154100x80000000000000003286668Microsoft-Windows-Sysmon/Operationalar-win-1-2025-12-17 10:48:35.639{F64A3391-8A83-6942-A904-000000000804}4592C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe144.0.7547.0Google Updater (x86)Google Updater (x86)Google LLCupdater.exe"C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe" --wake-all --systemC:\Program Files\Google\Chrome\Application\143.0.7499.147\AR-WIN-1\Administrator{F64A3391-6AD5-6942-4E52-060000000000}0x6524e2HighMD5=66359E7E445803478383F3D2D35E9C6B,SHA256=810E9879FDB18D0A5D68CD455B7187C62EB44FE585346A34F17B8802AD065482,IMPHASH=6D537F89E530C53E30823920BD49A1CB{F64A3391-8A6F-6942-9804-000000000804}6240C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-features=DisableLoadExtensionCommandLineSwitch --load-extension="C:\Temp\FakeExtension" --no-first-run AR-WIN-1\Administrator
154100x80000000000000003285750Microsoft-Windows-Sysmon/Operationalar-win-1-2025-12-17 10:48:15.946{F64A3391-8A6F-6942-9804-000000000804}6240C:\Program Files\Google\Chrome\Application\chrome.exe143.0.7499.147Google ChromeGoogle ChromeGoogle LLCchrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-features=DisableLoadExtensionCommandLineSwitch --load-extension="C:\Temp\FakeExtension" --no-first-run C:\Temp\23753412093\AR-WIN-1\Administrator{F64A3391-6AD5-6942-4E52-060000000000}0x6524e2HighMD5=7AB469303198F615918C267F012951A1,SHA256=F21B3CF8B027A865595B498C165BB38552F7FC2B79DD159EF162445F597ED81F,IMPHASH=7096BEE3CDF08C3616FFC732973FEDF2{F64A3391-8A6A-6942-9704-000000000804}5180C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershellAR-WIN-1\Administrator