hxxp://middleamericanews[.]com

Resubmissions

26/09/2026, 19:14

260926-xx6nbs1yc18

05/09/2026, 02:16

260905-cqlpcsbd966

05/09/2026, 00:10

260905-agjgjaztht8

05/09/2026, 00:07

260905-aerecsztez6

Analysis

user interaction
yes
max time kernel
300s
max time network
301s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/09/2026, 02:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://middleamericanews.com
Sample260905-cqlpcsbd96

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4824	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330482800623488"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
5180	chrome.exe
5180	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe
Token: SeShutdownPrivilege	2744	chrome.exe
Token: SeCreatePagefilePrivilege	2744	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe
2744	chrome.exe

Suspicious use of WriteProcessMemory 51 IoCs

description	pid	Process	procid_target
PID 2744 wrote to memory of 5252	2744	chrome.exe	80
PID 2744 wrote to memory of 5620	2744	chrome.exe	81
PID 2744 wrote to memory of 5620	2744	chrome.exe	81
PID 2744 wrote to memory of 4824	2744	chrome.exe	82
PID 2744 wrote to memory of 3712	2744	chrome.exe	84
PID 2744 wrote to memory of 3712	2744	chrome.exe	84
PID 2744 wrote to memory of 3412	2744	chrome.exe	85
PID 2744 wrote to memory of 2328	2744	chrome.exe	86
PID 2744 wrote to memory of 3412	2744	chrome.exe	85
PID 2744 wrote to memory of 2328	2744	chrome.exe	86
PID 2744 wrote to memory of 1052	2744	chrome.exe	87
PID 2744 wrote to memory of 1052	2744	chrome.exe	87
PID 2744 wrote to memory of 1948	2744	chrome.exe	89
PID 2744 wrote to memory of 1948	2744	chrome.exe	89
PID 2744 wrote to memory of 1652	2744	chrome.exe	90
PID 2744 wrote to memory of 1652	2744	chrome.exe	90
PID 2744 wrote to memory of 768	2744	chrome.exe	91
PID 2744 wrote to memory of 768	2744	chrome.exe	91
PID 2744 wrote to memory of 1244	2744	chrome.exe	92
PID 2744 wrote to memory of 1244	2744	chrome.exe	92
PID 2744 wrote to memory of 4436	2744	chrome.exe	93
PID 2744 wrote to memory of 4436	2744	chrome.exe	93
PID 2744 wrote to memory of 3080	2744	chrome.exe	94
PID 2744 wrote to memory of 3080	2744	chrome.exe	94
PID 2744 wrote to memory of 2912	2744	chrome.exe	95
PID 2744 wrote to memory of 1604	2744	chrome.exe	96
PID 2744 wrote to memory of 1092	2744	chrome.exe	97
PID 2744 wrote to memory of 4852	2744	chrome.exe	98
PID 2744 wrote to memory of 5180	2744	chrome.exe	100
PID 2744 wrote to memory of 436	2744	chrome.exe	101
PID 2744 wrote to memory of 436	2744	chrome.exe	101
PID 2744 wrote to memory of 6024	2744	chrome.exe	102
PID 2744 wrote to memory of 6024	2744	chrome.exe	102
PID 2744 wrote to memory of 5940	2744	chrome.exe	103
PID 2744 wrote to memory of 5940	2744	chrome.exe	103
PID 2744 wrote to memory of 5552	2744	chrome.exe	104
PID 2744 wrote to memory of 5552	2744	chrome.exe	104
PID 2744 wrote to memory of 684	2744	chrome.exe	105
PID 2744 wrote to memory of 684	2744	chrome.exe	105
PID 2744 wrote to memory of 5044	2744	chrome.exe	106
PID 2744 wrote to memory of 5044	2744	chrome.exe	106
PID 2744 wrote to memory of 4080	2744	chrome.exe	107
PID 2744 wrote to memory of 4080	2744	chrome.exe	107
PID 2744 wrote to memory of 5276	2744	chrome.exe	108
PID 2744 wrote to memory of 5276	2744	chrome.exe	108
PID 2744 wrote to memory of 3908	2744	chrome.exe	109
PID 2744 wrote to memory of 3908	2744	chrome.exe	109
PID 2744 wrote to memory of 1040	2744	chrome.exe	110
PID 2744 wrote to memory of 1040	2744	chrome.exe	110
PID 2744 wrote to memory of 1792	2744	chrome.exe	111
PID 2744 wrote to memory of 1792	2744	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://middleamericanews.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcc832c728,0x7ffcc832c734,0x7ffcc832c740
  2⤵
  PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,17036778079584098013,13878112958152900476,262144 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1968 /prefetch:2
  2⤵
  PID:5620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1440,i,1940698502245672961,15459541821317955186,524288 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2236 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,5139651651505696030,13461788609682890550,524288 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1772 /prefetch:13
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3144,i,13848879349804590485,4234745150575007445,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,2036720290284713067,9207736915891368230,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4200,i,12060413797845521060,18282719386357336425,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3784 /prefetch:9
  2⤵
  PID:1052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4740,i,9662208629427693053,17805628337342544346,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5168,i,17492847339614675032,15494156343601528172,524288 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5172 /prefetch:12
  2⤵
  PID:1652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5164,i,7110386354091145092,9597681060010785553,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5464,i,592124913770377366,376346633917936400,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5660,i,8706187204393243914,13244919600838268405,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5768,i,6320441024323609994,9590572281943962639,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6012,i,3477294030237343312,586271702853733100,524288 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5996,i,16114421941221274427,12301326573235728104,524288 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:1604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,5979759001761573043,12919409726607501292,524288 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6676,i,2595923985583598309,5772248344136401076,524288 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6684 /prefetch:14
  2⤵
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1064,i,10740370287548823628,3147329611169579315,262144 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4992 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5472,i,211776629828263553,5071242844581647520,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5760,i,12344741664263420088,15512155822674825504,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5676,i,6762647995772699780,5948243626591537690,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5516,i,3001373360313245217,8906840198833792074,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4304,i,341510656899923595,17427307705302106116,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=4704,i,9671228676914756678,13910004637860031994,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4892 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6756,i,9246522946859862108,1804146365434115302,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6804 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=3212,i,6668129982144805644,10136309500664232568,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5740,i,278813528302366564,9035353918470501879,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,4632784387491190180,15622137305461053440,524288 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5828 /prefetch:14
  2⤵
  PID:1040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=5508,i,1332387994821174827,14519395541518709514,2097152 --field-trial-handle=1972,i,18436961684526567544,9188017084619599654,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:1792

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2168

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 40d4416ec6a1fde185c6efb6364d1899ac18bbc8bb5680b30afb3e0b726b994f
MD5 6796a90755a8aee3a7a7b69504fcef6e
SHA1 982cf6a10917ad659dab14f3bbed45e7128cf866
SHA512 921dbf4e94dc88bd39196ccf9220ba65abb47489ad277855473e8fbd896779d867ef516de5cd167a1d57ba52f54b3fa594cc155472ccc6e3884739c470b3320c
TLSH
T195E061A6CD22BC2B18FD872861544741F740131B3B82894F3B3D421D8FF46775255C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 16KB
SHA256 7923e3b2aaeb56b45f37f446fa3f84594c0108fa6cceec26425ab4e1855f64d6
MD5 a3c76a16708c18b6bc016652c6c47af7
SHA1 9ffe0545531524225f8892dda4db61389674f31d
SHA512 8ecb02cabd94c2d2dc900fbf505cb8625a23b13ee98fdf77f0a15d5dcc90709770cfd5cf0b59a7541e9d9003bde121e6b90225072a410a1976ab66d827046b39
SSDEEP 384:0Hia/bok0t+MGiP8WW+5FZiFzxIBBFm+bz8v4Poc5S:EN/bok0oMGctW+5DexIBBFZyOZS
TLSH
T11272D0DBB248C1CBF68F2DB288C8AD9266923BD850105D3E47BED2D647EE1D94ED4201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000046

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000046
Size 21KB
SHA256 59f691d7b5709a0381af9a8744c3b6c0b68336134225e2c0411a91b9c099964f
MD5 d67a9717357706dafc9b8010cdc6e9a4
SHA1 506331b686f75fb15d75fc52b836cf08b99577e0
SHA512 d8892734cd16ac85050a311de6652b47735f7b62304c9fc55d948f9159be2733faa0c4c5ffa1d9edf88580418437662d78d193722cc02447a2532217f1fecb55
SSDEEP 384:MEGZoJTz+pBySJirwVz95+Cj2Wlj0UHnNAESrAbRFeXZmrmZOdb3ME+yPuxyS/Dt:M9OJGpBySY8x5+i2WZtbSrkjCoIyOBZ
TLSH
T1AFA2E1394CE4185E02AA26DE9601CCD055D14BC467EB340EF5EE8A0BE76EE87432B8D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000048

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000048
Size 62KB
SHA256 29e3c6c1aec37ac2af49f0a0318d6a4c0653e8e26ef8b3ee91b923073dd3c197
MD5 23793defc1323ea3f3e0b105e70803b2
SHA1 6239daff26359661097ec66f68636b5f3035dea2
SHA512 d699386dfee45ca8c6dfcecd8aec0dfecaa8822afad038e26f56c933712ae7ff9e55db567fcf275d8f2a29d98cd1734d93a9cbc1461d1dda39d1a7fa097cc63e
SSDEEP 1536:mXPI7rkkzxzCH6NGIvaSNXkkFRPvk9VkPf8z:swPzCa9kelvkfYUz
TLSH
T1215302F1179EBEEE6619A648DFCB720A4CFC5F17123531AE5D08991DF1B07672293810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
Size 23KB
SHA256 5472fd722024d7e10227381bf9bfcbd1c1e5b19077ba0f111193d9804c421bb7
MD5 022133383591682cc934097ebb28f060
SHA1 2f54233b6bed91b1122ff32d3e9109de4dea1f9a
SHA512 fc5c48184f468336edb4a1346853121ca9c8de5f71ed694574be9c584c9c4bd2c88bcfffd82b9fd539d69f8a7783099d3a0ecda50d2d71772abca24bdfea836e
SSDEEP 384:NMpZRo23v1oHkmklwRnBVl+PrbzvcXycPgeGch0fZ0NA+0aqUrSoyy/45vMtH+fI:NM/CHVklonBVgrPv9LpcEZSA+NqEyAae
TLSH
T102B2E1EF3D989C18A5F74D3BA83375CD40533EAA63784C0586BF50841CB46BCB9186CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000062
Size 73KB
SHA256 f3d2fda12260ccf193da50e70fe5efb8b89d3c5d4e246eaa053f2cbf4fb07ca4
MD5 345c1023e3d262fb90bd367013335e0f
SHA1 30fd5c4da80ace38caa4fc0da1c950b6ea210787
SHA512 9ae18642326e9e10579bf7b137e14cf5da51953fd2884db14dc6050c4734ec9ad58f7afa35e1d9ee2d0672827845fba2a076bf25069ad40a31de93179c76c842
SSDEEP 1536:gJJpWKEN0+OUU0C2XYIyfDqHbs9hB09CfZlKMVOSUFV+qnCQalSYnUxMv:cjW1b1U09DGyQPKzSUFVXCQalSYntv
TLSH
T1D87312C66BCE83A9791BCF3D0D254488AB74C4F0329AEFC3957AA08D7515134B1C63A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000065
Size 30KB
SHA256 17512cf2e23a64fe2e60393f12702513e4ab19a2f43e385a0bba9df0f930e897
MD5 11a417a032207f053f3eea6933934a52
SHA1 aca8aed818ac128b71894be6b801e60081f417d8
SHA512 d374819d515a86101c86dcbdcd49e90db24a797c1741c40ae9c6e9b1df9a644f10ceb1fb821c46481f334dd574ce952662402cfe2a60955c8baa42846d59c093
SSDEEP 768:jVw9Mz42BP+yFCf0cYRbQYHc1dtlb+dT3ZZMrAPHC6QyZb:WGT1XcYVQxdDw33MrAPXZb
TLSH
T173D2F1A520D6A05701DE5FC8E8F927D8FF5C9D29E1AF8CBCB6998079D760E344D90388
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000075
Size 21KB
SHA256 b7582acf1f182c6a66e203cd6eee889d409cd05ff4950975128a32fc3e0c0418
MD5 e126007f6b835ef3a0916864cf476699
SHA1 04eb8318f173d6fdb5417e92645502d93966b8a8
SHA512 5e169a71116c41508283ee7224b7fee51c6b737a909c269e062e7494c9e7a853dbd4a762ddd9d9f104d79965d5570c2511df5b1c08c840c2037a4901af8a7140
SSDEEP 384:7zhykQ67ifiZgQPmqN64Q4PBZtjCiMEZiRkCYzMNFMvj686avLDo1bo0/GZl:5VQ6kU5Pmqk4xZTF2Ct6YLDkpql
TLSH
T1EEA2C01F966DC059082EB5CC9795B522D0CB8391E5CD106FD8F54C2FB4B277236E8B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35d5aa88fbbf209a_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\35d5aa88fbbf209a_0
Size 263B
SHA256 04f667204b67fd5cb0175b3b38a26191aaddd800c86185bf6516c19225b55a12
MD5 606e05539d7e5934fbb1943543b8157f
SHA1 d5fba58cc3ccbc776d32eab03cbce959f01fa98b
SHA512 73e92a41fff12aae5e4d18b0077e3c67d3a2300626a8920048662cec48f647cc60518d400a64a3f96d2a1d351f3ba356a598cfc2e009cb3d377baf9916d13a35
TLSH
T169D097CF80EA3C22C9208EB1C3BB128EAF2790851DDCA0CD0218625952C49F066DC20F
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 83dcfbb103bb32303d04122e48f4bfcce9684eb60c75aef84bee89b08912f311
MD5 3433bde342f97cd7b2de7933446d85c0
SHA1 4d7517dff1e86310e404f9b2fb73a59984bfd2f0
SHA512 1ddcb2619995f7ce820f8646a40a52ca48a77bbbef3bf559437f139f5ef5ba643a720595df13909629f222ca3223b196a7533e83722c7ef081cbf0ffdc706f09
TLSH
T1FC3165DCA1DC101BFF46CEB896C18D6326BA9869894E079B028DF0F94D8F6E415C2CC0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 9528c4dd6cdd8b0ed839711cd9f42769238e05c60d10356c4921aca07ae65258
MD5 fc39925206a701d0578cbcec205c8246
SHA1 9018899337caf229404ca8ea41a6e9f4fbc802c6
SHA512 1eb2c0d44f2aad0d390f1bf8e0ac585905405b539095e51b69e9272fd2bc93f614ba0bc5bc52ef715dcfa4f543d2eda782a0b4fe02f0b461534ef9c6a9973e2f
TLSH
T14D21DDD8A2EC101BFF868DB814C15D2730AA6859898F1B675299F0FA0D9F6E449C1D84
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 06630ef67f6f504d9cabc9972234847d6415687528ae618f38e839bf3c8bfef8
MD5 4465864b8e528638bde32a5b81b28e65
SHA1 e3bf0694badd18d304a7ae7ce3552e486b931902
SHA512 3b8dadf185fc8b28200f0b32e5f3f09ee0ed22d4420ca0cb6911a8ee4e9034daa446833f2c9cae285082e7660c93f0751cae4ae693a368c77b2ad7c4438f9be5
TLSH
T10FB011308088880AC3802BB038E0000332220C2C8B0B22E282E0C0AC802AFAA00820A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 996f650aae298a39ef11eaf51e6b0128a9b82473cd672bdc7e6fa5018e9a4f6d
MD5 5cabbf8a72d087c7d82892526c6da7e7
SHA1 5287fd6082f263733d1852840a9749e927d0ef62
SHA512 c9fa8f8262d0bbc2c0dde17c6ba0cb1a2accb86e65c574396efc11b3f7ab83d3664cee011941ddd4ab7f93190b11f73544b5029bff99cc77a872720fdd7eec24
TLSH
T1967194C591E892A7FB6B88B995C70C6637FA4045960F1B9701D1E9B9CCFFAD002C3468
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 268e06056730ff8f16b1b3d0cfc7ccd6463219e323e2ec4a7674379fdd1140ee
MD5 6326cb8ddc38f6a8abca5b81af2bc4c3
SHA1 ba01fbbbeb5c666c856ae89ead7a5d9706767a35
SHA512 2ab4ea7dedcd7b6e12034bf724e3bdfe2c6a7c8cfe0b116d20e0a0f7ac10414ce0258680f194ac939eb1ee2d73bc30c65712aaf4686cd9258b3b12534c8d27ac
TLSH
T13A6174C691F845A7FB5788B890C74C5637FA4045860F0B6715D5E8B9CCFFAD046C3468
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 2acaed726c8e50f37c92504e3eeabb06966c27128ed3aa46e045209703ff58a1
MD5 f767ef002ac7da2b8443b5cd5d3e056f
SHA1 65f674db2b29810cd4a327d3670f7a78279b2728
SHA512 a5aff872d7524a5bf2e667adabcb441635ff63ec0987550d605739cc1665e31bc1fefe1ea0caf38bf8543bf4b28a9a8a236b91552eca940b5a434def9efc4ae5
SSDEEP 192:D1bkJvsIbj+OJwJbRaIaEdffOAxEywPENRIk5uVNIRdPiKV09exf6qRoHPl:D1bAvsIbj+OJ8bRaIaEdffOAxEywsNRW
TLSH
T19012BDF7CAE8876E8C3316F4D614AE1FCD2A0668422D7C4A89D8EE4B93F2431D14655F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 0787b6719876ee7ea3ec4bbb446172484ae31f0b7433061442e97b7eb792f56a
MD5 f710688879797e00b38ce27587fbccb9
SHA1 7720cc2ce2390de7ca0ecbcae2a9caa832355517
SHA512 e114987f7e08b34d8259c4f396e5ae4549662cbfec87a9bc5d87055f7011850465e44b159c21f7964d6a1b173acf38542e81b19fd03efb5018bef0b06f3da9eb
SSDEEP 384:D1bAvsIbj+OJ8bJ4eGKaIaEdffOAxEywsNR3QNIRdqKV09ewXHB+TRaY7R+Kp+Ws:mKAO0X9b
TLSH
T1A242CDF7CAE8876E8C2356F4D614AE1FCD2A0668422D7C4A85D8EE4BD3F2431D14664F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 28KB
SHA256 a5cffd503f516fa9d8773a767d40030b28a00193b2b6e754cf63da15dc352371
MD5 8569f2d2369a0406c2c90f1675a3ffbb
SHA1 99ea5b22cb84a49d9a5f75a13c628f1a7bcce9ae
SHA512 174014250491064e274cdde4b287fd24ad894d9a3797979e985492f4a964fad13c98a1a699e9f2d3b39a0e1355af8fd682c7dcb5c72345908b026ace3dacea5a
SSDEEP 384:D1bAvsLbj+OJ8bJ4eGS16e5AXmCBe4na4yebHsW2wx0pHJ2eNaIaEdffO4wqa7jz:5KgMsTeWMxjI4coE19
TLSH
T1D8D28CF7CAE8876E9C2356F4D614AE1FCD2F06A9422D7C0A85D8EE4B93F2021C14655F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 35KB
SHA256 ae68521120c03fcbc9bb75188273359c4f086180b02fe489c672d32b9127c2ab
MD5 9330624ce6b844b720cb8907a52b7ef4
SHA1 5e98735fc332144d299ef81126a2104c1b0738d7
SHA512 ae4f40d39868d079ecf90b265e0d4ad32c3e58889405d00819068f9527d3a91d607446f039a05803b2c3bb640d56eedfbad6d419aeed5165842ac9e48bf83d1a
SSDEEP 384:D1bAvsIbj+OJ8bJ4eGS16e5AXmCBe4na4yebHsW2wx0pHJ2e17ZXTeWMZ3aIaEdP:mKgMPp0WMxFYgyPILyq
TLSH
T1B6F29CF7CAE8877E9C2316F4D618AE1FCD1B06A9422D7C1A85D8DE4B93F2021C14695F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e6c0b924005b09a4129c65947a6775573184862103602f2bebd64c836983ec36
MD5 9df95d55839b680a02cd818793045dcb
SHA1 89215d29460e54daf23060e6a0e791c0ab2f0880
SHA512 e62c2b5acc5f820b2875eb924c13cc1c218f48ff64e933cbed5d843651d1ba89b67d3323ccdb61d134c71e1d4c0ce14b1852819fd0edb3c67fe50a75d3006481
SSDEEP 192:nRuADkh+EP+bJFU4v7lpupAPRp2r19fHsb+WNnw8VhZO2bT2aAOCVyIsnAUge:nRXDksEIQkZgUXmRwTVG2H2aie
TLSH
T11142B62AB910793B5CDBD329F9617B53D7F5102521942E80EBFC8A2C29E79CD3217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6d3fd0a71bea6e22428d8ee3f5eba4d3a0b1b3d5dc2e58162fc9c6cc650df8a2
MD5 29cf59eb7eed554e28bec320d41ac1b6
SHA1 0fe91637d0d5826280bfd3ac8f91f74fbceeb096
SHA512 e62dbc9392a581e5e9f49262889a8835dc0151d2ea74ba1aef34020ab50d5cd57fcacdbebd3d70f19766be8424ff95e0abb5071c14b680859a072ce3abf67ed8
SSDEEP 192:nRuADk5+EP+bJFU1v7lpupmPRpQrS9fHsb+WNnw8Vh43ejT2aAO8VyIsnAUgE:nRXDk0EIQFZg6X/RwTVCe/2a4E
TLSH
T1BA52C82AF910393B5CDBD229F9617B53D7F4102521952E84EBFC8A2C29E7ACD3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 107bdd5eda95446d5b467d76fe5f4e49da11c145012e9c71876bc033b7113be7
MD5 04136a22dade82421654d44f14c04414
SHA1 e9a1ae550fa6f7dceb1a649dcfceb418f09ce5cb
SHA512 231bdee02ad96b9d9908f17be192c3e4c3cec6bc8977f8d870c0ba689df450b3b3c5d63a5bda59406d737fe9046bc03ba5614582584d1d25a9a72535a8fd59db
SSDEEP 192:nRuADk5+EP+bJFU7v7lpupmPRpQrS9fHsb+WNnw8Vh43ejT2aAO8VyIsnAUgE:nRXDk0EIQDZg6X/RwTVCe/2a4E
TLSH
T17852C82AF910393B5CDBD229F9617B53D7F4102521952E84EBFC8A2C29E7ACD321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 edfcd4bde278035bc9f87af77ac468fed549fba05fd2e26d5c8425dadfdc0a51
MD5 e75d849401dd407f665c2cb98372c5b1
SHA1 2b93d750949b67ccdb436535d7a05b298f56a675
SHA512 bfb0d1a6cced0f671e90ddefc031fc437204fe46340cd07fd06a8dbb238f9fd72d79b750b1b9e6a3cddeff307f4c6ed3e532696e3389394511edc9691c5da382
SSDEEP 192:nRuADk5+EP+bJFUTv7lpupmPRpQrS9fHsb+WNnw8Vh43ejT2aAO8VyIsnAUgE:nRXDk0EIQrZg6X/RwTVCe/2a4E
TLSH
T12752B72AF910393B5CDBD229F9617B53D7F4102521952E84EBFC8A2C29E7ACD321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 51e0085fad3624f4f54e066093818873c8100a533c31debff45f84ea4b0a96b7
MD5 d835552c90d79b7117b592b49605f119
SHA1 2392df78654c960c3ccff3905182fadb7d6488fd
SHA512 0554cc5721d3d02d5ea296a98f4b23b9a8f72345ebfe5edd4b96c8bf4e61f37ad0af85d0e59698ed75f40f2432b3d8ceae97b770d058c3fd9cb226acd3c92423
SSDEEP 192:nRuADk5+EP+bJFU4v7lpupmPRpQr19fHsb+WNnw8VhZO2GT2aAO8VyIsnAUgE:nRXDk0EIQkZg6XwRwTVG2s2a4E
TLSH
T1F752B72AF910393B5CDBD229F9617B53D7F4102521942E84EBFC8A2C29E7ACD3217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 79ea521d9f3df87d24eec0f3607ae01ff8cf6eaeb5c7802f7c4721f58b8ddead
MD5 5d35f09b8c86835fb4877dcd0cc40e4a
SHA1 71d399e3fd153dc456fddb8f9cf7b1d428dcd2c7
SHA512 68050d4d5a4a4f94c2a29dfff1edf5350066ef5a2e47ef11dcbd09970c2009d28d7804e59c25d64e43ef8e1367105d32e929bef6a7a0e31d18837b193891b321
SSDEEP 384:WQjb+7KxkXqKf/pUZNCgVLH2Hfgsl5g7pLuLcSjQRXODaB+ErU39rHGQ3uKHaaK7:WUb+7KxkXqKf/pUZNCgVLH2HfgsLg7pn
TLSH
T1BF72F967BC4C9A370F94C6CDD8267A4FADB5024B65DD886483FA982903D4BCF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e526f7c8e98718fcf66239c40b9a39bdf5b8b1eeeadd50e28e202e751088f704
MD5 4edfb60103925989ee1ed48570f6c54d
SHA1 8eb4147eb451efabbf51f5baee1209c04a9464ae
SHA512 73d88fc5869551bc96b117ea9e7d5d0f9f73919c8458118b5e377fe1b47edd09c60f52c0ce128a389a6160aae3b9b41055e950b0f20b8b4467dbe3eb5eb5bffc
TLSH
T129B0124084025213C00B07F42543148CB264DF21960E170563F4BD36C8296908018071
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58177b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58177b.TMP
Size 96B
SHA256 f8f1f9eb75285b63e6add25eb9a96e74cee12b7762bf18732e605eefb119ac64
MD5 a4b9696446f102f2204fe4f779950e12
SHA1 48783d5cd3b18b89ec9b796ad10a171887a947ea
SHA512 740dd01ff58103acb3b8223dc9e120e99cb32bc51b5173b8b66a11077225523dc7867f9f561e2d7d340059a6a9b2db5dd088990fb956a76324e00ad8aec41685
TLSH
T1D1B02208E0022322C00203B82E8882CCB3A2CF28C2030302A3E02AABEC28E280022830
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 2f484afb662c89acdcf8b77c9f0ec165f0b6481590167c88b3db77ae1a8282de
MD5 772193bc054068dc730e58f278716fb1
SHA1 2c1b03f437736062d406644e5f90b13e2849f46b
SHA512 d8fec74ce1c88832af60c36391706a40bdf179945fdc00a1a6f327426c30dc7998e0cf9c5445102ece3097c393cde38e53cd5b2e1f577eb17872b3ca24081c3c
TLSH
T1ABA0022321C86405C28447B21EDA415027A16C200329464944F1D4448C6D6D24385201
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 32923d5fe08574fcd3246fae2619298575613de422a1a71b04657175cb735f4c
MD5 48bff4155628554f543b655bcf7e16f0
SHA1 6bb596c26dc4c358b305ecd142f884952658176d
SHA512 6d636a55a7e7b3d27574269b6eb400964d21e65b4a67a3b87b9a5aaadcad28f12c132e40c37084aba0ae9af9f09e0f49bf697f57e3edce847617e23c05fdd3ab
SSDEEP 1536:e3tueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:SMDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1C4C31211CEAACE9BE4E4AC79D0C517F3AEBD4F9527F1B94281A6A4423DCE7442391730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 ce6313b2748dc87076f179883782b87fb5cd93253fa212705bc6c5956b2b2fa0
MD5 f46cb0b1b1b98dc8facbfe7dd378b55b
SHA1 11737345cd361a50190b2e64dc6ffbbfcd2819a5
SHA512 6124c53b3af851d44f57b26104bf88eac34ee899b88bc431350be58c45f9ca5dec16de585bdad752d1c94831b4cb2e62ab6869de654b30f35093f7217ca6fe96
SSDEEP 1536:n8ueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6mq:PDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1D6B30212CAAACE9BE4A49C79E4C413F3BEBE5F9523F1B9424166E4023DCE7042395770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 27882e9da4cf925ddd426835a99665bda5c998e59211a84b1967f14bcd9c0c7d
MD5 49ca063968d1a03b7678b22eba0713c9
SHA1 d1e980768c7fa783de47e8c7a95e1127ed009a07
SHA512 c20b6f7f90611131fd64ffed1b4a13529e08a7ac1874939d22dd6eaa307c7dbf2746d74a17d5a425b6ce590cf653e2554d3595a8db574f81c92b2d09fe6c9afe
SSDEEP 1536:K1XueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:O+DFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T19CC31212CEAACEABE5A49C75E0C513F3AEBD5F9527F1B94241B6A4023DCE7042395730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4f832d847b7259bb1687889bb02f367c62933bb7ff30848d3373f5055fd826dc
MD5 01f6549ebe6d257cf66db2d52e0e401b
SHA1 c807582e666704309c8330550f4b860d941754a4
SHA512 6a97cfd312fab7f0104f129237e5bb0378507123d7a9e47eda993a3fa46bd5745469ff046c073ca7e44e57d25330d7b796c3f9ee300aa91ae3c49f3726c48931
SSDEEP 1536:31XueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:F+DFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1CAC31212CEAACEABE5A49C79D0C513F3AEBD5F9527F1B94241B6A4023DCE7042391730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 503e3afe88fc4fcaf1262fa71f9c2338bf7d6a09bacd06e0c119cca398146a8f
MD5 3f956514da2b3fdf7b6ca018f25f00fd
SHA1 20d356ca6c7c8a9fcce284886fe0b889abb71bf3
SHA512 e47f8ec963e52fed9831d09f86da0c828003277ecc76d4ba4349d5dc5ab93426bc1593c48a2ee7103709440844b37e6b69c096372b7168add72954a6436bd52c
SSDEEP 1536:K3tueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:mMDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1F9C31212CEAACE9BD4E4AC79D0C517F3AEBD4F9527F1B94281A6A4423DCE7442391730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download