3732	chrome.exe	100
PID 3732 wrote to memory of 3796	3732	chrome.exe	100
PID 3732 wrote to memory of 1764	3732	chrome.exe	101
PID 3732 wrote to memory of 1764	3732	chrome.exe	101
PID 3732 wrote to memory of 4404	3732	chrome.exe	106
PID 3732 wrote to memory of 3828	3732	chrome.exe	107
PID 3732 wrote to memory of 4112	3732	chrome.exe	108
PID 3732 wrote to memory of 3168	3732	chrome.exe	110
PID 3732 wrote to memory of 3168	3732	chrome.exe	110
PID 3732 wrote to memory of 2288	3732	chrome.exe	111
PID 3732 wrote to memory of 2288	3732	chrome.exe	111
PID 3732 wrote to memory of 3636	3732	chrome.exe	112
PID 3732 wrote to memory of 3636	3732	chrome.exe	112
PID 3732 wrote to memory of 1496	3732	chrome.exe	113
PID 3732 wrote to memory of 1496	3732	chrome.exe	113
PID 3732 wrote to memory of 4084	3732	chrome.exe	114
PID 3732 wrote to memory of 4084	3732	chrome.exe	114
PID 3732 wrote to memory of 5160	3732	chrome.exe	126
PID 3732 wrote to memory of 5160	3732	chrome.exe	126
PID 3732 wrote to memory of 5248	3732	chrome.exe	127
PID 3732 wrote to memory of 5248	3732	chrome.exe	127
PID 3732 wrote to memory of 5596	3732	chrome.exe	128
PID 3732 wrote to memory of 5596	3732	chrome.exe	128
PID 3732 wrote to memory of 5608	3732	chrome.exe	129
PID 3732 wrote to memory of 5608	3732	chrome.exe	129
PID 3732 wrote to memory of 5616	3732	chrome.exe	130
PID 3732 wrote to memory of 5616	3732	chrome.exe	130
PID 3732 wrote to memory of 5736	3732	chrome.exe	131
PID 3732 wrote to memory of 5736	3732	chrome.exe	131
PID 3732 wrote to memory of 5772	3732	chrome.exe	132
PID 3732 wrote to memory of 5772	3732	chrome.exe	132
PID 3732 wrote to memory of 5780	3732	chrome.exe	133
PID 3732 wrote to memory of 5780	3732	chrome.exe	133
PID 3732 wrote to memory of 6008	3732	chrome.exe	134
PID 3732 wrote to memory of 6008	3732	chrome.exe	134
PID 3732 wrote to memory of 6076	3732	chrome.exe	135
PID 3732 wrote to memory of 6076	3732	chrome.exe	135
PID 3732 wrote to memory of 992	3732	chrome.exe	136
PID 3732 wrote to memory of 992	3732	chrome.exe	136
PID 3732 wrote to memory of 4608	3732	chrome.exe	137
PID 3732 wrote to memory of 4608	3732	chrome.exe	137
PID 3732 wrote to memory of 1956	3732	chrome.exe	138
PID 3732 wrote to memory of 1956	3732	chrome.exe	138
PID 3732 wrote to memory of 5468	3732	chrome.exe	139
PID 3732 wrote to memory of 5468	3732	chrome.exe	139
PID 3732 wrote to memory of 5460	3732	chrome.exe	140
PID 3732 wrote to memory of 5460	3732	chrome.exe	140
PID 3732 wrote to memory of 4880	3732	chrome.exe	141
PID 3732 wrote to memory of 4880	3732	chrome.exe	141
PID 3732 wrote to memory of 4164	3732	chrome.exe	142
PID 3732 wrote to memory of 4164	3732	chrome.exe	142

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffdffc3c728,0x7ffdffc3c734,0x7ffdffc3c740
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,1341304735935429652,15622612428968646189,262144 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:1644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,3877027298493522194,13366186513715413933,524288 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  - System Time Discovery
  PID:1252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,554287340912459349,13574007175650112228,524288 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,11950092868685045878,16748484109247364839,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3212,i,12439311521647296675,2999878910842678325,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4376,i,2906986898403142652,83090235422213716,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4436 /prefetch:2
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5316,i,6651734821648206620,5293423461091246215,524288 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5900,i,8615794125932982459,8634879144797343753,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5992,i,6581805867972608115,6317034775075192664,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6124,i,12886869858138954113,12055935928819900098,524288 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6060,i,11503090179542714782,9943768227569043660,524288 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3392 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5980,i,2345265156803412228,8399500060755408862,524288 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3384 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=208,i,3959389792285649970,13259388991920883886,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5696,i,2985200733011499889,6948412140819558719,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6064,i,920682377557487208,2744878082390185615,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3452,i,6852618443853179957,2541881353169588405,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6140,i,4445999893313739787,17507377988566530581,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6356,i,10325528573447297519,17367687000426418080,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6104,i,17227901502712290461,13869752308270036963,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6576,i,3798460255252047330,12235184957865710448,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6500,i,13663499306350624517,770562217496270697,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6712 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5972,i,4709473059157838351,13525575606460765554,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6892,i,16135689745695353938,11133996015599767793,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6860 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6020,i,8889161303924715152,1705933496876460402,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5868,i,17620022284000305773,16754729999466268449,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5208,i,10986278154261444860,2183832180476442611,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7140 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7312,i,8546523994939238921,7447934320380121483,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7292 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7716,i,3786055838462745763,1297854399404198891,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7968 /prefetch:1
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7708,i,171245772733634641,9617066032401826357,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8116 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=8156,i,5367537190826649081,16003628690138314485,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7316 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7860,i,2236764085016419235,1367901507820577792,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7876 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7748,i,6363186294370399626,15395999563520573440,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7800 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8376,i,12214813325053726560,3030746715082516526,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8344 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8384,i,4384605479135482865,13413668926752707251,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8380 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8684,i,10394822677745221411,17800220823538162908,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8688 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8668,i,665141562899725461,1225946666184450558,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8808 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9000,i,7848455083043080248,1901352478033354786,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8968 /prefetch:1
  2⤵
  PID:5536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9012,i,11718607716235244899,10453715592793040372,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9020 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9084,i,6338658657610787717,17825192857874606695,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9252 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9000,i,1489130053423931079,846742316508885664,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8932 /prefetch:1
  2⤵
  PID:5408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9468,i,11022742355148615558,3132157621857438447,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9484 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9680,i,739038576798973855,10296705205036013469,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9704 /prefetch:1
  2⤵
  PID:5412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9900,i,12076154735068508300,15910932959106924667,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8716 /prefetch:1
  2⤵
  PID:6216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10068,i,10737656350854543824,13045128676249481269,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10044 /prefetch:1
  2⤵
  PID:6284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=8816,i,8727012161142153706,2888802482226808377,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9456 /prefetch:1
  2⤵
  PID:6364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9908,i,4185630936005004608,18345914086872639620,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10288 /prefetch:1
  2⤵
  PID:6372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=10320,i,12687323654634238818,7434561292495776428,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10344 /prefetch:1
  2⤵
  PID:6380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=10600,i,11110456479427492421,148164459225489793,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10644 /prefetch:1
  2⤵
  PID:6520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=10752,i,8794849444948869067,700853443020853080,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10756 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:6528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=10728,i,1714947374413461908,10253877471134677762,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10884 /prefetch:1
  2⤵
  PID:6536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=11016,i,14202514504817238383,17376270179075188669,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11028 /prefetch:1
  2⤵
  PID:6632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=11048,i,800523815177412273,5071504946516929484,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11144 /prefetch:1
  2⤵
  PID:6640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=11260,i,3796234153140894633,15447705000062335505,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11268 /prefetch:1
  2⤵
  PID:6648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10320,i,15361734532408473885,5061500717691922972,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10376 /prefetch:1
  2⤵
  PID:6788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=11588,i,9362586726073504532,18154762155114322138,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11592 /prefetch:1
  2⤵
  PID:6796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=11720,i,15234752152389327448,15421245423048328365,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11732 /prefetch:1
  2⤵
  PID:6804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=11920,i,8789704131794522634,7263780690097265990,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11964 /prefetch:1
  2⤵
  PID:6944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11040,i,7615729795257188022,15002093652936055940,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11328 /prefetch:1
  2⤵
  PID:6996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=12232,i,4006120307096355389,15602486496040497556,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12212 /prefetch:1
  2⤵
  PID:7060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=12400,i,3241966805759750544,5238200650608700006,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12384 /prefetch:1
  2⤵
  PID:7116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=12540,i,13419306394015348652,1428104792283751586,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12536 /prefetch:1
  2⤵
  PID:7136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=12680,i,18094501229313884179,7351729526019862236,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12728 /prefetch:1
  2⤵
  PID:7188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12904,i,990075302344849180,7737057132521501816,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12916 /prefetch:1
  2⤵
  PID:7248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=13024,i,12537064788929549888,7378835464710899256,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13008 /prefetch:1
  2⤵
  PID:7256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=11904,i,3293727557939967032,94822626479771263,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13212 /prefetch:1
  2⤵
  PID:7368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=13156,i,9945538064402762189,5822921295036596245,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13184 /prefetch:1
  2⤵
  PID:7420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=13404,i,4213235651926968566,3550886994346907284,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13416 /prefetch:1
  2⤵
  PID:7428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=13424,i,9254766234000445047,1362274487060536482,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13544 /prefetch:1
  2⤵
  PID:7436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=13740,i,14976881555550362406,12470317262254112342,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13744 /prefetch:1
  2⤵
  PID:7576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=13900,i,9885166564564347513,13820139206940312532,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13920 /prefetch:1
  2⤵
  PID:7656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=13896,i,6868095038613920323,14560643646743365521,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13888 /prefetch:1
  2⤵
  PID:7664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=13940,i,9334311194711996040,942504565337960827,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13732 /prefetch:1
  2⤵
  PID:7756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=14316,i,16262816270982887880,2499197494621359047,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14332 /prefetch:1
  2⤵
  PID:7808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=14440,i,7346317995303075000,8115683051091812821,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14456 /prefetch:1
  2⤵
  PID:7816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=13676,i,3968398317168151994,15463036293531796901,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14656 /prefetch:1
  2⤵
  PID:7920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=14588,i,7723817373521099046,15129127581327581446,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14784 /prefetch:1
  2⤵
  PID:7976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=14900,i,13017031574751425612,15679504162726398460,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14896 /prefetch:1
  2⤵
  PID:7984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=15040,i,5284453204276769920,16309357971690993696,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15036 /prefetch:1
  2⤵
  PID:7992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=14464,i,13651462533900416499,8702431393819057848,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15224 /prefetch:1
  2⤵
  PID:8088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=14664,i,17015999779235287851,9695732080945577216,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14316 /prefetch:1
  2⤵
  PID:7916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=15428,i,14807091069109553736,10419160696245728740,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15416 /prefetch:1
  2⤵
  PID:8268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=15704,i,4390244749801938775,14557528172786467351,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15708 /prefetch:1
  2⤵
  PID:8284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=15848,i,16667963721504094520,15190676302359156518,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15852 /prefetch:1
  2⤵
  PID:8292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=15996,i,598955251094395900,4836627928410965632,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=16000 /prefetch:1
  2⤵
  PID:8300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=16144,i,12950880605527549703,9739071270878513587,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=16152 /prefetch:1
  2⤵
  PID:8308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=16284,i,14397050298955574053,14582644728969304666,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=16288 /prefetch:1
  2⤵
  PID:8316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=16312,i,2402420996473797092,9660425702454814531,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=16436 /prefetch:1
  2⤵
  PID:8324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=16604,i,445724367352262424,13567469370820839749,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=16556 /prefetch:1
  2⤵
  PID:8332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=16732,i,13847124835942801663,11499419722378730317,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=16740 /prefetch:1
  2⤵
  PID:8340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=16880,i,2739239398692862078,14588302481648418541,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=16892 /prefetch:1
  2⤵
  PID:8348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=17036,i,7639010461101000711,17133057831478570271,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=17040 /prefetch:1
  2⤵
  PID:8356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=17172,i,4197735415882659496,5190894867177368237,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=17180 /prefetch:1
  2⤵
  PID:8364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=17316,i,11424339265225455735,4247993555305231104,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=17296 /prefetch:1
  2⤵
  PID:8372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=17440,i,6136097671883616411,9709910495765187327,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=17456 /prefetch:1
  2⤵
  PID:8384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=17616,i,17583755046895437328,3208961407475037925,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=17628 /prefetch:1
  2⤵
  PID:8392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=17764,i,12551740247006948150,6637414193852741071,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=17588 /prefetch:1
  2⤵
  PID:8400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=17768,i,5875823975286258539,3401164370751359311,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=17896 /prefetch:1
  2⤵
  PID:8408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=18052,i,3201869030109964332,13150267992643517453,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=18092 /prefetch:1
  2⤵
  PID:8416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=18076,i,930156010961170461,17395111584718456485,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=18236 /prefetch:1
  2⤵
  PID:8424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=16772,i,16808752325228817641,488321293710883836,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=18600 /prefetch:1
  2⤵
  PID:9300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=18636,i,15596236371926130774,1020155352859400007,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=17580 /prefetch:1
  2⤵
  PID:9352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=18656,i,11344721191665563443,5944347179459527379,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=18692 /prefetch:1
  2⤵
  PID:9360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=15588,i,1279506094913938899,2810231373198784924,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15628 /prefetch:1
  2⤵
  PID:9368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=16580,i,17065865385419008895,11118491740155807428,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=16312 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:9528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=18840,i,6932810374177299457,11328805021796075868,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=18856 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:9536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=18980,i,10844805647602372849,6117295905590117943,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=19004 /prefetch:1
  2⤵
  PID:9544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=19520,i,4390807301021775217,3265054027677230009,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=19616 /prefetch:1
  2⤵
  PID:9684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=18976,i,40207611353218933,6213451290657494091,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=19392 /prefetch:1
  2⤵
  PID:9740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=19672,i,2460469569177693218,6240614629483987051,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=19476 /prefetch:1
  2⤵
  PID:9748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=19176,i,16584093089816050493,1505049650773289391,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=19720 /prefetch:1
  2⤵
  PID:9844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=19772,i,1757316144442996073,2765401150241407324,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=19764 /prefetch:1
  2⤵
  PID:9904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=19896,i,7459256972098326442,15761854593505355363,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=19936 /prefetch:1
  2⤵
  PID:9912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=20116,i,12328623950562867434,18297777949127616227,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=20104 /prefetch:1
  2⤵
  PID:10008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=20228,i,6851050446597650474,10149618401051363753,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=20232 /prefetch:1
  2⤵
  PID:10016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=19904,i,17747080542738795129,17626407548172880921,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=20404 /prefetch:1
  2⤵
  PID:10156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=20548,i,401509087752428657,5628672779904789296,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=20392 /prefetch:1
  2⤵
  PID:10228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=20724,i,2739353478641153337,14051967034941442209,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=20720 /prefetch:1
  2⤵
  PID:9288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=20856,i,17770144626944336502,3686261091201120835,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=20848 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=21028,i,7202080929534534219,17382975696303514886,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=20976 /prefetch:1
  2⤵
  PID:10324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=21140,i,10092394989419934183,5238598617488952561,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21176 /prefetch:1
  2⤵
  PID:10376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --metrics-shmem-handle=21016,i,18099097315773493753,14978089537432436669,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21184 /prefetch:1
  2⤵
  PID:10400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --metrics-shmem-handle=21304,i,4604311732022821167,6028125744466361639,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21396 /prefetch:1
  2⤵
  PID:10408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=21528,i,17549576326385330529,8674614426469855003,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21564 /prefetch:1
  2⤵
  PID:10496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=21692,i,4009031578317481577,12534023074709932440,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21784 /prefetch:1
  2⤵
  PID:10516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --metrics-shmem-handle=21712,i,5806074939068735362,282930052346988651,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21844 /prefetch:1
  2⤵
  PID:10524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --metrics-shmem-handle=21736,i,4143701262968738540,9404924179451356423,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21896 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:10532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --metrics-shmem-handle=21752,i,5911882178593833748,4030660297722515989,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21932 /prefetch:1
  2⤵
  PID:10540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --metrics-shmem-handle=21772,i,5729688818278698031,2723257812155427343,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21968 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:10548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --metrics-shmem-handle=21808,i,4331610983741658273,3503980018380077353,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=22024 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:10556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --metrics-shmem-handle=21868,i,9724368198420024558,2495509649187468166,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=22144 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:10564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --metrics-shmem-handle=22016,i,18310658918569253817,14960317990814309085,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=22440 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:10572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=22300,i,13081525191893781154,6706460128313679710,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=22716 /prefetch:1
  2⤵
  PID:10580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=22912,i,1955859701559580590,14007770809549110037,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=22928 /prefetch:1
  2⤵
  PID:10588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --metrics-shmem-handle=21972,i,1342209596198730805,10499295411251531976,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10208 /prefetch:1
  2⤵
  PID:10932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --metrics-shmem-handle=22536,i,6458355311707852805,17401151533954208492,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=23124 /prefetch:1
  2⤵
  PID:10940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=21192,i,9496249926196288346,450968443004319403,262144 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=22948 /prefetch:2
  2⤵
  - Drops file in Program Files directory
  PID:11124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --metrics-shmem-handle=21664,i,11264257872145692108,17067589720735576951,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=21656 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:10728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --metrics-shmem-handle=21688,i,16607885463596580387,8723237939561844504,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=18704 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:10884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --metrics-shmem-handle=21184,i,4689701954321768179,12479829739621846845,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=20796 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:10928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --metrics-shmem-handle=21200,i,17053028563928868691,13582951075318119623,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15928 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --metrics-shmem-handle=17704,i,14321824048972596291,11622492898916016591,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12556 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:9880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --metrics-shmem-handle=16472,i,13221955918671989471,16111137338471508309,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=16528 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:5544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --metrics-shmem-handle=12672,i,7640094315585250441,2224217188523297440,2097152 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14188 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:9476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=15896,i,3958518519291455314,10102807635369733997,262144 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=15956 /prefetch:8
  2⤵
  - Drops file in Program Files directory
  - Suspicious behavior: EnumeratesProcesses
  PID:7040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=9476,i,2758133711616812503,2437441097451649118,524288 --field-trial-handle=1992,i,9937993400226367729,9684705051552663174,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9848 /prefetch:8
  2⤵
  - Drops file in Program Files directory
  PID:7800

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2224

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2d38e95f-b149-4406-99f9-db02636fc78a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2d38e95f-b149-4406-99f9-db02636fc78a.tmp
Size 116KB
SHA256 429bcbc18d4db2a00f635cb1e737c4f2bbd19932efd46fe44a18cd75df3b464c
MD5 9a64b4e3394288f66174f97780e0ad63
SHA1 39c0c6ac16db8f3a6c12933eb71cd200633c3743
SHA512 3c678eb610ded6ea45c7c2405a3ac8ac3741591332d63dbb41847710a6ca71c7fd6495f33e9231798d2dd700f68b575be45044bf339886f5b1b816b0b6b0c185
SSDEEP 3072:/mGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/Rm7Rkm1tYpBeh2BAoM
TLSH
T1E5C3122B6D74AD3759B9BB1EB04E0B1F1EF14AA6D820DE91C8D85B0433F97CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

228d5830-c3db-4c10-99f1-2c2de6be1d11.dmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\228d5830-c3db-4c10-99f1-2c2de6be1d11.dmp
Size 463KB
SHA256 e2c5e3dff32aa5bbfbf749c3632da241404e4d73ec6a78595fcb5cb773aee324
MD5 a73491bbc86f5943b9174890f565ce09
SHA1 4b4ece2c9e41520344ce4b7942474148233effcc
SHA512 c516ad0d92259d93cacbd58179d8c89cb0f70971abb5a63e1fdcf42df3fdfc9d02c81a2817c37b045ef31dfb8ce0bb845b31761254673a72502145bd26dde254
SSDEEP 3072:kQt604GC509Bv00kMnKOSfPhAuswqCHnzlaMXfO7:k2c509Bv00kMKOSfPhAGqgR7XfO7
TLSH
T11FA4E842E79245E6F1664EB066D3A750F7F3D8192BA6970723602A3A2CB33445F37F18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca23769a-b4b7-4306-b2e9-6419a5f1a80d.dmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\ca23769a-b4b7-4306-b2e9-6419a5f1a80d.dmp
Size 131KB
SHA256 61fb511e886441d0ff7bd08ecc3912e5797b8bfe16803bb19fc91c3d59fb4cd6
MD5 543ca4f2bfca0da56ce654b751bd07a8
SHA1 ba2aa36f6f909d03c6b89a771e0ca1330d684f83
SHA512 7dc7f3284082efed13509fa75a3513c362f7f87268a07a8ff46e307ae77d6964441c2a8b89ed49110d840bbc9a3507cbccaa146029a4b83b3902326a3a58341c
SSDEEP 768:G+8JWt2+L/3KjzbhayiSyEcIuXxk7VpCHOEio6E6CPM5r+XzEcVlkVdqu34p9SuO:G+vH/3AzFayXcaVpCuEie+rU4d3Zf
TLSH
T150D30E93A39116A6F535963057D3E390FFF3D9251B768B4B1A41626A2C73324AF32F08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 21785cb778214e7be0c3a2ff727d80fb8a73621ba828e9e89aa6cecb4b2eda9d
MD5 84b777951d4cf31d3ca44d5ad4c1a3f6
SHA1 3cc0982ecaccef58bd1c6f9393af975cfdfd93b3
SHA512 797cbbc93b5fb7b1b2734e50ea55fb5ffe353073eb6a81488463e9e73734e66f0e2792702b418a010f72ba260bbd45f12ff8e3dc6d7eb3780a0acfabdccb932b
TLSH
T1CDE02BB9DA62EC3B19FC2718B46A4709E78213172A409C0F373D410C8FB477A4586C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00004c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004c
Size 24KB
SHA256 3096c47012a7255879304054c9d8d260fd67a0f4b3fdffae385fda6d519856e6
MD5 e8ff9d6fbd28ef9169d377c958235e8f
SHA1 40e43683f211f525348978e338f3d963649e6f55
SHA512 cdcba0c5532d7e53018569ad2c02326d92cb6ed58f38bd10cc94b8a848cbb6aa2e69a73862fb820ccfed233cf4144b4323c4cb2d352dd7249d66fa3cdc7b078e
SSDEEP 768:2YpFhYdDFIJXM6o7ybBcd99jYY/JRcwbU:phiDoXM97UoUaSwo
TLSH
T1EDB2E1A787D0E46D6E9F3BA3B1A4880CCA59760FD7E41C80503FC5167BE22D2058B76B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000069
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072
Size 21KB
SHA256 2a0b7c30f0977fb1625451633b6b398f1f2c69d01c655bba3918c961b66a0583
MD5 8a2c36b90c9c621271b5b157ed86e56b
SHA1 f542f96bdc7ea0f2acfd8cd9353ad01d722256a2
SHA512 10ab9e8180698c4f5570b516c20c7282c50755a33c9215c9bb97d58990004f614a95c06fcf5dd2fbb844e24a5d81332ebdffa5c89cd4b22ee46828d5deab1bd4
SSDEEP 384:3YCbDPjmywD3fwAJ2ZmSMqcHbjgog9rfaPkiTOi/dkewSpcE5uW:3sv0YUmSMnHgogxfadFkewc75uW
TLSH
T164A2E17711DD711BF84E9DE82DCE8ED5C8A9A0DE6C618C4047E014A8D0DEA760FFB4A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000074
Size 62KB
SHA256 650a416042a408cbbe2448fb2ef009e0a3cab8c6344d32a52c1ae3d9a70dbe61
MD5 292a7144ac6076827ee286446a70333b
SHA1 c44f65af003ad27b49ee90ecb3c8b1788ae0ddf6
SHA512 0275591d449699dc3a65e49d4bbe457746b34f42f4fa7207e237a74bc75c2738dd2cc0a897cc01d91cf628f0ed0dc68619f219b85582bb99baccf1d78926e3e4
SSDEEP 1536:HLdHDUCjI3LRCbQHpzRC2HIaa3qqRxVHA2esIyiQ:HRHDU5LRCQHpU2HI1xU2esIFQ
TLSH
T105531201BD89C2EE40C6FA56231B646DCD19DE287063F61D39A874764E5CCE8BF1D2D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 52bd4d953dec77b91e6e2e569e9850fb5f300dec0572a2acb0e1210349fc4361
MD5 0604d479675ed05ac5295af0f1e294b3
SHA1 594eeb7f6370d41c527b5305c2766927b8f772d8
SHA512 7891f0438bce5f52face06e3ef39b5ec13d4b5bbb784b2b12903d180b6e579d6bea834fa450ea635d356a65d3da9773bc9a46ab9d7f545a74c238e27506247e1
SSDEEP 96:pdwB8Tuw67EOhWi/vWE+H341vdvlz73g62+QnyhAVzfknC:z/4L/OhI11vlz73gBjny4fwC
TLSH
T101E10E0138C44010FFAC4EB864F7AC1DAB359844085B5FE7465162BE74DF7F7B869521
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_ipinfo.io_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 92KB
SHA256 809c0cbaa5a5205985212d4dd91ee2e49092b2612ae54c45d2359b955384cb92
MD5 22e1a1936167d854636cabc9868e8d88
SHA1 967304a517bcb840fd5f6399de254fa0aca7dcd9
SHA512 dfd9019cfc7536b8435e7866b516db774ecb000db7a9f2fa18e1d0ae6895a9e7d764045990d269a1a981d07f208f295817d1c12486c5e3e66502aa47b0ed1dbd
SSDEEP 768:rtNWOlEJas2h8WSzxL3Pk4jZZ8bd7ulVnyIJCa:62Yzx7GbdKPca
TLSH
T1A893BFB793B8823CAA5299F0DA94EE27CE6D1554432C3D9DC5D4FE8793E1422D602B0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 93KB
SHA256 05c551b514479c385f79acb6bcdf7c9eb8d934526f970829bc98138f2084f1fe
MD5 7dac4f1d464dd71ac45273b9f3d55563
SHA1 899715919fc7a2b805dfbdcab56dbf205c7f3e02
SHA512 40112db274c944da879ae74dc0bfbcf115c2f879d22910468357550105e8ec82adfa1fd4041afa6d39cfec47515a95cf667caac4c11f5058b76c958cd1c4da1b
SSDEEP 768:BtNWOlEaaV2L8NszbLiPk4jZZ8bd7unrGnylGF:G2VzbuGbdKr2L
TLSH
T10D93AEB793B8823CAA5299F0DA94EE27CE6D1554432C3D9DC5D4FE8793E1422D602B0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 79KB
SHA256 056deeeb94ad6ce0451b4c3593111f47f0965790e04d95ba97f6613808e1467c
MD5 fc5b242c462991390bd36b5588314fe1
SHA1 d0a16d85591d3f737faeb7528663871f8d8289ee
SHA512 6042dc314a62187afc3e6446d1f32bb26d5e46f9fee78fa548cdef876984b3e2016387fcd848a544cf0aa4733dd2724df98c89a1354b73d8b17e3048e57fcaaa
SSDEEP 768:zP+YFSuIas2b86SzmL3Pk4jZ616rjZp+WT+sim:S22zm766rF1em
TLSH
T1C6838CB79378823DBA6199F0DA84EE2B8E6D1554432C7DADC5D0BD83D3A2523C542B0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 79KB
SHA256 5fd6d22703351d8393e3f09324837e6a0621a1ce4142874ebe6fabfbe3cc97f3
MD5 56c8229290fa451f2a25d12bdb076214
SHA1 da5cabb9e5f6daa22cea6648e98355801e285ddc
SHA512 7c9d890cb4be8e7883f4dd637e7afbfd27a09879742dba51414196eb7a22519e06832fda04fc364fbe6ed5eabeca47662ebc1de1440e95d1f1f50214fc5b1f4e
SSDEEP 768:mP+YFEujas2b86SzmL3Pk4jZm16rjZp+WT+sKm:c22zm7O6rF1+m
TLSH
T1A9838CB79378823DBA6199F0DA84EE2B8E6D1554432C7DADC5D0BD83D3A2523C542B0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 25KB
SHA256 3b88caabb5de664776461c69cfe5ac8770b4de626291da59bdcb1224c953a62f
MD5 95bbe71ed76aded81ed340530de56d0a
SHA1 33fbf165e578452d9a82ca2076a371da762264eb
SHA512 1ecfa0d3f9093aed6d7aae855f3c3cadb6c4eff310a6d88a35c5199c6a2366dc980d2eb39f14b1794f8e70257cf6881592d6261ecd77728dbeea113d6a39bcd5
SSDEEP 384:D4L8xicDvTVwe3IBOsjJnJfJCK+1ZDf+JMaaxui7OqENDjtrlFDk2pThCFl0diJl:etFRrIV3v8NIjOgQI
TLSH
T151C2C2F7C3E8822D999155F5EB14BE2BCE2D1518432C3D6AC5E4AE47A3E2471D201B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 14KB
SHA256 febee41820368fa0b67059e535c84cf914cb6db523e3d91805ff4782cf68623e
MD5 8eb02d923d6711ab8a295f9e3e2467e6
SHA1 7a57567d7cb733b43c851a998c0747c8d73baae3
SHA512 a76cf30c9bb806c237b5e181c251679c12ab0b57dfc7598b2c88d62d23237914d0a7e7eefdd0bf13ae4a597d1cdbccc46db854ed69b888d41ec3648e9d3f0db1
SSDEEP 384:ixGGCnmeLupASRA6rM6GQXwQii2ask7BdUwSPnmJkW1CCdx6CSFuIPb0GN/K2rRJ:6qZ
TLSH
T1A4528FE3957FB85721684CAF1D14BC06257AB8325392B4F9DA6BC17CB085CFB1726813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 cd0251eb1c9216c6ab28be8a159ff07e3ed1c757ee04f71406d39bc8a972690e
MD5 9287a98401d1cd7a7b08429098c2ece0
SHA1 8e3fa32a9d3a64212001cedf7ca5a3fff615dd94
SHA512 dcf39b5ca1117c4631651efba030bd5cb8f2527246de9bd29bd5dc63bbab9647eecea6ce89ff33a9ce9d6175a241cc02c197d819cb46b51ad0ff76de21166ce3
SSDEEP 192:FRhcBzvPE4kd29v7MF+pAPRp2zU0wv9HHsb+WNnPCZwW2BH2zBMva4kVyIsnAUge:FRhmzvs09goUXKi1wqj2d2zB4aDe
TLSH
T1A652C62EFD106A7B6CCAC22AF9667717D7F5102161D42E84EAFD8A2C04E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 7e3e1d5877991343edd22109465ddb96a344922b881f3e35ae6f207b4ef8ee0e
MD5 17f0e66357cf24bd157df4742db0e553
SHA1 8f4663e703ba63e61f2adacca3aad84cb2001ce7
SHA512 873926541cd6c547b3265ab2c5ecea6e869d9ea2daf63ecf3209d2e9f8f371f3c633ba159f2819a34aed88b6b8694fc553e300d397d22a9b52c789f290896260
SSDEEP 192:kRhcBzv2E4kdryv7MF+pAPRpqz10wRolYK9HHsb+WNOkNirJmUKO5Hzgu+rRW6HC:kRhmzv9BegoIX971wGk8p4WM2zB4aqE
TLSH
T1E562C75FF9205A7B5CDAC22AF826B717D3F4112262D02E84AAFDCA1C15E77CD2213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 981b94a4f7e40c1f1d59b775cd6fc16008366b430d0c4b3ca5b210f6e55b7fcd
MD5 5043cd97e6deddf98cce04e01ca1e6e8
SHA1 4a32c552c664eeba002b4229c4e2dfc1b921a441
SHA512 3b0662e48937e87292bf676d7a089af17c564b8cae48dee42e874f716a874bd47a03270b730c4f1d139741143ab08fba6d339a189a26b09cf21935a3df3b766b
SSDEEP 192:kRhcBzvPE4kdryv7MF+pAPRpqz10wRolYK9HHsb+WNOkNirJmUKO5Hzgu+rRW6HC:kRhmzvsBegoIX971wGk8p4WM2zB4aqE
TLSH
T12862C75FF9201A7B5CDAC22AF826B717D3F5112262D02E84AAFDCA1C15E77CD2213457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 feb8ada30cd4ceb21da70f0dc72bcf9cf4750f965fae038534a19603c9f29a9a
MD5 38632ef7e1fcd7aae3ae3d7a2f158e03
SHA1 d1a2f8a957f1d5d5bfd3c1cb791163dfd1dd6293
SHA512 f25081ba7f6d18e0adc264d3a362f191557b03a4a65080674ecbe5725ca09fe7ff38a225e9f7bb701ef8d6d6c0b555f330c46789f7a6f4d1c759000ba5ddfecd
SSDEEP 192:FRhcBzvPE4kd2tv7MF+pAPRp2zU0wfK9HHsb+WNi+PCZwW2BH2zBMva4kVyIsnAC:FRhmzvs0NgoUXK11w0j2d2zB4aDe
TLSH
T13852B56FBD10297B5CCBC22AF926B727D7F5102161D42E84EAFD8A2C05E76CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4954534fbb4ee40a93b3447cc40ab6422697e75fdeb701f9128c1000eaa0fa55
MD5 aaefa3dec0d66cb2bd55b89a0308375c
SHA1 a72ff3a0b7ab58b5864eee0ede5cc390187e0058
SHA512 5b2f5a449e8b0c8db9697937826344e641b0880c011a5a52326699d71502957bb03fa0011804d75eeee2a0622ec2fe3e6517837a8732e6f518052bf1f38f4c4a
SSDEEP 192:kRhcBzvPE4kdnZv7MF+pAPRp2z10wtlPK9HHsb+WNxirJ9gu+rRWsH2zBMva4TVo:kRhmzvsx5goUXxb1weD4Wa2zB4aGE
TLSH
T13B52B66FF9102A7B5CCAC22AF9267717D3F5102261C42E84EAFDCA2C15E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ec297f1890b9131cf0bf2f02bb4fc0bdec7eeb04b30b1b604f60f22b4f84ee80
MD5 d079dfc0873704d6504954530957bcb6
SHA1 38c0d71cefec65a93c2e834f18cf557a58d772a4
SHA512 7f932491549fefb5ab4e20410db3fd93edc0883eb95d37b44e43c222bf32b21cc1c62a995d8f1778eee48b0ff5bd2314fee06b73628a315ec91192feb3859d5e
SSDEEP 192:kRhcBzvPE4kdrZv7MF+pAPRp2z10wRolPK9HHsb+WNpNirJmUKzgu+rRWjH2zBMy:kRhmzvsB5goUXxe1wwkp4WT2zB4aGE
TLSH
T17C62D76FF920597B5DCAC22AF926B717D3F4112261C42E80EAFDCA1C15E76CD2213407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 f08ceb3f3d6afad5d10eeaef1ecef055635ebd164346f7cfc4c56ff208f52dfc
MD5 767fb6041ba55ba11e9390abba0c04e0
SHA1 3ed463cf4368c4cbe7a2235a5faeb2051f32d128
SHA512 f465693199cc8e6883f9abad028add5d8cc55ea6980ed36209f48c1df05b3347eb58724e5d0e0aa1451cbdff808c637b1b415a9a1cc4d07ad4ab878eef856425
TLSH
T18EB0124082019101C00306F415426488B1189F30B70B570243E06AA2CC352508114150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592958.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592958.TMP
Size 96B
SHA256 54bd3b405b8553377efe20c5fa3f6f8519a7456c474b8abc6368c7521885d2de
MD5 200cb676ee3c46b667f4244e051548c4
SHA1 db37cd1020ce201e7fc3913829cfe67ff962943e
SHA512 f7ef5721a5ffe1e82fecf98b81183941c12c6065521942064cd65c554f38100a460bbd64793711f6666c8b3f936901b0d5fc28809852e5b34df3dfa804586d55
TLSH
T1ECB02202C00322A2C00203B02CE0A2E8302CCF30C203020282E03A23CC282A082202B0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 e4a46c0bdf3533adf3f51750bf473a6319e997606ffd686bb364ef4a46891d82
MD5 6145d1cbd6e386aafaea50b22e9dae02
SHA1 1a68fac8804656cb12b415e2129a0241f2eae256
SHA512 4f27e5d4bcd7a81ace969b468eb6aa452886ccd80e01313b130aaebb3b33cacebeed4cb3ff8f6515f239cc80b4e20941bec6501123ccf62212d9cbdaa24370a1
TLSH
T145B0022AC6844513C97C0BB033D74889B3369CB0178693B740F46168A757EA66377A26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 5a2655f6259259cebf564d8852ee0ac2e90cf42f0caa061b963334c33fab6180
MD5 7f9a037ec004c8413708cd63dac4f662
SHA1 5cbb74ba801982868f509733296f3fbcc31f6d13
SHA512 a0e564ca4dbbe54b9c4d6ca1100a9319e219777a200c2c34031e95bcaf189a9eacc81a1bd05c978ced49d4cef3bdbad0901eab637055127116771195f8cdbe19
TLSH
T145B0123045902702C81C47F006D7404812148C720301438300D0048C4845DD10027521
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 95fd14c5a2da1b97daf71e26ec4edc52d61c73f9caee7e5a835dfdeb2266eb7d
MD5 f042c9628622070869393fe4890dcd46
SHA1 f4e435f38ec552d37625bcc79995ddac506ba641
SHA512 60914cb30622b027a6c14fb014bab953a77b9e0222cca437c04c7009220edbc5d5ec7c82633b3ac375a616987bc76148acb37e209f3e60f01f6a37e34e773926
SSDEEP 3072:/qGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/tm7Rkm1tYpBeh2BAoM
TLSH
T1B4C312275E75E9375878BB0EB08E0B1F1EF14AA6D930DA92C8D85B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 23fb3d6777ab31928215c72f06a326922fc6aab92e2533de7f53da74072f583e
MD5 a5773e0e8867649596844b9bcdb77753
SHA1 710b2ff6887b68cfa599efbd67130944ad5b4e0e
SHA512 f1a349b9fe487c33c3d91e57c3e807430e667f44aff2f199539030fe69eee87b339749cd773daba25c8bce665842ddb681bdb74a2f36bac3cabbf3b2de90ddf8
SSDEEP 3072:kpGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:kIm7Rkm1tYpBeh2BAoM
TLSH
T106C3122B6D74ED3759B9BB1EB04E0B1F1EF14AA6D820DA91C8D85B0433F97CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 833b1e9c47c268a011adc61d170916831b17ed8d532a91bb81455afc588bca45
MD5 c9edaeb361d5cb822b84ebf15ba0454b
SHA1 322cc194ff6dd073431617ee1e7c8380cb0bfa54
SHA512 8506fbed4ada3263976238e5543ebf86c52ecb1cd97d8f656ae56328f14c2f594becb7e7dfc96604ec9efb4d34a7bb8da652d8e7594d1035667040999d33e2c0
SSDEEP 3072:/BGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/Qm7Rkm1tYpBeh2BAoM
TLSH
T18FC3023B6D74A83759B9BB0EB08E0A1F1EF14AA7D930DA52C8D85B0433F97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 c67f5f23e1f5b283636df5bf7f9c0433217083c0fc30dd373dbfc6d9df876617
MD5 db677dda55348d3083fcdc2736ace2ab
SHA1 a400be3570b5ab104e7576c46ce790c983a0eacc
SHA512 17a34710e7002c1766a917930750b46e1ba4676c82d35ba2cea87bdc9fb99e72c9823213bb49891c56589d9a03cc1660f66d037a51e4951cb7cc8b9cc064c176
SSDEEP 3072:/BGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/Qm7Rkm1tYpBeh2BAoM
TLSH
T1EDC3123B6D74A83759B9BB0EB08E0A1F1EF14AA7D920DA52C8D85B0433F97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 ada14a5ce5a174a5697dd82c1526723a87cf781d7ca06f3c0d319c152523e2a7
MD5 b042a9dd9abc1cab03dbe6bb00c1e388
SHA1 6ad1bcbf34a5e2b2f494bb4277eaf8809da17d03
SHA512 d39b5da15154ec8c9840b44a2fc05f4ddd6b086a70b6261a64d4ae3665c1cac4914abb1bb54bff1016f99546d4feab734c184657784c22742140ab31b828baee
SSDEEP 3:MsEllllkEthXllkl2zE/lVj3:/M/xT02zK3
TLSH
T1B74402047B800446D51055305063835013B0E4100656574728554522AC867600D08000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download