hxxps://emu8086-microprocessor-emulator[.]en[.]softonic[.]com/download?ex=MATE-1718[.]1&rex=true

Analysis

user interaction
yes
max time kernel
108s
max time network
110s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 22:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://emu8086-microprocessor-emulator.en.softonic.com/download?ex=MATE-1718.1&rex=true
Sample260930-2hp49atdmc

Score

7^/10

discovery installer motw phishing ransomware

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000\Control Panel\International\Geo\Nation	setup.tmp

Executes dropped EXE 2 IoCs

pid	Process
5224	setup.tmp
1820	emu8086.exe

Loads dropped DLL 8 IoCs

pid	Process
6236	regsvr32.exe
2984	regsvr32.exe
1820	emu8086.exe
1820	emu8086.exe
1820	emu8086.exe
1820	emu8086.exe
1820	emu8086.exe
1820	emu8086.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
447	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	5344	chrome.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\is-TP2T8.tmp	setup.tmp
File created	C:\Windows\SysWOW64\is-R1JGN.tmp	setup.tmp

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NOTEPAD.EXE
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	emu8086.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup.tmp

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5344	chrome.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/2928-538-0x0000000000400000-0x000000000042F000-memory.dmp	innosetup
behavioral1/memory/2928-1232-0x0000000000400000-0x000000000042F000-memory.dmp	innosetup
behavioral1/memory/2928-1269-0x0000000000400000-0x000000000042F000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\InprocServer32\ = "C:\\Windows\\SysWow64\\Mscomctl.ocx"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{66833FED-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}\ = "IStatusBar"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ECEDB958-AC41-11D2-AB20-000000000000}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{46763EE0-CAB2-11CE-8C20-00AA0051E5D4}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{66833FE5-8583-11D1-B16A-00C0F0283628}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{35053A21-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F053-858B-11D1-B16A-00C0F0283628}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD9DA665-8594-11D1-B16A-00C0F0283628}\ = "DImageComboEvents"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0BE35204-8F91-11CE-9DE3-00AA004BB851}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{66833FED-8583-11D1-B16A-00C0F0283628}\ = "IButtonMenu"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8E3867AA-8586-11D1-B16A-00C0F0283628}\ = "IPanel"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C74190B7-8589-11D1-B16A-00C0F0283628}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F049-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD9DA665-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ECEDB958-AC41-11D2-AB20-000000000000}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\VersionIndependentProgID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\ToolboxBitmap32	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}\TypeLib\Version = "2.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BDD1F04E-858B-11D1-B16A-00C0F0283628}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2C247F24-8591-11D1-B16A-00C0F0283628}\TypeLib\Version = "2.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C4D651F1-7697-11D1-A1E9-00A0C90F2731}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B3E7C340-EF97-11CE-9BC9-00AA00608E01}\NumMethods	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.ImageComboCtl\CLSID\ = "{DD9DA666-8594-11D1-B16A-00C0F0283628}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{66833FED-8583-11D1-B16A-00C0F0283628}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C74190B8-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2C247F24-8591-11D1-B16A-00C0F0283628}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A4C46780-499F-101B-BB78-00AA00383CBB}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\Version\ = "2.0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.Slider\ = "Microsoft Slider Control, version 6.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\Control	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{ECEDB944-AC41-11d2-AB20-000000000000}\InprocServer32\ = "C:\\Windows\\SysWow64\\cmax20.ocx"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ECEDB95A-AC41-11D2-AB20-000000000000}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\VersionIndependentProgID\ = "MSComctlLib.ListViewCtrl"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\Version	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE40-8596-11D1-B16A-00C0F0283628}\InprocServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{66833FE5-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{66833FE7-8583-11D1-B16A-00C0F0283628}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{ECEDB945-AC41-11d2-AB20-000000000000}\ProgID\ = "CodeMax.Language"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ECEDB95A-AC41-11D2-AB20-000000000000}\TypeLib\ = "{ECEDB943-AC41-11D2-AB20-000000000000}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8284B8A2-A8A8-11D1-A3D2-00A0C90AEA82}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{742B0E01-14E6-101B-914E-00AA00300CAB}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.ListViewCtrl.2\CLSID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\TypeLib\ = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F08DF952-8592-11D1-B16A-00C0F0283628}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{ECEDB948-AC41-11d2-AB20-000000000000}\ = "Globals Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ECEDB958-AC41-11D2-AB20-000000000000}\TypeLib\ = "{ECEDB943-AC41-11D2-AB20-000000000000}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C4D651F0-7697-11D1-A1E9-00A0C90F2731}\ = "EventParameter"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E43FD401-8715-11D1-98E7-00A0C9702442}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9BFBBC02-EFF1-101A-84ED-00AA00341D07}	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE32-8596-11D1-B16A-00C0F0283628}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{35053A21-8589-11D1-B16A-00C0F0283628}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C8A3DC00-8593-11D1-B16A-00C0F0283628}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{ECEDB941-AC41-11d2-AB20-000000000000}\ToolboxBitmap32\ = "C:\\Windows\\SysWow64\\cmax20.ocx, 2"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3AF24290-0C96-11CE-A0CF-00AA00600AB8}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BDD1F049-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BDD1F053-858B-11D1-B16A-00C0F0283628}\ = "IListSubItems"	regsvr32.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
5380	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe
Token: SeShutdownPrivilege	6136	chrome.exe
Token: SeCreatePagefilePrivilege	6136	chrome.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
5224	setup.tmp

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe
6136	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1820	emu8086.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 6136 wrote to memory of 5256	6136	chrome.exe	84
PID 6136 wrote to memory of 3320	6136	chrome.exe	85
PID 6136 wrote to memory of 3320	6136	chrome.exe	85
PID 6136 wrote to memory of 5344	6136	chrome.exe	86
PID 6136 wrote to memory of 1720	6136	chrome.exe	87
PID 6136 wrote to memory of 1720	6136	chrome.exe	87
PID 6136 wrote to memory of 5840	6136	chrome.exe	89
PID 6136 wrote to memory of 1816	6136	chrome.exe	90
PID 6136 wrote to memory of 5840	6136	chrome.exe	89
PID 6136 wrote to memory of 1816	6136	chrome.exe	90
PID 6136 wrote to memory of 2032	6136	chrome.exe	91
PID 6136 wrote to memory of 2032	6136	chrome.exe	91
PID 6136 wrote to memory of 6096	6136	chrome.exe	92
PID 6136 wrote to memory of 6096	6136	chrome.exe	92
PID 6136 wrote to memory of 1116	6136	chrome.exe	93
PID 6136 wrote to memory of 1116	6136	chrome.exe	93
PID 6136 wrote to memory of 1868	6136	chrome.exe	95
PID 6136 wrote to memory of 1868	6136	chrome.exe	95
PID 6136 wrote to memory of 5520	6136	chrome.exe	102
PID 6136 wrote to memory of 5420	6136	chrome.exe	105
PID 6136 wrote to memory of 5420	6136	chrome.exe	105
PID 6136 wrote to memory of 1316	6136	chrome.exe	117
PID 6136 wrote to memory of 3108	6136	chrome.exe	118
PID 6136 wrote to memory of 5192	6136	chrome.exe	119
PID 6136 wrote to memory of 1168	6136	chrome.exe	121
PID 6136 wrote to memory of 1168	6136	chrome.exe	121
PID 6136 wrote to memory of 3748	6136	chrome.exe	122
PID 6136 wrote to memory of 3748	6136	chrome.exe	122
PID 6136 wrote to memory of 4044	6136	chrome.exe	123
PID 6136 wrote to memory of 4044	6136	chrome.exe	123
PID 6136 wrote to memory of 5744	6136	chrome.exe	124
PID 6136 wrote to memory of 5744	6136	chrome.exe	124
PID 6136 wrote to memory of 5872	6136	chrome.exe	125
PID 6136 wrote to memory of 5872	6136	chrome.exe	125
PID 6136 wrote to memory of 4656	6136	chrome.exe	126
PID 6136 wrote to memory of 4656	6136	chrome.exe	126
PID 6136 wrote to memory of 5556	6136	chrome.exe	128
PID 6136 wrote to memory of 5556	6136	chrome.exe	128
PID 6136 wrote to memory of 1076	6136	chrome.exe	129
PID 6136 wrote to memory of 1076	6136	chrome.exe	129
PID 6136 wrote to memory of 5752	6136	chrome.exe	130
PID 6136 wrote to memory of 5752	6136	chrome.exe	130
PID 6136 wrote to memory of 3988	6136	chrome.exe	131
PID 6136 wrote to memory of 3988	6136	chrome.exe	131
PID 6136 wrote to memory of 4464	6136	chrome.exe	133
PID 6136 wrote to memory of 3696	6136	chrome.exe	132
PID 6136 wrote to memory of 4464	6136	chrome.exe	133
PID 6136 wrote to memory of 3696	6136	chrome.exe	132
PID 6136 wrote to memory of 4052	6136	chrome.exe	134
PID 6136 wrote to memory of 4052	6136	chrome.exe	134
PID 6136 wrote to memory of 1264	6136	chrome.exe	135
PID 6136 wrote to memory of 1264	6136	chrome.exe	135
PID 6136 wrote to memory of 4832	6136	chrome.exe	136
PID 6136 wrote to memory of 4832	6136	chrome.exe	136
PID 6136 wrote to memory of 364	6136	chrome.exe	137
PID 6136 wrote to memory of 364	6136	chrome.exe	137
PID 6136 wrote to memory of 3640	6136	chrome.exe	138
PID 6136 wrote to memory of 3640	6136	chrome.exe	138
PID 6136 wrote to memory of 1496	6136	chrome.exe	141
PID 6136 wrote to memory of 5324	6136	chrome.exe	140
PID 6136 wrote to memory of 1496	6136	chrome.exe	141
PID 6136 wrote to memory of 5324	6136	chrome.exe	140
PID 6136 wrote to memory of 1476	6136	chrome.exe	139
PID 6136 wrote to memory of 1476	6136	chrome.exe	139

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://emu8086-microprocessor-emulator.en.softonic.com/download?ex=MATE-1718.1&rex=true
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff05d4c728,0x7fff05d4c734,0x7fff05d4c740
  2⤵
  PID:5256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1716,i,964501108222789657,17501928658716389,262144 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1932 /prefetch:2
  2⤵
  PID:3320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,17478072812374853746,9066835527016181866,524288 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  - System Time Discovery
  PID:5344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2356,i,13045782952000789264,9162056425650066722,524288 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2444 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,16847706758123289993,5505763337354077795,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3212,i,13824682947693558390,468649008943295395,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4448,i,9960742370986508681,6648387099165393100,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4464 /prefetch:2
  2⤵
  PID:2032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4704,i,10978766487687878147,3975720803115967902,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4868,i,619568288147492742,4730225581602033241,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5048,i,17125112427336927605,5001999842566122940,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3076 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3436,i,7048814047818153995,12580076003623243445,524288 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  PID:5520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5580,i,4369624053447709549,12573493360836914784,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:5420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4976,i,1390997195740928786,18086928204904911212,524288 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4956 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4940,i,13861416075838840615,5859571205837544266,524288 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5832,i,5011813220660013074,485488384022765218,524288 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4988,i,12761564413352474318,2331871746904684546,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4932,i,4193185969863940803,16120628210433800519,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6052,i,9852429916824200725,9767589742579525447,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6284,i,12207836319270909330,18428299579570382764,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6280 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6408,i,11460631584302190979,11327842980492114634,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6576,i,14149604514730536838,6217407633251866443,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6604 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6096,i,9741805356294478272,9643122804457775811,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6800,i,5809489765494683718,1105046568342570374,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:1076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6952,i,4128719491153131863,3492223158235240494,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:5752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=7084,i,3262650048638528721,9442218204795507354,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7108 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7156,i,6091070007745829140,13571170176959717765,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7272 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7300,i,13163541325336317931,8919169808139232090,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7304 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7548,i,14721851215499920489,1127291278199093634,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7664 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7784,i,16535081095723089390,3297922368959503920,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7628 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7768,i,13480773287166928697,14811641561422178900,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7948 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=8132,i,4170464612745604897,9590877150956813413,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4592 /prefetch:1
  2⤵
  PID:364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=8228,i,629393393825404599,14418297015432887282,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8236 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=8392,i,8747096935773587303,8322307391515686531,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8416 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8452,i,967177428413243315,10304583271624570140,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8492 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8404,i,6540974359011025369,9192851656441754331,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8456 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8756,i,6518443674908329873,18385380685773213392,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8840 /prefetch:1
  2⤵
  PID:6040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9000,i,17666181028978215941,7735261638208058486,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9004 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9032,i,4278612891337402896,3611392070535874377,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9048 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9080,i,11430837767703973730,14795502506575977664,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9084 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9224,i,3096820329313131589,2484474689287847282,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9236 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9380,i,16476307391822850538,8073931285587064409,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9384 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9736,i,10441194265040213386,2858932792340915161,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9752 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9884,i,10537295905673110374,7719108874915871031,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9900 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10040,i,315760565909146568,2222538416694385208,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10044 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10352,i,4371261702650539701,11193364022237879092,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9012 /prefetch:1
  2⤵
  PID:6384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=10076,i,15061716977746738763,9966039436494717618,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9404 /prefetch:1
  2⤵
  PID:6440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9776,i,18208197888087400891,6802085554529953116,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8744 /prefetch:1
  2⤵
  PID:6448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=6132,i,10052806558504942406,2769666475480024069,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10252 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=6116,i,18134549674705671642,2215106407868224998,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10272 /prefetch:1
  2⤵
  PID:6464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=10448,i,2667097399058613626,16811339338187371143,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:6472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=10484,i,2132010577828643595,191661984039877186,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10492 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=10664,i,3974548153560183669,9807273109904976714,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10992 /prefetch:1
  2⤵
  PID:6488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=9364,i,11972809481354102500,5210351685091869707,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11192 /prefetch:1
  2⤵
  PID:6824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=11288,i,14593231149010355217,15644073310621643932,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11304 /prefetch:1
  2⤵
  PID:6832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=11436,i,14631023691496952162,17026736913984895579,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11440 /prefetch:1
  2⤵
  PID:6840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=11568,i,10706043758393632950,17141949592034266049,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11604 /prefetch:1
  2⤵
  PID:6848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=11456,i,11240132427924734266,15914353068468872834,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11752 /prefetch:1
  2⤵
  PID:6856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=11884,i,2104809138061210200,9085318558120237530,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11896 /prefetch:1
  2⤵
  PID:6864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=11904,i,1595002187926209289,11003546908406238113,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12048 /prefetch:1
  2⤵
  PID:6872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=12180,i,11669050138282222807,9482665232514523241,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12192 /prefetch:1
  2⤵
  PID:6880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=12332,i,15902259807282782510,13550950221713751567,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12336 /prefetch:1
  2⤵
  PID:6888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=12480,i,10409289863360664433,738566144819098963,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12492 /prefetch:1
  2⤵
  PID:6896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=12644,i,12574800472592025427,12524503063766327666,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12512 /prefetch:1
  2⤵
  PID:6904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12776,i,2034556635953074296,1329950513434953879,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12784 /prefetch:1
  2⤵
  PID:6912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=12816,i,14021296357007877137,15439711766230691103,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12828 /prefetch:1
  2⤵
  PID:6920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=12852,i,7386247864876854590,4154753173032758831,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12880 /prefetch:1
  2⤵
  PID:6928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=13004,i,10993112056009044909,2958447385870202915,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13016 /prefetch:1
  2⤵
  PID:6936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=13060,i,6029128481418706018,16997276698200641966,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13068 /prefetch:1
  2⤵
  PID:6944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=13176,i,10117480037748251486,1256117658238582291,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13192 /prefetch:1
  2⤵
  PID:6952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=13344,i,1495501993346801384,5637199700870640824,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13352 /prefetch:1
  2⤵
  PID:6964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=13384,i,10089889766032131416,10338580845652932448,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13392 /prefetch:1
  2⤵
  PID:6972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=13904,i,6890228068490451100,13189165669573621015,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13920 /prefetch:1
  2⤵
  PID:6980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=13940,i,5825908137127271029,6892220474636589829,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14072 /prefetch:1
  2⤵
  PID:6988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=14080,i,13732753221055228317,11182573196280808413,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14224 /prefetch:1
  2⤵
  PID:6996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=14380,i,17066888171826871670,9827372509789793952,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14364 /prefetch:1
  2⤵
  PID:7004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=13408,i,13369780197022199179,2441581689593766784,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14356 /prefetch:1
  2⤵
  PID:8048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=6428,i,3445601136543855353,5140276996852760699,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6512 /prefetch:1
  2⤵
  PID:8056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=14936,i,8204791720228001339,8474683788492328980,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12632 /prefetch:1
  2⤵
  PID:8164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=14688,i,8754695947215724,2203037561389212647,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14628 /prefetch:1
  2⤵
  PID:8172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=6248,i,113152228507756612,16396645311433362955,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4476 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=4532,i,1094537329709307587,12557487476644135834,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9872 /prefetch:1
  2⤵
  PID:1304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=8228,i,18311891706651472977,6531887074511024373,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10564 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=10664,i,13754889084424691401,15151493521924995687,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=7772,i,12783865312446020756,9564195628326128883,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7560 /prefetch:1
  2⤵
  PID:8588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=13920,i,14715596751856325996,16561459990708410905,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13364 /prefetch:1
  2⤵
  PID:8788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=8388,i,5963164545055712097,3730408412040554505,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7576 /prefetch:1
  2⤵
  PID:8844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=8408,i,15709028682175430128,15974353478481695661,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8768 /prefetch:1
  2⤵
  PID:8852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=12704,i,8663883018538713441,5544850288526566479,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8776 /prefetch:1
  2⤵
  PID:8860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=12708,i,4405147099553534790,13536399307248619440,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11144 /prefetch:1
  2⤵
  PID:8868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=6124,i,15609121033345397106,811326012088449597,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12612 /prefetch:1
  2⤵
  PID:8876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=11060,i,18237949996043561231,2151638288353032306,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4436 /prefetch:1
  2⤵
  PID:9064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6584,i,9661794984341379518,4506241549418328104,524288 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10948 /prefetch:8
  2⤵
  PID:8344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=11824,i,10512522682600912175,757074582136502118,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11828 /prefetch:1
  2⤵
  PID:8440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=12840,i,9588231975978693392,3828245809726778612,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13168 /prefetch:1
  2⤵
  PID:8484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=14944,i,356485896358401267,16810345421767891934,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12268 /prefetch:1
  2⤵
  PID:8584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=12200,i,2907550645318036373,4504583143378035066,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12772 /prefetch:1
  2⤵
  PID:8680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=12972,i,9337596527359442587,1657467837667614188,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13980 /prefetch:1
  2⤵
  PID:8684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=13960,i,4453294593252889037,1226305268861779084,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14696 /prefetch:1
  2⤵
  PID:8696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=14264,i,18394800053968908028,7004942745089201768,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12824 /prefetch:1
  2⤵
  PID:6216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=10180,i,7647218175645668493,5110290559712590212,2097152 --field-trial-handle=1936,i,6296091984260021026,11245427678857815958,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14880 /prefetch:1
  2⤵
  PID:2688

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5836

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2884

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4264

C:\Users\Admin\AppData\Local\Temp\Temp1_emu8086v408.zip\setup.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_emu8086v408.zip\setup.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2928
- C:\Users\Admin\AppData\Local\Temp\is-IIPRG.tmp\setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-IIPRG.tmp\setup.tmp" /SL5="$3026A,2791895,141824,C:\Users\Admin\AppData\Local\Temp\Temp1_emu8086v408.zip\setup.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Drops file in System32 directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of FindShellTrayWindow
  PID:5224
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\cmax20.ocx"
    3⤵
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:6236
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\msvbvm60.dll"
    3⤵
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:3056
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\oleaut32.dll"
    3⤵
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:6232
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\olepro32.dll"
    3⤵
    - System Location Discovery: System Language Discovery
    PID:7980
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\comcat.dll"
    3⤵
    - System Location Discovery: System Language Discovery
    PID:6184
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\Mscomctl.ocx"
    3⤵
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:2984
- - C:\Windows\SysWOW64\NOTEPAD.EXE
    "C:\Windows\system32\NOTEPAD.EXE" C:\emu8086\ReadMe.txt
    3⤵
    - System Location Discovery: System Language Discovery
    - Opens file in notepad (likely ransom note)
    PID:5380

C:\emu8086\emu8086.exe
"C:\emu8086\emu8086.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 04a41f0a80fdc066e50c6442e36a366810c7fa8fb5974942b3f0f1c60a217d19
MD5 493a955afdbcbfceb46711489d89dd9b
SHA1 021cda8cc692b5ba4ec9a3a6a88792d6e36351fc
SHA512 5c007aeadc9b3ab8e8665bd24c1f55b94cf17ee54803ef9bf9d9ce90ce47d5ac054cbd387df1bb54a06d7274e00019d096bed1204ee5314d6a694c895f640561
TLSH
T188F02DA5D821AC371CFE0B1930A58B4AEB65132B2740485F3A3D411C8F7053B469595C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
Size 73KB
SHA256 49a03740a4e90cc48b80dfd321acedcb4f185737b0db715b9c457e166ec228c1
MD5 e22ea5d77c21dbe09b4aecfd78c99334
SHA1 75971b5376be038ee88b73915b0b95fd329643d3
SHA512 0ed60669feed190769b287ac60aeb0269de18a1010cc794473d9e5077e8cac29360ba45d2fc6fa4046243007632880752afd9de90632be551e9bd20ec258489f
SSDEEP 1536:BLgIdWkCEDXIwf1f1sPYNvx8l2bNrvB1xmDfmxVlXrJMl4:BRWkC+XI61sPevhtB6DfYfXrCe
TLSH
T11C7302B1CF3A4FE4F54A70B1EBAB01BC8169494D90A486A941057C1D3CC7ECACF2BA5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 720B
SHA256 8168c906f5d3c7a39b138a4c271f134de75d8ccba779c66f9eda6372d18a4d7a
MD5 6520164dcbcf2ab1c7f7eb70cff11b6f
SHA1 78fb06fa9ad9de75b7ac6bc30329006abd2cb366
SHA512 fa87d1f0df15b462c3471e555f3bfee76141f99721e1b99fa049d8a10ac8857961bead38e967d0be32608cf67d14383241b62c2b1901d4e68540aca5b3bd2dae
TLSH
T1E8012440D5E3100AEBC4C17154451C4A90703A0802C56B031AD760A8FCDF7957F0ABCF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 50c7e4b3ad9faae911166aa9505d734d3ff770109c79d973ad4620a16bd124df
MD5 0ecb9a3360daa25a28980d19395f191c
SHA1 3407eb4b77e7a6789766b8d68c269de583a39329
SHA512 45ed091db09f027c5f1fbd91bc761ae76c23f9205c0d24df44d2c627ab325c8670b388acb673fc9f1d11724b90ad874077fa18f3ecb86140838d1455aee03f68
TLSH
T1875197435AE36029DF98A83664821CD93071760500D79F071EEAACA4FDEF3D40AF9BC6
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 45KB
SHA256 c972044820f14afe28a5478f2d4b9f8065a58d1289b2d3b35a89eda74e8d3ab0
MD5 88516ba61709ffb95376122e6512d035
SHA1 20c76cb18efe47f938043e91e759c1af4c9aef82
SHA512 eb315978f47afc4686b9f1cf3ae8a0f4d7f2ca82c6829b3a123c33a77d7f756ac4a777a1633e51bdb205be5d5491d10e33bb207eee38c2e230b8f1628a88361a
SSDEEP 384:DQ0X52eIledsJAJEtlS9lBe9uwVLTef9ecqpS5BsVncCO9iEm+u7yeIRmOAAIBeG:WOlUgTGdBFA2fF41ejnYtbK
TLSH
T170238BF7C7F4A66DCD2262F46A663E1FCE6E0814971C786F89D87E1653E1430E201A1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ed5a3a2a2350d8eb749a62d7aa71594b09669faa2bf87db348fc9f5aa1cc0a16
MD5 610229b275280b4543bedeb38d96515f
SHA1 e9c59f099e59e73a8e2033b1581c56bc4c7c6fa9
SHA512 6410988bea621c4b0c8902b2e3bb1914b40b30bcf627ff9d31100c0d284c0bab09a9717519f5ea31485e866fecff09afb5cacfa45ea5b312e43eda6ae16af0cd
SSDEEP 192:kRH86mcVHEsFv78pAPRp27v29THsb+WNn1oXR+2eRR2neu6VyIsnAUge:kRH8zw14UXm2JwOs2ef2oe
TLSH
T15942932AED50787B5CDFC22AFA627667E7F5002160D02E84EAFC897C21E75CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4a4213ae3ba2da65d7db4f9f21b1ec50cacdc805c43bf305d85975e793ec234f
MD5 3290900a185e757d46586d0848725b43
SHA1 06b8c0869fa852949c9eef5126249c8081b6edf8
SHA512 bf1e64477aa2ca92f1e8ae879b877d5493a72afea1bbe65b91eb806eb5a249a43e0dc5334b81bd9a9a2d8e63104eada0050cf6989e9e09f51d2f40d0989b1f88
SSDEEP 192:kRHK6mcVHEsMv78pAPRp27UI9THsb+WNpU81oXUbgkYeUaR2neuZVyIsnAUgE:kRHKzwY4UXhIJw6JEskYeUu2lE
TLSH
T12D42932EED50797B5CDBC22AFA617667E7F5102160D02E84EAFC893C25E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 89d6479b13ecc4b51bf44b7775db2e97054fd8781d84278f6f1d3c5727646685
MD5 af243a19c45a3cb5950e1ac6452c8d9e
SHA1 9d5833d8b3367b99a76bd4a4fb071cbefff7772e
SHA512 49c626f696c1ee274e43ffbe1ce013931157405ce6074640492db2dd72cf2bc58440ed277d1a3107ccc0bcfa84b51fe8e2f0bfce62ccb1476d3b7b5ff67139aa
SSDEEP 192:kRH86mcVHEsMv78pAPRp27v29THsb+WNn1oXRGee4R2neuZVyIsnAUgE:kRH8zwY4UXm2JwOgeeo2lE
TLSH
T15E42932EED50797B5CDBC22AFA627667E7F5102160D02E84EAFC893C21E75CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 a55c9d9bfbff27f4080d00af8282862be9cc6b021b0d1cf3b654e6d1857a1705
MD5 c8926c13ed1e541a9ebca052800d518d
SHA1 3522a9925410a3faf9a73cb924c1c1fb4dbffb5b
SHA512 0cc7f70f08f90753f1713955142d2f28c2b7b8284eb83bb86dea581036af8c57e30edda3af83eb81e1295de946e3c6812dc7f1671fca9c13e29cb035d90943a4
SSDEEP 384:j5j3S7KxkXqKf/pUZNCgVLH2HfgslA/7pLuLceS9YXOD32+ErU3tJHGT7LAE:jJ3S7KxkXqKf/pUZNCgVLH2HfgsC/7pO
TLSH
T1E772FA67BC4C9A3B4F94C68CDC267F4FADB5024B61ED886443FA582603D5ACB05062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1917d29acbe372c5eb3d4a4fc93dd2f2914b9975cf43e04d6c0e867a5b878a63
MD5 1e3387065b2c0a1d12e6a98be28c8170
SHA1 9347ac2e219526ad1eca77733f4388d047870fd7
SHA512 b6dfbbc900134cc3dc1b78f8978af1e5d30ba0e48d2affba87956eaef3dd5e16e0e9a908baee0c2bc76cd2edd3d4f5c6512268e6b4011ce8dcfb7388628922ab
TLSH
T11AB0126580827711C00103F01150D05432A0CF36E55213C541F11D45B8371505017148
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fb82.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58fb82.TMP
Size 96B
SHA256 c4313d2140ea3b2a3e05cf54e38e7afe5ffba6675dc4960ef7deaf1abc0aaaac
MD5 fcc3049fa27ea7f78463de643fa9efbe
SHA1 dbd37ba75db1963fec1f2cb28a0608b2eeeddb03
SHA512 91354cd8de9810cde77a3cad454cd3646a8a4758783ec0ec6e33fc2db805f51845dcb4f901f1da5ab60edd2011c4271e6b54182cb97999f0f5a8a3a5fae124bc
TLSH
T124B02208C203A202C00203B03EE2B0C830E0EF28C2030222C2E00A3AEC283E800300A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 b3982d11c87d5c4d7a86a9e6436c0696a6ded0e4fd13eb408c6be28a2231553d
MD5 93c5a9a53611032f6b725321534e16bb
SHA1 a510e895df101e800136b19631fd18f141fde97b
SHA512 7191217c1aaed912564148fcc0e5ef64a199d3d553a5775de46488bb774fa2d3d3a66039d00d30651f2973e0e744f14381a138a2d4efd661a47281b59336998a
TLSH
T13BB001549B220557C0014BB012C5126133349D509636276BA8F526A4ECD66D6ED86004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 74e2aa5f7809609319e1e7057bcc4add474e9b2e34256887359fb5f7f0369df3
MD5 8bfa2db04c5114cfc8d5ccde936583d5
SHA1 fa5f885660046317fd445c6b1a796394c7a29f8b
SHA512 23cf591661ff38d0db9739702968227bbfa800da5e04828289762baf7b373e5fd0cd22986eb1efc7bd0afa7c6c4f11090facf17c739b88f1a7a77c5c958e7081
TLSH
T1BFA002299F550045E0014BB8209647D62714C8D09615431741E61248FC555D15D81555
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 6cffa519316d1fa7a08e8bc0813b424ef5c4f1c347f839293db240a7b29a4f33
MD5 edb9b62b0463b661f8d12f3918ec7691
SHA1 86109466f866411f85c634b5c66ffb31e89ba1e9
SHA512 bbed25e4125ba85e1b76acc98b77e356c76116d049af3987f62c2e4997fd33530713703278d48d945bdcdce4ba206aaf6e614d1280204f4e33daa177e65f8f6a
SSDEEP 3072:j+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:j+hFD+7t56OD9ZfSAppry
TLSH
T197D31232AA95D8BB89FC6541B247A300DE766CED42DE3A09444A5F8ED09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 f50720c0cf996a22cc4dcb417024c62d9fcf102a57dfd21a3321503e5a4f7427
MD5 4192b7d61a82e622846aa0d4a3372dbe
SHA1 5b51e4434e25fd1d311c96fa76d5ac2ff5081a51
SHA512 381622bf8f10b0717817fa114cbaeaf81960c093dafea87a8aab4af326f0657677775ef4ac2f7f8f7901b1aba9f01a9d7ebad0bc538ea426ad167f16c92f2a25
SSDEEP 3072:N+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:N+hFD+7t56OD9ZfSAppry
TLSH
T1BFD31232AA91C8BBC9BC6541B157A304DE766CED41DE3A09444A5F8EE05FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 9e86c492ead94259258adb5bb253a2f97b2413855b779fcf100347e9809ea5c7
MD5 b28d886e22147c8f6ad0f2a702b72a15
SHA1 8310be849f962c6c3a76cc5109b835bc476b91d7
SHA512 f23c7893ef1f89978702ff52de199185c9b6f6c1cb0fe7242fd387bd2abbf5623149fb58a529c5d376c0166af8bbd7315f7425c638ffa461d4a5f76ad48ab696
SSDEEP 3072:u+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:u+hFD+7t56OD9ZfSAppry
TLSH
T150D31232AA95D8BB89FC6541B247A300DE766CED42DE3A09444A5F8ED09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 1378e9349120b5befe1fe28024f59b982a5e57f7a03e90e3f30192d8228f3d3b
MD5 dbfc1fa8443972a8bad40b46f3cec1ec
SHA1 4322be32afb499c4fbe324c76d49fd473965cb9d
SHA512 2d8482008773767e1bb307e8e51680d5aa37fbe412bcc943e8fcd2c5048f9b971cec4d5b60556a37d633ec1b76395a98479adf9a735273c1c9d495e80e423423
SSDEEP 3072:u+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:u+hFD+7t56OD9ZfSAppry
TLSH
T167D31232AA91D8BB89FC6541F147A304DE666CED41DE3A09844A5F8ED09FD4C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

emu8086v408.zip

Path C:\Users\Admin\Downloads\emu8086v408.zip
Size 3.0MB
SHA256 d56d6e42fe170c52df5abd6002b1e8fef0b840eb8d8807d77819fe1fc2e17afd
MD5 097938653c4d6600fe2b8bf3719cf907
SHA1 aa71b46ee9259e5b31a300c820277e551969da7b
SHA512 3bfc3253ba7ecba492c53e4c3d2390fb56645cc00bebcc093b76fb0878f052320f2f56a953940cc7bf9661e52b51c355001ffeceb63547cec3fc1bba485b6a10
SSDEEP 49152:xIad5a3uFmO8bpECqd7OSEs98ymS94MGGhUDuOZxSNgEVT4oh1dbPWsKoB6Ls8Fe:fRoW3mC39hUCOZxSNB4yYoBmRFTdw/T
TLSH
T122E5336A18D0DAB4ABDBFFFA21462D14DCFAA0D260C7188EF7E18DA9145C7DD461C138
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadMe.txt

Path C:\emu8086\ReadMe.txt
Size 1KB
SHA256 cf53ee7f20020de88d8d3fdbb783e2ad7eca776c50aa6766306aff3dd0e7f699
MD5 b3cfacfa6d7a9831ffac508efb247664
SHA1 d3858e34bfb6ac7286bced10a0d4597f00ba7053
SHA512 60b98d3e63108c73657e92dda006d6ca6682eefd4c43e2c5f9e5a754b4d5c3ee179ad84a762e5d4fcba108e7d5c0fbfa1a1355458bdbf2f84cab8bc39be7b8a3
TLSH
T1D4314E9FE62A221113B3837359464409E72E6913F3535C8A38ADD3181F75B558BFB315
MD5 SHA1 SHA512 TLSH

Submit Download

emu8086.exe

Path C:\emu8086\emu8086.exe
Size 2.1MB
SHA256 dba99f7c8795df28be4b153f8e979b0c572ef825d8b70fb779609f8303a055e9
MD5 c6f57ef28cd8d63793731e4332d5501d
SHA1 67e8a19c6c88d9efe22a572c4689edef414f63aa
SHA512 940eb5ef8cba1cfe1d661b32100d4694b32184c3c6694282d25d8a47a0f72892335111772c15b06c8fde7a9fc9c9303541d5af5eb1cc775c40ee1e09c652e075
SSDEEP 24576:fCnjJcDoLXR2IFCPmxgNqpu59CPNkeV1an3wo2L63h9CBc3r6+TcxiHGLP1:fClccLIMuf5heV6C2
TLSH
T124A50803F350900EE121C5B0D8BA952E5929BD3119985D97B3C4AF5E36B1FC379B2B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

version.txt

Path C:\emu8086\version.txt
Size 15KB
SHA256 fffbda544a37b4736304f1cc03cdcc23519d6f726bf68895e47225f3a6123329
MD5 6ee4844c79b2029cb6b6b8db479e47d2
SHA1 6f00edd7feedb9df8eacd4dda7f7812a7217b59d
SHA512 802a673984b371a6a973191a02c12b3b9656132475b567149aaff57bdd13f39c729b7729d06d4af29a0546aa0706ad6d24b26634849c96c7ff1d85dcaae48c08
SSDEEP 384:rl+qTgtT7NLOLVz27vAcjk36yyzoTSGCCsiLCi2eo42Z87:rSRpC2zt4hCCs7iP
TLSH
T15D72C75B1A4B23B602711086430FD5D2E33C92DD62EF6A11346D431C3B55BA9CBBBABD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1820-1291-0x00000000022D0000-0x00000000022D6000-memory.dmp

Download

memory/1820-1288-0x0000000005BA0000-0x0000000005C00000-memory.dmp

Download

memory/2928-1232-0x0000000000400000-0x000000000042F000-memory.dmp

Download

memory/2928-1269-0x0000000000400000-0x000000000042F000-memory.dmp

Download

memory/2928-538-0x0000000000400000-0x000000000042F000-memory.dmp

Download

memory/2928-537-0x000000000041E000-0x000000000041F000-memory.dmp

Download

memory/5224-1236-0x0000000000400000-0x0000000000537000-memory.dmp

Download

memory/5224-1233-0x0000000000400000-0x0000000000537000-memory.dmp

Download

memory/5224-1268-0x0000000000400000-0x0000000000537000-memory.dmp

Download

memory/5224-542-0x0000000000400000-0x0000000000537000-memory.dmp

Download