hxxp://middleamericanews[.]com

Resubmissions

26/09/2026, 19:14

260926-xx6nbs1yc18

05/09/2026, 02:16

260905-cqlpcsbd966

05/09/2026, 00:10

260905-agjgjaztht8

05/09/2026, 00:07

260905-aerecsztez6

Analysis

user interaction
yes
max time kernel
300s
max time network
300s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
05/09/2026, 02:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://middleamericanews.com
Sample260905-cqlpcsbd96

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4804	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330482600767084"	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1108628292-2849104889-3743975892-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1108628292-2849104889-3743975892-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1108628292-2849104889-3743975892-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1108628292-2849104889-3743975892-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
1720	chrome.exe
1720	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 2128	4796	chrome.exe	84
PID 4796 wrote to memory of 4804	4796	chrome.exe	85
PID 4796 wrote to memory of 4536	4796	chrome.exe	86
PID 4796 wrote to memory of 4536	4796	chrome.exe	86
PID 4796 wrote to memory of 3572	4796	chrome.exe	88
PID 4796 wrote to memory of 3572	4796	chrome.exe	88
PID 4796 wrote to memory of 1588	4796	chrome.exe	89
PID 4796 wrote to memory of 4452	4796	chrome.exe	90
PID 4796 wrote to memory of 1588	4796	chrome.exe	89
PID 4796 wrote to memory of 4452	4796	chrome.exe	90
PID 4796 wrote to memory of 1968	4796	chrome.exe	91
PID 4796 wrote to memory of 1968	4796	chrome.exe	91
PID 4796 wrote to memory of 1684	4796	chrome.exe	92
PID 4796 wrote to memory of 1684	4796	chrome.exe	92
PID 4796 wrote to memory of 4336	4796	chrome.exe	94
PID 4796 wrote to memory of 4336	4796	chrome.exe	94
PID 4796 wrote to memory of 4932	4796	chrome.exe	97
PID 4796 wrote to memory of 4932	4796	chrome.exe	97
PID 4796 wrote to memory of 1680	4796	chrome.exe	98
PID 4796 wrote to memory of 1680	4796	chrome.exe	98
PID 4796 wrote to memory of 5028	4796	chrome.exe	101
PID 4796 wrote to memory of 5028	4796	chrome.exe	101
PID 4796 wrote to memory of 3460	4796	chrome.exe	105
PID 4796 wrote to memory of 3828	4796	chrome.exe	108
PID 4796 wrote to memory of 1984	4796	chrome.exe	109
PID 4796 wrote to memory of 2628	4796	chrome.exe	110
PID 4796 wrote to memory of 1720	4796	chrome.exe	111
PID 4796 wrote to memory of 3368	4796	chrome.exe	112
PID 4796 wrote to memory of 3368	4796	chrome.exe	112
PID 4796 wrote to memory of 4488	4796	chrome.exe	113
PID 4796 wrote to memory of 4488	4796	chrome.exe	113
PID 4796 wrote to memory of 1640	4796	chrome.exe	114
PID 4796 wrote to memory of 1640	4796	chrome.exe	114
PID 4796 wrote to memory of 3868	4796	chrome.exe	115
PID 4796 wrote to memory of 3868	4796	chrome.exe	115
PID 4796 wrote to memory of 4028	4796	chrome.exe	117
PID 4796 wrote to memory of 4028	4796	chrome.exe	117
PID 4796 wrote to memory of 4404	4796	chrome.exe	116
PID 4796 wrote to memory of 4404	4796	chrome.exe	116
PID 4796 wrote to memory of 2860	4796	chrome.exe	118
PID 4796 wrote to memory of 2860	4796	chrome.exe	118
PID 4796 wrote to memory of 2412	4796	chrome.exe	119
PID 4796 wrote to memory of 2412	4796	chrome.exe	119

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://middleamericanews.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffc45b5c728,0x7ffc45b5c734,0x7ffc45b5c740
  2⤵
  PID:2128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1600,i,13574468914037931386,3059502353920502027,524288 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1744,i,16057754517221998546,8762329363501859177,262144 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:4536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,10986173467583460424,2508171257085089429,524288 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3128,i,12620592417858857915,4057749281367557519,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3148 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3100,i,6968251415665514173,16827158182559591575,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4312,i,11429416719473257964,9635291555584300420,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:1968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,3920959629033741500,11263272781054326166,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4988,i,7310749384314737090,14917563481941103239,524288 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3136,i,3324886455531395502,1202053110065092587,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5084,i,9781778768907396811,5934007571096122806,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:1680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5220,i,13644505496749995935,6752073933519498040,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6512,i,8319157356248605362,666111136860123463,524288 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6424 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6608,i,17419305990016710285,3390887453732499867,524288 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6524 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6104,i,6995383187237611061,13588040063633190046,524288 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6532 /prefetch:8
  2⤵
  PID:1984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5136,i,10546584177161282742,7487265484630219918,524288 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6540,i,12650400931076409833,4686124949468263566,262144 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=500 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5136,i,1210033713327364838,3043721716167423459,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5132,i,11498271431424755715,3874181728031921690,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5812,i,10590948129830977172,16336249828821685400,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5560,i,7379440728860193974,6788633016520165362,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6756,i,10847737647375571076,250928574654257761,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6872 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6804,i,11021840728396875102,8544702279047742680,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5656,i,3174406840294602274,9033029496499748683,524288 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6532 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4808,i,16162522891230903421,12482594611440972327,2097152 --field-trial-handle=1992,i,11657597061924963552,9032162276693576819,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:2412

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3840

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 55c42108b0faf8d0ae635278bbe9d9c0edb7ec79e306379f90d6a0e64a5da886
MD5 1eba26aed1d63b24a61b18a5ce88edc2
SHA1 4701f9d5437fc787937b86fd799f7f1af50dd5ec
SHA512 e0428a2c34ea22a0d1e195869dceecefdfb0dcd7095fd222634f0f83e445069dd0ae2a42fe38f1b4aad39719670f5831e75c2f1d5320c09ca7ad9acaccb5112d
TLSH
T160E02BA7C861AC370DFD071C55648ACAF75113072B81454B7A3C910CCFB5A3A1583C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00003b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b
Size 23KB
SHA256 5472fd722024d7e10227381bf9bfcbd1c1e5b19077ba0f111193d9804c421bb7
MD5 022133383591682cc934097ebb28f060
SHA1 2f54233b6bed91b1122ff32d3e9109de4dea1f9a
SHA512 fc5c48184f468336edb4a1346853121ca9c8de5f71ed694574be9c584c9c4bd2c88bcfffd82b9fd539d69f8a7783099d3a0ecda50d2d71772abca24bdfea836e
SSDEEP 384:NMpZRo23v1oHkmklwRnBVl+PrbzvcXycPgeGch0fZ0NA+0aqUrSoyy/45vMtH+fI:NM/CHVklonBVgrPv9LpcEZSA+NqEyAae
TLSH
T102B2E1EF3D989C18A5F74D3BA83375CD40533EAA63784C0586BF50841CB46BCB9186CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000053
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000067
Size 30KB
SHA256 17512cf2e23a64fe2e60393f12702513e4ab19a2f43e385a0bba9df0f930e897
MD5 11a417a032207f053f3eea6933934a52
SHA1 aca8aed818ac128b71894be6b801e60081f417d8
SHA512 d374819d515a86101c86dcbdcd49e90db24a797c1741c40ae9c6e9b1df9a644f10ceb1fb821c46481f334dd574ce952662402cfe2a60955c8baa42846d59c093
SSDEEP 768:jVw9Mz42BP+yFCf0cYRbQYHc1dtlb+dT3ZZMrAPHC6QyZb:WGT1XcYVQxdDw33MrAPXZb
TLSH
T173D2F1A520D6A05701DE5FC8E8F927D8FF5C9D29E1AF8CBCB6998079D760E344D90388
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 e79abc61481a43a472c2dafc3352b74e605dca1f2d3e1ea5e5d6263a36577571
MD5 24ff69fc75a61a385f027331226b8e7d
SHA1 a6c029175f722b96f4e74f1f0c2000728755d890
SHA512 08d165aa45e2651d27f8eae81f35416e59673d03841756f0660dac6f8fc064b91701560c012d284328b61c798f16f569b5359204b1b89cf198200fd3341897c7
TLSH
T1522163D491EC141AFF9AD9B001D28C8331B2456A494F2FA7A48EC22CCD4FEC806C50B2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 2043a7617c838510a7bb6dcae527467affd86c578e361a8177e824244d99e6e9
MD5 c76b3b96b355319d16cc9e0384e6b6a2
SHA1 623d653b9b97bc202d412080b7bac9f1d36a77d5
SHA512 42ab970f4bfb8f5d8b7f7178b0816b6c300c9539e8435e79c5b3cdc05f34ced2936fb361e322ed4d576849e69d8cd2371a75b0adb9f38bb12fc3f7467c986ad7
TLSH
T18751FCD399C81201FFA8D9F109D48EA371A123A74B0F775B444DCE2DC84FE86A0E62B1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 811b0b27ac7a553cc59a82f24824ab494787a0406323d85d28151720b11819c5
MD5 54e3b834694f6df2990072c4110c97c6
SHA1 5b473352d6347b3f85ef6b3fcca0de66d5ed586a
SHA512 f4ce514c3799c5eaa512b8e0b12c9e01d9505c3f8f780a1535b94c97d5325c7aeac4370eae1a0a93790450a2c7f113df53f5d95964d2a0d4cd31b47505ccd2da
TLSH
T18521C1D4D1EC1416FFAAD9B051D58C833167496A494F2B57518ED11CDE4FED407C50F2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7b44f8540a31bda64cd072eee949229525b3a5fd9bc02f459614c1eb25eb4ec4
MD5 c957cff5bfce576eb64059bc73770266
SHA1 2290457519244669de0ff6fead23a1ef16b2bc6f
SHA512 e01c1fba6274d88dde666953ec3bb9e18f7fdbdc0b123b922735add878a35a0dfe5ef73c31b52901e99bff300fbf236f60b037acc310f0c470a90725c98cf6ce
TLSH
T14F51C7E299C80201FFA899F119D48D63B1A563A7074F3B6B848DCE2CD90FFC5A0E51B1
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 24KB
SHA256 8ced77b2ae67de00edd2dd2c237ec92ab05d070dc8208e04cecce1970245e2f1
MD5 80568c7fd94faffc5c96043adb5f4746
SHA1 b7a2ba060e5f843d1c27c62d9fb07bebcaf6d372
SHA512 587637d106286796f85f907d2a654e8fc00c16e28608fce28207fae9c48ed2cb3e828b3720a91b9dd2301b12ba576dcc6dea909db7e7447b98e017ca060f661a
SSDEEP 384:DGCoer3+1LaJGJkKneAgyF8Bes8fZYedCiD/RaaIEdOqBS7P19eVRYahwq7R+WKe:3s8QVMh/H1z190Pqa
TLSH
T136B2BDF7CAE8877E8C2756F4D614AE1FCD2B06A8422D7C4A85D8EE4B93F2021D14654F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 f5b82801e805ac4d0c5e400f0249291855f025ba72199516e678802061dae525
MD5 ffffbbbc393801e22fad5b65189a2d50
SHA1 b0cc9b4848e32d381ae55f992bfe8bd576ad0204
SHA512 1b37221fc0dcb54b515de81b8dd9b3eb5be6d0187f700b8c90844d0e40fdf94c2013df4cedbd6811bad3f1fbffd3662185462f3c625379a2393374bb856ce647
SSDEEP 192:DGCoer3+jJ9JaJGJQaaIEdOqBSdxP19eV7PTR3NYaEtJwPeybxr6qt7R+WtddPis:DGCoer3+1LaJGJQaaIEdOqBSdxP19eVX
TLSH
T1ED22BCF7CAE8876ECC2316F4D614AE1FCE2A0668422D7C1A85D4EE5BD3E2421D14664F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 535c492477e88b0d9e40f65c31e55cd76a636589ac51b640a69212958455b46b
MD5 049c800383f34d4b8e85791ea83356a7
SHA1 cbd871e05a69753b227b6a27d355ca031121cef8
SHA512 863f688ddb1d1878cdbdbf7894f5569cfab0b4d4846c0c15b244217c39377a442392970376af45cd970cdfd0ee99f8c17d85e97c1133ac6e9d3c3da7ec2c7b91
SSDEEP 192:cRhthivsx2DPvcZApuAmtaV9bVv7SVpAPRp21N9fHsb+WNn78DhWe2wf2vR4eU1K:cRhtEUxCvMUXUxwQDx2+2vRCVe
TLSH
T17942C56EAA10697B4CDBD229FE617B27D7F6102221902E84E7FCC92C15D75CC322781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e91d63acf07fcd5fd80f40a639c66bbc433937cbb8b10a223c9104c66ecdd98b
MD5 255871b11efcd07e8d064256d5c1572e
SHA1 064dd9a885e93207d90e684a59c8b50d0bc5c459
SHA512 f063ae80247dc40eb7b3f877d55dd86dde40a130e17d5cf978eb008fc8f6d19df35b83955e5127ae7e7ce889596e598e04c6ed95b4fa209131e63cb4b1528267
SSDEEP 192:cRhthivsx2DPvcZApuAmtaV9bWv7SVpaPRpQ1b9fHsb+WNn78DhwXeOf2vR4eU18:cRhtEUxCkMmXsxwQDyec2vRCNE
TLSH
T1EF52E76EAA10697B5CDBD629FA617B17D3F5202221D02E84E7FCCA2C15E35CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 33976f498d07fa4fb1c80f26f698891c90953d597bd2fcbb4d6299f26029aae1
MD5 f2335d1d368100021176caf685c4404f
SHA1 4416b9ec68e2757ad1724302f55b1087fd9d9eca
SHA512 c4625371b81403d7181680df9a26543b6657ecc56d8aac7d5bf660d469aea5fdf0d56e23dea4b04c9f6f3087e9310ae727ba652c76667ed7fcee89899b8d717e
SSDEEP 192:cRhthivsx2DPvcZApuAmtaV9b1v7SVpaPRpQ1X9fHsb+WNn78DhwXeOf2vR4eU18:cRhtEUxCPMmXYxwQDyec2vRCNE
TLSH
T12952D76EAA10697B5CDBD629FA617B17E3F5202261D02E84E7FCCA2C16E75CC3213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 12c953d824d37f2911dece87103645968222d9440f29f0d4f503a292fc62cc14
MD5 8d40a55c044a409a3488213d4c91c2a9
SHA1 cf6f49fbb3de63cba584e9bd584a420697544d48
SHA512 0f7d83d8ad6d49266f4904431223e6c856416b39fdc32115a3205c68931e62ac858d782bb72c771b682f49270200b3d3a976793f052b5bc6798b7c7c5568d410
SSDEEP 384:Zfjd07KxkXqKf/pUZNCgVLH2Hfgsl/X7pLuLcSjrGXODd8+ErU3HYHGt64PH:Zrd07KxkXqKf/pUZNCgVLH2HfgspX7ps
TLSH
T1D372F8676C4C9E3B4FD4C98CD8267B4FADB5014B25D9C86883FA982503D5BDF11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 bf2aa264ef5db87890c3c89c8d425202e483834f4b564bbe38329d081e9f481e
MD5 a049e8b72f6c983f6a70857bff9d8c00
SHA1 bbe3a515249d911d935890d2e7e70a05a0c21be4
SHA512 ba475a1ccdcdaaeb9f5e223349e6cb47b70ce12c789543b7834bb569ed90d0aa31f66bb02b120654fba67d32511429b1dfa5c05741459362050a5471b6164e53
TLSH
T11DB0120080026101C09A02B012421488B1149F14960F170343F4A926CC395A18114060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58eba3.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58eba3.TMP
Size 96B
SHA256 51c2b16bfb4481599d0f42d32111b52efc8c036b119c0a94416d687e9786af37
MD5 b4f78c3817d8611f27149d38a786d731
SHA1 21d2793335d99e6b7b1d3f8a5c84d42d91104857
SHA512 f1e882185a095c273214a595116ab6bbd3e759c1038b2eb25fd8f7018cd9daeb0bf602b43071b4cdc377ea22c4752f37e6ccbc61bd8555973676764be377afe2
TLSH
T1C5B00259D5026622C14303B0269DD5D9B160EFB6D6071232D6F15AAADC29E718636170
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 6e37f5556bb205cf628ddbda7214a6651d44c7cc9df7df6ad756f72d4b04c21d
MD5 82635d1818f0e76a16b1a29de23c226e
SHA1 2111a5de1d27b41cf7aa6bdfdb9aefe0283eccc7
SHA512 d1df3f648467ac49fcc13d53f4a626a68adce25a864abdd4d1e7dddc15ab109cba2dac1344b8d06d8f28da2840cccbd1bb6e88bb69bc21b2f81b4a0932c7cc24
TLSH
T1D7A002240174600BD85016B02A85639963525C10DB09436140D04449C8FC642D156715
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0bd1bc951a5e3977a8d0ff1e2f5c80ff9aa7cb3202586ba484cc37382177eefa
MD5 6dc4524a3e9d898c4b152857f4b90cba
SHA1 9fa38eb81b05c2dcd6c887225e34ce8daa55aac1
SHA512 156c2cbeca096f7b51034a8b2e9764b6c28afe3ee8314c9910b19ba10efaedc5f734fc586598da0afd8330d8f38b0acbc1b0f8ea6a87fe0ac77817226200fb34
SSDEEP 3072:eSw3LffUnBKU/F8enCW3iyVEXGey0cB1W:ex3LfqBZqenbyyVEd1cB1W
TLSH
T161C31231E89AFE776395563BB50B931A5CE149BB84E1A788443C2F19D0CA3C8FF99D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 eb13a8e6c2fee982e9f77a913e66b8a5d25114d5125a1513dd53611f6ac95b62
MD5 130fad445b4169269e7da5c93f12335c
SHA1 f0dbbb4c98b1efa9a435af53185122ef56815912
SHA512 13126d5ca142768e87d80482ec20b398ef65d585e66f795db115f58c04335ec13789478c607bfdba47a4df8e2ad0f9c73fea2eca821a0e586bbe56ac07c6ce38
SSDEEP 3072:guw3LffUnBKU/F8enCW3iyVEXGey0cB1W:gd3LfqBZqenbyyVEd1cB1W
TLSH
T14FC31231E89AFF2B53A5562AB50B97291CE148BB44E1B788843C2F1CD0C62CCFF99D55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 7215ce37ac7c18405f7fd97dc2ac948d01a41835d26efceda4df520f7e2d539a
MD5 54aa22c4680b7c670500c19264222a3a
SHA1 23abb9e343d33b872dd0212f0ce29632de53cb5d
SHA512 c76bbf3a4d84f1c0b1521dbafda950783f1a8bf549aedb245d7ae75e9ac80240e88bca1f41dea2f4d973e88e2086173f33fe18ca1b8f7a0604a67a824c3b96d4
SSDEEP 1536:MTASwZlAmf1mWUYZchNBoXUF1F8Mh9azKCW3iw9xODQ7B6wQtLPyedtK0XMBg/QW:Yw3LffUnBKU/F8enCW3iyVEXGey0cB1W
TLSH
T10AB31231E5A6FF7B6269562AB50F93191CE149FB44E1B788443C2F19E0CA388EF98C44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 373e98cca2d9311c52ba314dc4a8789929e0a6ed588f16d2efa182035e7f958c
MD5 14296ab951e5bcea4172bd81fe7e4aa8
SHA1 9c6816e5d1da3646d4e57b34f4ca73325e797b63
SHA512 f88b7e0e5cec9e8bcec40f05f2801bb70693f999248811f3241be16e9bb4b2cb66bec1ea3926d853abaf361270e88e280b77f43a1541f2bbc803b753cb29f249
SSDEEP 3072:nSw3LffUnBKU/F8enCW3iyVEXGey0cB1W:nx3LfqBZqenbyyVEd1cB1W
TLSH
T1FCC31231E89AFE776395563BB50B931A5CE149BB44E1A788443C2F19D0CA3C8FF99D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e8b01beffbda65b9e799c57c90103ab4f74b5a874ed8b3efa95b9dc76b561067
MD5 f103377c996e7201f053f4c8961f404d
SHA1 0196802a217dfc0522563427bfe052a2150bcfc4
SHA512 dcc46b5b26a7ac7aa70143f84319821a0a0b516f76ac0f1f6a2a57efcef21111ddd6d46f2f2354d2fd8f93ad85c450d7bbd243c95c086be9a3ef8301ea8cf6a0
SSDEEP 3072:Uuw3LffUnBKU/F8enCW3iyVEXGey0cB1W:Ud3LfqBZqenbyyVEd1cB1W
TLSH
T139C31231E89AFF3B53A5562AB50B97291CE148BB44E1B788843C2F1CD0C62CCEF99D55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download