hxxps://www[.]picturetopeople[.]org/text_generator/cool-text-generator[.]html#silver

Resubmissions

20/08/2026, 09:18

260820-k9y3sshm7w3

20/08/2026, 09:17

260820-k9df4acd793

20/08/2026, 09:15

260820-k8d18swxcz3

Analysis

user interaction
yes
max time kernel
899s
max time network
885s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
20/08/2026, 09:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.picturetopeople.org/text_generator/cool-text-generator.html#silver
Sample260820-k9df4acd79

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4324	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316910935464006"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
384	chrome.exe
384	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 37 IoCs

pid	Process
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe
Token: SeShutdownPrivilege	4300	chrome.exe
Token: SeCreatePagefilePrivilege	4300	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe
4300	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 3328	4300	chrome.exe	82
PID 4300 wrote to memory of 2484	4300	chrome.exe	83
PID 4300 wrote to memory of 4324	4300	chrome.exe	84
PID 4300 wrote to memory of 2484	4300	chrome.exe	83
PID 4300 wrote to memory of 1384	4300	chrome.exe	85
PID 4300 wrote to memory of 1384	4300	chrome.exe	85
PID 4300 wrote to memory of 3908	4300	chrome.exe	87
PID 4300 wrote to memory of 3412	4300	chrome.exe	88
PID 4300 wrote to memory of 3908	4300	chrome.exe	87
PID 4300 wrote to memory of 3412	4300	chrome.exe	88
PID 4300 wrote to memory of 2436	4300	chrome.exe	89
PID 4300 wrote to memory of 2436	4300	chrome.exe	89
PID 4300 wrote to memory of 3360	4300	chrome.exe	91
PID 4300 wrote to memory of 4996	4300	chrome.exe	94
PID 4300 wrote to memory of 4996	4300	chrome.exe	94
PID 4300 wrote to memory of 1836	4300	chrome.exe	95
PID 4300 wrote to memory of 1836	4300	chrome.exe	95
PID 4300 wrote to memory of 4196	4300	chrome.exe	97
PID 4300 wrote to memory of 1360	4300	chrome.exe	98
PID 4300 wrote to memory of 1300	4300	chrome.exe	99
PID 4300 wrote to memory of 1392	4300	chrome.exe	104
PID 4300 wrote to memory of 1392	4300	chrome.exe	104
PID 4300 wrote to memory of 812	4300	chrome.exe	107
PID 4300 wrote to memory of 812	4300	chrome.exe	107
PID 4300 wrote to memory of 1736	4300	chrome.exe	108
PID 4300 wrote to memory of 1736	4300	chrome.exe	108
PID 4300 wrote to memory of 4692	4300	chrome.exe	109
PID 4300 wrote to memory of 4692	4300	chrome.exe	109
PID 4300 wrote to memory of 636	4300	chrome.exe	110
PID 4300 wrote to memory of 636	4300	chrome.exe	110
PID 4300 wrote to memory of 2368	4300	chrome.exe	111
PID 4300 wrote to memory of 2368	4300	chrome.exe	111
PID 4300 wrote to memory of 1484	4300	chrome.exe	112
PID 4300 wrote to memory of 1484	4300	chrome.exe	112
PID 4300 wrote to memory of 1204	4300	chrome.exe	114
PID 4300 wrote to memory of 1204	4300	chrome.exe	114
PID 4300 wrote to memory of 384	4300	chrome.exe	115
PID 4300 wrote to memory of 3760	4300	chrome.exe	116
PID 4300 wrote to memory of 3760	4300	chrome.exe	116
PID 4300 wrote to memory of 4528	4300	chrome.exe	117
PID 4300 wrote to memory of 4528	4300	chrome.exe	117
PID 4300 wrote to memory of 2488	4300	chrome.exe	118
PID 4300 wrote to memory of 2488	4300	chrome.exe	118
PID 4300 wrote to memory of 1248	4300	chrome.exe	119
PID 4300 wrote to memory of 1248	4300	chrome.exe	119
PID 4300 wrote to memory of 1520	4300	chrome.exe	120
PID 4300 wrote to memory of 1520	4300	chrome.exe	120
PID 4300 wrote to memory of 3524	4300	chrome.exe	121
PID 4300 wrote to memory of 3524	4300	chrome.exe	121
PID 4300 wrote to memory of 4280	4300	chrome.exe	122
PID 4300 wrote to memory of 4280	4300	chrome.exe	122
PID 4300 wrote to memory of 4284	4300	chrome.exe	123
PID 4300 wrote to memory of 4284	4300	chrome.exe	123
PID 4300 wrote to memory of 4224	4300	chrome.exe	124
PID 4300 wrote to memory of 4224	4300	chrome.exe	124
PID 4300 wrote to memory of 4216	4300	chrome.exe	125
PID 4300 wrote to memory of 4216	4300	chrome.exe	125
PID 4300 wrote to memory of 5020	4300	chrome.exe	126
PID 4300 wrote to memory of 5020	4300	chrome.exe	126
PID 4300 wrote to memory of 3808	4300	chrome.exe	127
PID 4300 wrote to memory of 3808	4300	chrome.exe	127
PID 4300 wrote to memory of 1064	4300	chrome.exe	128
PID 4300 wrote to memory of 1064	4300	chrome.exe	128
PID 4300 wrote to memory of 5028	4300	chrome.exe	129

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.picturetopeople.org/text_generator/cool-text-generator.html#silver
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7fff143fc728,0x7fff143fc734,0x7fff143fc740
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,12108831322376255802,10276373893225606467,262144 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1852 /prefetch:2
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1612,i,2515560606516634511,17877756768647005383,524288 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,6780597618112587271,15682414418281112125,524288 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:1384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3192,i,12218986104554190521,17874159588976022255,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3196,i,5554828928243164108,10307045353192895095,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4300,i,12845248178826929745,3004782696633080146,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5268,i,255149322011244374,13884724182850458567,524288 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5524,i,10764278012664797399,17182352850781566623,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3268,i,4346617195431520974,7886040784517964963,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3060 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4828,i,7207254610079980596,14929082091021392781,524288 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3932 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5672,i,11472070344434511724,9212315300567655508,524288 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:1360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,17133347955148939674,950808685673074517,524288 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:1300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5552,i,4678311636223375759,2594905282452058077,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:1392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3456,i,8400635129670141384,3074208927490406736,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5520,i,2153399990806830098,8095122198865294089,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4296,i,15602975479125711444,6061199491136170002,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5752,i,15377768094478652867,5562003182446054312,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3716,i,17663851185524334182,2162564541925396383,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3408,i,17345633841269861772,16195579657473786658,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4360 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4300,i,58013253821490802,2135876744341716869,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4352,i,15754057835327423164,4352162600687022331,262144 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4384,i,836846318881417734,3204206060027794427,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:3760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5644,i,7948280222632030376,15512516084321060480,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1268 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4420,i,11395196498113852061,11002812706848768377,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=1264,i,5311521531975155832,8255134426021473750,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4376 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4600,i,9729960755490247402,1475258000357289509,524288 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3424 /prefetch:8
  2⤵
  PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5744,i,7389020253769845073,3129002284617652493,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=4348,i,17628377219215115859,11544428540350448563,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=1548,i,8874758821299535426,16822022539689913731,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=3932,i,5840668942006703541,5907543661338756697,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=5468,i,12117717021054402084,12217995441880740955,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=4352,i,12160112815352857448,10127238466220839929,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6112,i,17008831254183252799,11368011272989611171,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=3288,i,1337254908087563277,8204637018401252620,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=5768,i,1086291055240075176,3351811767714987929,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=3280,i,5384338663671796378,9781055505159133579,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=5768,i,5224532078249857411,15327327627331806975,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=4376,i,12857238442757390993,10533652258910335262,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=5552,i,10096552030393723621,2154756412480152571,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=4376,i,8114601399945628154,2369498499108187741,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=3468,i,9280826800865885104,2667916491552197527,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=5900,i,11550927506993354896,13954055448320929149,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=5860,i,12236494857648748153,12977755750787344447,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=5468,i,7384689503660994858,3638147452731686230,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=2624,i,216739573085566497,13343300467012206407,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=4344,i,17564323402208837002,1175810098413763270,2097152 --field-trial-handle=1868,i,5883077893812715479,12877663481098862815,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3920 /prefetch:1
  2⤵
  PID:4540

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3160

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5980bc7f6564edb4daa7b84c01a3c41127fb91954e7b10470897d2e719319242
MD5 dfd653240f7123d99af8f88bd72be48a
SHA1 5e4e23c7b3c812c0e9e29ad05af2ef318bf4deca
SHA512 44c31c0152002afe5dee7e2bfcc2dfbe1cdb134aa350bfb4680683b49651e8a1f7ae415775e07ecf962e5c3e054ffb373a0dc71608709d9e923a508e7ece4de0
TLSH
T17DE02B69DC31AD3718FC0B6D50684647E71113662645492F7E3C420C8FB423645C9D2C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1ba5345e465dbef2b460819d74dd09fc1b90faf33a43f509aea054012caa3a59
MD5 0c52b230ae901a9c35d7f9b2af7bce70
SHA1 f514b8bd635281add6968dda7689bd354a4fd0ec
SHA512 fc3e651c71b630c90aa346f5d5cc078feb5975f652962d6b3e0509889840ab482b01160dd82246ef7d0538bfb5d41697f1d35b3e9f1b8d4355f829155c281d8d
TLSH
T1E0419FF793F4997D861192E4DA15AE1FCE6D0524131C3CA688D4AE2B43F2872D10179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 14f123f6a87a51b66405b13d53ba62ad4587a660569978fc532009f6b0c83d8d
MD5 c7747cec154ad9d00cc733a4cd76930c
SHA1 75bd7886f809a5b6d469f9920fa460e5136b45ae
SHA512 38e59f76a1c74c832acc3581970025013120a9cafee218f674bf32713f922c10c4adabb3c4dd49f07c2efbc9e0dca94506417ba1ad989c86cba63befb76c5836
TLSH
T19E41BEF793B4957D8A0096F4EB15AE1FCE6D0524032C3CA688D4AE2B83F2972D14078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 fcfa3186624efe4ea7b6334ddccc74d41e722cbed6d984d312d7b799de271676
MD5 f073b714f628cb2721fbc7e95d2d6b8d
SHA1 d3dd2482ff65c71423f3efb1e84778841964689d
SHA512 51e6578506edf3ec23c2d2268fe4ac3f975ebb4326ed95fac8e1c8afc2767f89e1b77c099c1bfeb67b8f975b91d09836118d52bb5e17b1822a0048821b538f59
TLSH
T1D5F05067976E782761B959B75D04BC0669F56831018158E4CEAA427DF0865E31F02417
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6ed7af15fdb8ad68e174be03c8f696ac991921fe3085f1c37097c1ac1e426ec6
MD5 c78b39371b652970d0f7212857086ff5
SHA1 af3583e566c977f141b3758d523e9860f0108622
SHA512 400473c9de7e189bce7730e16544a243cc139a488561e884de346e5b6f05338719852e59bbf6e9f9ac9ddfd74ee3fea79d309cb3cc0e64c3f5de020ca5ef22e9
SSDEEP 192:ARfP9OLe1CbWv7YnpAPRp2s9oHsb+WNnCVPrY0QBkwvVyIsnAUge:ARfPE3bikUXTuwYP802pe
TLSH
T1EC42A82EBD10693B5CDBD22AFE627B53E7F5102121912E88E6FC8D2C15EB5ED2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 66a3af1ebd4536b25088e142f858fe17cbb683a4b9a639e412f82451370679cb
MD5 d815b0d530d9e825d9ab4a3c8e80a507
SHA1 09b598583ec54e2705bfc7d642945a603fc3726e
SHA512 842263b9401982a52e3caf1701e70a1104068f33cce40b2ca93b8fd7048114a88b09ec2212881a3aaa4765c41ec3c0cc3d8f5a032b4c0a20c57b47246bdbde1c
SSDEEP 192:ARfP9OLe1CGWv7Ynp0PRpsgM9oHsb+WNnCVPlY0QBkwsVyIsnAUgE:ARfPE3GikcXsuwYP+02oE
TLSH
T13352A72EBD10693B5CDAD62AFA217B53E7F5102121912F88E6FC8D2C25EB5ED2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 43635805c9ac7d6eaec2e961947f5a9501fca046ac119c555972106f4f298bc8
MD5 355ea663c7e0df15192a6e71e0d67eba
SHA1 d6e3a2a29832071a55c20401227409be7b9b3a3e
SHA512 ec83ded606744bf3de599217755ea0c3a872dc8e9212b875bc154bbef43f048367afb51fb9318737f452e26904e8962b58a680f21ca48225a97e7418fae69102
SSDEEP 192:ARfPwOLe1CGWv7Ynp0PRpsgP89oHsb+WNnCVPlY0QBkwsVyIsnAUgE:ARfP73GikcXv8uwYP+02oE
TLSH
T10E52A72EBD10693B5CDAD62AFA217B53E7F5102121912F88E6FC8D2C25EB5ED2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c33cafc7e030c00d87f3b501426530ae52b832b04acf78df17e2d44cc21db1e9
MD5 1cb683eeaec5ca03121505d4954fb9b4
SHA1 035229d09f876b14c7a69cda30e12109ddf04841
SHA512 4c3cfe0073e41bce2da52c00e4f953e0fd4c188c7bc54cf413622889ff8f2e6b0b0982a5223e1180f7a2041cea09546c31008357d079675ae7f238d21ecd24b1
SSDEEP 192:ARfP9OLe1CbWv7YnpAPRp2gc9oHsb+WNnCVPAY0QBkwAVyIsnAUgE:ARfPE3bikUXauwYPh02kE
TLSH
T1CD42B82EBD10693B5CCBD22AFA227B53E7F5102121911F88E6FC8D2C25EB5ED2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c30962e6cfe8d8c29a6b3a0e4192809e0efce1b7940f8dd6bf357960f786bc00
MD5 277deb40b168ff2dad6227f9efe8189f
SHA1 8055c90b77c49b653340d1580fb3559a87e8673b
SHA512 4106b026c3f6d63030c6fef5d43979b3a14a84e3c9217246b38ddcda4eac2c4b293b5042b40681e7bb074da1885754d7e6a98329fd6028e4767f107ca072a147
SSDEEP 192:ARfPwOLe1CwWv7Ynp0PRpsge9oHsb+WNnCVPlY0QBkwsVyIsnAUgE:ARfP73wikcX+uwYP+02oE
TLSH
T17052B72EBD10693B5CDBD62AFA217B53E7F5102121912F88E6FC8D2C25EB5ED2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 fa60cf334e95dec1944da86c93f2c13426443c7037732c918ff564873fbfd5c0
MD5 e6921ccee21ee4afc5ad388838e8fbca
SHA1 7bda3f97991ea32b1c9de940b169d18ff9335e96
SHA512 ee110f741523a5b9d406e69f18b18c0ccbddd24bb3bc2da13f09b6313f0c675dba508befabefe0a72a2f6ff7818dee5b66ce82b01e62c210c8eacd6420ae1f2b
SSDEEP 192:ARfPwOLe1CN5Wv7Ynp0PRpsgR9oHsb+WNnCVPlY0QBkwsVyIsnAUgE:ARfP73N5ikcXxuwYP+02oE
TLSH
T15752A72EBD10693B5CDAD62AFA217B53E7F5102121912E88E6FC8D2C25EB5ED2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 3f9b2ff6733d6ea176b7f87b97bfc00f43ce5ae2fc7db0bf43e5673b611d2981
MD5 a8d99a89af5bdc4d36bda0a26f9a1835
SHA1 eb4f61f12dbd8bc006b66b5635e820349ee33d41
SHA512 c99be19c76c0ad1a08682264926ddb11a255acc2f228d7157f1abd1d4a7df9d1f680e336435cd220b8f27397dfc7a98def0531d0590cc20f63719683618de399
SSDEEP 384:GYjax7KxkXqKf/pUZNCgVLH2Hfgslzh7pLuLcSjoJXODap+ErU3+pHG2xw4483G:Gsax7KxkXqKf/pUZNCgVLH2HfgsVh7p2
TLSH
T15272F967AC48DD370F94CA8CDC277F4FADB9024B65ED846442FA982903D5ADA11062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 8e5ae1853ac9173d2348a967ad1ce665b03447b3dad2ad4296a6016aa9537794
MD5 7f197e4aec0dbb138130d1965d168a72
SHA1 a86eddc419eba9be952e1e139d535bd087f9226c
SHA512 ef408ec0e287c08640b189fc7eef08247aad06de7a63c9881018e6ea4b316b27d44d176c6df628e80c948fde677d3688a1f16b489f02c264c2bce381a4fb425d
TLSH
T1B9B0120184416146C04202B4258214CC71789F19D60B1B1943F06DA2C83976182241D0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586d4b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586d4b.TMP
Size 96B
SHA256 7ede050271785b5c355e9dfa9deaff9a22ff27c3ae32ac47a14394c89a3d6d88
MD5 49d26d1cd10739e403bb6f93907fdbf6
SHA1 2093b0b11db865e29795cf9b3afcaadbd8d9d810
SHA512 598e294a32a3d05bb1519b864e8b4f8dd321ec8ab7dbb5f29c65bfecd72f99a71c1278592665c8474589c58d07acb7710515690afc0b37ff8107d763ba740fe6
TLSH
T10AB00255C50A6322D48213F029E5A5DD7164DF39C7031322E2F03BA6ED7567585351A4
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 62e25dd5522cba6ac5709794afc98d29b8386f243f82c2d7c96ca16abd9d5e03
MD5 1865b2e1e5d1f7cc9df0acff65e6adcc
SHA1 6143f19ebb4010dfff0d40642669202dbe6390d6
SHA512 15ba5e38b5f429e08f2eae8bbf9ee4a9a8b7873a849e3169df3c3df43b7a20bef63f4f1981b1bb7e4fad2ca0fef905f988bf58d082e0fb6c85341c5ce1494987
SSDEEP 3072:5NOajfaNqkTzjzEndotdvR01Ad4DzaDtBKU7f2GuO48mK0v81N:zxjSNqOjQC362d4YtkMf2GuP8mKm+N
TLSH
T1B5C302E0CAF1CC9BC66542CDE0355E8A49D08DA4E945EA8673DA3F5B342F1CE7A43531
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 795fec09ecf48327e2c70bf3cf9145dbcbee82d3d6c7e1b230c55a3a58a2036c
MD5 eae5e9e60377e6195e0e202af14dc9b3
SHA1 6db5c6f9f9ce4d6771be7a8c2167b5364d8532c3
SHA512 9f308c1de7876545785f5ede596538b5c27c02321b89e194fce6f79af380a433dc5c9fbc10fe1b4a8af1d2b4a8f6f7c55dd03241e5d3fe8cf85daf274b5330d5
SSDEEP 3072:NNOajfaNqkTzjzEndotdvR01Ad4DzaDtBKU7f2GuO48mK0v81N:PxjSNqOjQC362d4YtkMf2GuP8mKm+N
TLSH
T18BC302D0CAF1CC9BC66542CDE0355E8A49D08DA4E945EA8A73DA3F5B242F1CE7A43531
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 74642dafa185afbee7e6d3603b27e371093b61496be746ee8f8dca499c2c932c
MD5 4d349d92334506c6404a2c15a0e66a0a
SHA1 e1dc47554f1c4af1917ef7ab3c15b6f6641d45b2
SHA512 6f2157269fc80a0e17d2cdbb27e8563b201fc3594ea7314096a71a4bfc90c669f8fa6a5d9347fb30aba404444942d2ed2266bc899d9e1ca71e84d1122831825d
SSDEEP 3072:MkajfaNqkTzjzEndotdvR01Ad4DzaDtBKU7f2GuO48mK0v81N:EjSNqOjQC362d4YtkMf2GuP8mKm+N
TLSH
T10FC302D0CBF1CC9BC26542DDE4355ACB89D08DA4E945EA8663DA3B6B342F1CA7B43431
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 ccea19ddf31da23529d9a68680cd430fa3686060d93539ced5424c8569334a5e
MD5 419c1ff3dfa0e6122c6031bd676898fc
SHA1 53e96fce6825012fb00b881f16b5287ef71aac8d
SHA512 3d600e6623b179bd08d15702ee7cce08c2a6cc61186e17a75ce05761a7a0aad71fe05b79960a9953df84027fce4f6e0bae57de21fbc060903d823ed38f4b568f
SSDEEP 3072:zbajfaNqkTzjzEndotdvR01Ad4DzaDtBKU7f2GuO48mK0v81N:ajSNqOjQC362d4YtkMf2GuP8mKm+N
TLSH
T17CC302D1CBF1CC9BC22542CDE4355B9649D08DA4E945EA8663DA3B5B382F1CA7E03531
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ce6e28e0480c0c5146b0cfc20176819a3f89537a106ca49650415b4fe699d116
MD5 0ce69a7aa0d3e95585aa1d0ec5208a04
SHA1 f56952fc3120d62b4a6c9a9b49ff212ec260c92c
SHA512 a9d480ef24ee7a0a2406af32bc7ad15a04dd3321d7febe801d29913fb41a07a91ad86cf3e24c29f8365826bfe4219c5b25577a3134b6378bd56ef2fa1cc43844
SSDEEP 3072:9kajfaNqkTzjzEndotdvR01Ad4DzaDtBKU7f2GuO48mK0v81N:tjSNqOjQC362d4YtkMf2GuP8mKm+N
TLSH
T173C312D0CBF1CC9BC26542DDE4355ACB89D08DA4E945EA8663DA3B5B342F1CA7B43431
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download