hxxps://getcdn77[.]host93s[.]cfd/?tag=u7tY5vH4

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
899s
max time network
879s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-es
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-eslocale:es-esos:windows10-ltsc_2021-x64systemwindows
submitted
22/04/2026, 23:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://getcdn77.host93s.cfd/?tag=u7tY5vH4
Sample260422-3lp44adz2z

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5004	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134213746195578151"	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2783838373-340812344-1280766377-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2783838373-340812344-1280766377-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2783838373-340812344-1280766377-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2783838373-340812344-1280766377-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2536	chrome.exe
2536	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe
Token: SeShutdownPrivilege	2680	chrome.exe
Token: SeCreatePagefilePrivilege	2680	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe
2680	chrome.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 2680 wrote to memory of 1172	2680	chrome.exe	83
PID 2680 wrote to memory of 5004	2680	chrome.exe	84
PID 2680 wrote to memory of 4976	2680	chrome.exe	85
PID 2680 wrote to memory of 4976	2680	chrome.exe	85
PID 2680 wrote to memory of 2444	2680	chrome.exe	86
PID 2680 wrote to memory of 2444	2680	chrome.exe	86
PID 2680 wrote to memory of 3892	2680	chrome.exe	87
PID 2680 wrote to memory of 3892	2680	chrome.exe	87
PID 2680 wrote to memory of 4924	2680	chrome.exe	88
PID 2680 wrote to memory of 4924	2680	chrome.exe	88
PID 2680 wrote to memory of 3924	2680	chrome.exe	89
PID 2680 wrote to memory of 3924	2680	chrome.exe	89
PID 2680 wrote to memory of 2656	2680	chrome.exe	92
PID 2680 wrote to memory of 2656	2680	chrome.exe	92
PID 2680 wrote to memory of 3204	2680	chrome.exe	96
PID 2680 wrote to memory of 1916	2680	chrome.exe	101
PID 2680 wrote to memory of 1916	2680	chrome.exe	101
PID 2680 wrote to memory of 2500	2680	chrome.exe	102
PID 2680 wrote to memory of 2500	2680	chrome.exe	102
PID 2680 wrote to memory of 2336	2680	chrome.exe	104
PID 2680 wrote to memory of 2336	2680	chrome.exe	104
PID 2680 wrote to memory of 3132	2680	chrome.exe	106
PID 2680 wrote to memory of 3104	2680	chrome.exe	107
PID 2680 wrote to memory of 2064	2680	chrome.exe	108
PID 2680 wrote to memory of 1980	2680	chrome.exe	109
PID 2680 wrote to memory of 1980	2680	chrome.exe	109
PID 2680 wrote to memory of 2536	2680	chrome.exe	110
PID 2680 wrote to memory of 4752	2680	chrome.exe	111
PID 2680 wrote to memory of 4752	2680	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://getcdn77.host93s.cfd/?tag=u7tY5vH4
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffcb8ccc728,0x7ffcb8ccc734,0x7ffcb8ccc740
  2⤵
  PID:1172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1968,i,16010689612431831434,12350259674785347558,524288 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2076 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,3837872992562178200,16958084276298838465,262144 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2032 /prefetch:2
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2328,i,6543238305531298847,2248278524797776663,524288 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:2444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,7634039514592877731,9078509979028932908,2097152 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3224,i,13717410654409957154,14749961858348257403,2097152 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4288,i,485926467164790682,3659705188109605694,2097152 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:3924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4832,i,11254505001204613135,4362725454142084124,2097152 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5256,i,9134407108738124962,10851155543535839124,524288 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:3204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5552,i,4524950088998830776,1123457561986672909,2097152 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5612,i,9251960026649922078,5646860567653376085,2097152 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5752,i,6893096760222150170,1287133967257565608,2097152 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5500,i,6610095907950339250,9324304561239733119,524288 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5272,i,8899758902793970389,16432394478835193853,524288 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5364,i,2827186863884653026,15926148880158365500,524288 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3904 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6012,i,15929633428941998458,510741314086825419,2097152 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5964,i,11119635541844159833,17442400434634894530,262144 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3104,i,15210190851347612382,1713631695169120631,524288 --field-trial-handle=2036,i,12516270307738180966,6706396575965685037,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:4752

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4824

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ee156d84033652849203bfdc930707d7d519bf2a275ef038f65f7344baec92cf
MD5 e8d6ea2c03f3f17c2784becd1ca86f59
SHA1 b3d8d5ac4ce4200e0903248ef3269d2bc8f6fca2
SHA512 42bbf1db50fdeffcbd81e0fd5a70db05f02baafcb198fa82452d6a981973725fcbbf77aef933883ec579d39e8a5dff34b32e69089861fb6f702eb582bc443c69
TLSH
T1F4E0E5FAC920EC2715F90B19A0508745EA5413973A51841B3A3DD20A5F70276429685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000027

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
Size 64KB
SHA256 0ef77d4029b29673af82e8c5a390f85263eec6306a71a0525373645aecc6d46a
MD5 c391cd33787057e33f54de4da132c5d6
SHA1 cd3cce43047b37afac67ad702e7b8bd9d8bcd64e
SHA512 934b5277eea630627ce3d19d38e415106d7d0e028889ad287489f72235278b505214b9a0a95b2b0d192a8ad974e1dc86bdfd4fcddc43fd13fa97e2994b637eee
SSDEEP 1536:IKCNWsnKSX/UfTp9lfhtMJft0UsbHsTWaLktBlG0O6:50fyTpzOlWcd0O6
TLSH
T1A753021AD8CF600E92D75B299A58D7C1A90F19CBD09CB20F73AA0D02392DC4575EB77B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 1948ee30a00468ba25ecee59d54b00143fd441b1ca22c58282281d1da04d072f
MD5 6850f5de28980749e17973b38326f3be
SHA1 cb14c39f40670a5eb18231b2b5348b69f8f3f737
SHA512 7dc01562391ad750d4fcb8cdfd6c98957afcd7199c1c5e7a195d8f977354591966f98495b0a917bf90ec78fb0327b82af1fe1c2e2aa100f685bdc1f9d05ebf1e
TLSH
T13B3198F566E0D5F8CBF84D7DEA296F3E0E602B4D40413E8A93D46D14EC4709438820A5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 29105ffc18479fc40b8fa3bf2763b746e25733e972ba9463ae55c1573ea57f50
MD5 6061b1cb76596f4b24bd7dd9bfeb021b
SHA1 215939d4348bef711a5b8e3df05f6f9b3eb19d07
SHA512 1a735e1d976a6e1b83c4ccbbbbaa9a65584b21d18362fb9d561a0af823eb105f8deee746e0391242988a4608d7cb6d29b6ed8d89730f3f789195e00b608976fc
TLSH
T16811450991D1D5E9CFB88DBE2B503F761D412B5941903DC9C3E47D18ED870762C514B6
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 444ff1456a35110f7f97e9b6cb06440832e2cfe4745416edad8f315b10a5b1d7
MD5 a936f778bd4a8fa23f381d0b62777c4a
SHA1 52746df5ef577a4c2a1f6c57fa5332dd4a26c422
SHA512 f59ccd93b086cbb267ea6eecc33d8f3b89eb6ec19298ff562787ddf47d8736e8bfbb3b6b0b4f62a6ea78005152bdc3f286dd76563817665d82791b16ed9b23c4
SSDEEP 384:DEHrsdlbd3buR3f393J3A3H38aIa/xGSun8RhHIAsQsRMTV/I3V3z3k3E3W3q3gf:gA
TLSH
T12842C2F7C3E8C62DC81166F5AB256F1ECE59092853283C67C9D4EF4B97E2871D201A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 785529aaf60c055ba181dea5443b0c85d03217a8c9b2086f9b466001dc9ddc08
MD5 3301b7dc7bc8c8e9c8f9a9e14d4e1102
SHA1 1deb4ddd57261336a6b7a875776dc2ab63c6c726
SHA512 3eaf4ad8c75577dc09826c76736726e49fabb0551dd59114602060172c314ac2f90adb4828ad6b5232889612e6638bcc0de24335cd3649ad6eb23bcca03b2a24
SSDEEP 192:DZX0uitqA+w+g3Y3C3h3b3233ElaIa/xfOf6fknEdhUsuZSkqmI3V3z3z3E393qj:DZX0uitqA+w+g3Y3C3h3b3233ElaIa/P
TLSH
T14E229CF7D3E4C62DC91196F0AB25AF1ECE690924532C3C66C9D4EE4B93E2472E21174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 de9016de1a086f268e447f049a5ddc93d68ee0b3eec16a6b5d5f17bdae6a9caa
MD5 65571c5ff7fba20c48c5dbcc4dcf2172
SHA1 04cbd4d96eed66333c00b7206e7be6e62d6cb656
SHA512 d43b39c9bee4f3063a3d6964088a5b04a666d9ab8f07acb62e17f82969671394406057e6db61bfd3148175d691e6278108f4ad2f09f7c74d1217d4ebae2d4844
SSDEEP 384:DEHrsdlbd3buR3f393J3A3H3ADlaIa/xGSun8RhHIAsQHMTV/I3V3z3k3E3W3q3z:ag
TLSH
T14142C2F3C3E8C62DC81156F5AB256F1ECE59092853283C67C9D4EF4B97E2871D201A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 4e30c6e73df575b1c59ebbde64b4bdca9633caaaaff95c9e66ebbe72347a0d6c
MD5 b883ea07f7db29b5709764440d5cc701
SHA1 1ef65286e64ce1f5ab9f57b93b2db5ce78484d7c
SHA512 4d7c6fab02db7fdc7f6078268e0ff55937b833b30c46e7149f0fe1331b2c41bc36239bf6868bb4e7d5806c93a1a07f1f449314409e2f75a13953bde0a7df80bc
SSDEEP 384:DEHrsdlbd3buR3f393J3A3H3AXaIa/xGSun8RhHIAsQsRMTV/I3V3z3k3E3W3q3U:WA
TLSH
T12742C2F3C3E8C62DC81166F5AB256F1ECE59092853283C67C9D4EF4B97E2871D201A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 680868c522fc51e743f30c0acd59b887ce586b47a38c5fd0a71dcf9804854521
MD5 1b5de9a1505a5d3047b84a9c9e3ebffd
SHA1 8313ef02ea705ed0258943f3b1e109b207642afd
SHA512 d2f5affeb4b7bed30b2a02b2449a2c53218f484642894cd1916a1ec83ae56389c7ffc0d38ada5cea25c3bf4a6abc585213c02c7566429ea6685f60d09ef2fc45
SSDEEP 192:DZX0uitqA+w+g3Y3C3h3b3233EQTaIa/xfOf6fknEdhUsuZSkqmI3V3z3z3E393Q:DZX0uitqA+w+g3Y3C3h3b3233EQTaIa9
TLSH
T14D22BEF7D3E4C66DC91196F0AB25AE1FCE690924432C3C66C9D4EE4B93E2472E20174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 dc9c827a90939dd99e0e7b45fa84f03b55c2721d41fbaeb60926f079e3d01eee
MD5 a7a1829d58a406562b10fc3a08b5280a
SHA1 f227388e9614f228f0245870bd87445eb917555d
SHA512 f273cf7d944ea9088a33f80be32a369547192fa818eee8d76383713d5359d9d71b23fede309156a9d83a80e129ca42d5acdbdea3e768e88dfb5fe77748178d8a
SSDEEP 192:DEHrsdlbd3bupaIa/xfOf6fmn8RheQQtDIJAIAGT:DEHrsdlbd3bupaIa/xGSun8RheQQtDIF
TLSH
T125F1A1F7C3D8C62DC91156F4AB156F1ECE2A0A28432C3C66C9D4AF4B93E2871D25175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 450bc7a5006fd733b7369a594c8f0f37efd6ee621f8c8a8c3b9a9f64a4d2ef8e
MD5 708910845696c2fdbd2c5501cee9bcff
SHA1 02474dc4c830ed246c27717d627327ac58333c3c
SHA512 4d08c2ee2391cb00f5df3f8acf60988e9a404487af1e6d8965e1433562b8782d897349f1ec9b59dd4ebe23179090567bbb5187856e502abfa57b7dcb734e6ad4
SSDEEP 192:DZX0uitqA++g3Y3C3h3b3233EQldaIa/xfOf6fknEdhUsuZSkqmI3V3z3z3E393v:DZX0uitqA++g3Y3C3h3b3233EQldaIa2
TLSH
T1CC22ADF7D3E4C66DC91196F0AB25AE1FCE690924432C3C66C9D4EE4B93E2472E21174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 de737ad9a84ec44605ebc74d4d4f9278b6d62ff8e8908e67ba7e36e0f6e0243a
MD5 b73530e762f717b9e6d355ea8ae07a1b
SHA1 26dab03e3acaa4c3381d054aa3bce3dae5e34b19
SHA512 8b3ebb8989d4fbb2b2cf667f3a5d32a68d52e3bb9dfc9f0fb903e7cff57bc3d9a2edd3a60854cb54ba94876061c1e5a834af1f64335865634b958035dbe4ec05
TLSH
T1581189A7C2BE7967102D48B71D45BC8A2A7AA831029074F0EF6E40AC7090DE31F06427
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5728ecbe11a188a257828899e2f1bfd0dc4d05c7fe85cf87609650e4f9d522b4
MD5 9cc3a1fbc512cb0e9ffebbe7d8428e11
SHA1 3835a0c19aee0bf32ca1701b4c045550ff9ba4fa
SHA512 f489c39dcf581c29941cc5823b51df0de975ab8b90da40c6bcff424bbf41fe9d6e085a3bfd198fed4a0d39d24bf284011467b30fc7a5256e0f1aa9de69c10273
SSDEEP 192:6RxrBsDibcGv74npAPRp2gpm9GHsb+WNHnO8Lqg43BBtV2OuhgkwHad11GVyIsnR:6RxrYyEnUX4kwHRB4RbV2Oxnad10e
TLSH
T1A052D72EE914657B5CD7C229FA61B71BD3F5202271D02E48EBFC8A1C24EB6CD6227117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 75afc4a012d2e5f593fb2a0d3bb02906d610d1fb6510727c92369b6a74749d9a
MD5 6fef19b629b4a838379b87343a073bb5
SHA1 7b76885655f50f2c1f06cc0e47f8bfd6dcfe5b09
SHA512 7a43322555801a8ab9d4c45263b929867348794b34d48ea2a2ff93fdc875e0e42c7586c3b414b89e235072fee044ec0c50e549224466cefcb65be4cde5e751aa
SSDEEP 192:iRtcBhrCsDibmJv74npxPRpxHLDG+Q9GHsb+WNHnO895KWXK2cBBtV+GyYChgkwN:iRtmhrdJEnLXukwHRf7qbV6Y9nad1ovz
TLSH
T11262B61EE824657B6CD7C229F961F71AD3F5202675D02E48EBFC8A1C14E76CE6227113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f445c36700217520bf84b9308f09738c7a729baa453942e090fd324efeaa3f8e
MD5 2dfd08df50bf8bec172e55da29c9ad4e
SHA1 40e6e523fccbb68c3562e83bc77ea63079a9d237
SHA512 a302b694b99a0026a388c38288b329f6905914f40635c87be103b52d6652aae7bbc8624d7cc3c273af7ab11718324e113c55d072c758c4c54865d117f3b2c952
SSDEEP 192:iRtcBhrBsDibXgv74npxPRpxHoD2m9GHsb+WNHnO8LKWXK2cBBtV+GyYChgkwHae:iRtmhrz8EnLXwkwHRr7qbV6Y9nad1ovz
TLSH
T14C62B61EF814657B6CD6D229FA61F71AD3F5202675D02E48EBFC8A1C24E76CE6227013
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 1f9aea3338401741ebca0526a2eb0f3c903e5bce47d394452d41a6e9ad3c191d
MD5 62205dc9c5d857f1a86f26631eb418a5
SHA1 d5274b1d271c7d340d4e505e92e464894171a1c6
SHA512 d3ac329742d52b2ee10eb5472dc371ace499f00017d378f22e7e9a431c6bb6995ff8cef8cc1f9472eb60d45b9d6573cac1f6fd98592cbb30605f2da5bf0c0019
SSDEEP 192:iRtcBhrBsDibmzv74npxPRpxHLDG+Q9GHsb+WNHnO895KWXK2cBBtV+GyYChgkwN:iRtmhr6LEnLXukwHRf7qbV6Y9nad1ovz
TLSH
T1F462C51EE824657B6CD7C229FA61F71AD3F5202675D02E48EBFC8A1C14E76CE6227013
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c11bb4b5babbd82b6f342ee4859bf6f193a622500fa3b295a650fe07387abdae
MD5 26e9f703df4e0f957ea21ab55eb2de74
SHA1 68a79f79c985eeb45367bb62486c78ef97c8eec2
SHA512 073f558bde147bcbb5d4aad16134283305f8fa55fa85f7e2d3ba3fd0e5cc81624262cb99196f6cb0ee8bd0970ac1a4671548355d20559843b0c3fdd4aa961af6
SSDEEP 192:iRtcBzrBsDibXPv74npAPRp2HADum9GHsb+WNHnO8LKWOBBtV+iu2ehgkwHad11S:iRtmzrzHEnUXBkwHRrAbVK2Bnad105z
TLSH
T11352C62EE924657B5CD7C229FA61B71BD3F5102275D42E88EBFC8A1C14E76CE6227013
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b5a9b65a5401c9d11ea3620d63bf05fc3174944b307f5457261380ece779f9f1
MD5 f1188b76235ecaa102ee555276d93344
SHA1 e7f61f7091de13a5a45c468f2a7525e70f107de0
SHA512 6b07e78129f7a3d8e555420db9a195b79776964dafe8576a108844bd83dc8fad2d8f047d21179fb8dc6d85b029b04eb51e38f9e6bf23566c2c8e8ebfa9aaa0ea
SSDEEP 192:iRtcBhrBsDibXPv74npAPRp2HoD2m9GHsb+WNHnO8LKWOBBtV++yeVhgkwHad11Y:iRtmhrzHEnUX1kwHRrAbVSecnad1cvz
TLSH
T15252D72EE814657B5CD6D229FA61B71AD3F5102671D42E48EBFC8B1C14E76CE6227013
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a9ee3451ea75b14d1b32508c6bd9a62b99cf466255a6cc0de86a8bb5e9802fec
MD5 d2770155e9a3476411021b6c7d0682fc
SHA1 e827a5ee6b60c3f6bc3a4fbf76b2648db6f7d3fa
SHA512 47a0c6318c15f56a8a1d927647992391bda7566f56d0747894ecbdc15be17fce89fca0b7dcc3f52e75ad3e6609bee99be4b89ca592f52f4cafc483ecf62220c2
SSDEEP 192:iRtcBhrBsDibogv74npxPRpxHLDG+Q9GHsb+WNHnO895KWXK2cBBtV+GyYChgkwN:iRtmhrE8EnLXukwHRf7qbV6Y9nad1ovz
TLSH
T1D562C61EE824657B6CD6C229FA61F71AD3F5202675D02E48EBFC8A1C14E76CE6227013
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 976816d450a5622be65e5bc9eadf0fc67517c76fa949556a5e06ec11a98e3036
MD5 ce3b8db78044be23d5326dbb2073331d
SHA1 1f1f42e96a658ae7bb17c418713b78dacac6849c
SHA512 0b9ae5cf54d77535674980cbd75f1800f774a7fae0364f9b63bbeb306eeaae28ac82d8cb40264b610b810f2e45d8a138cc697adcdaa4864f430a64a8fe245e6e
SSDEEP 384:zZj/y7KxkXqKf/pUZNCgVLH2HfgslKn7pLILcmfd4XOD/W+ErU3buH1zuyjh:zp/y7KxkXqKf/pUZNCgVLH2HfgsUn7pV
TLSH
T13A72E9A76C4CDA770F94C6CCDC26BB4F9DB5014B65E9C86442FA981A03D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e49f049b282369537f5ebc2dcd0059bc05275c5062428d03f7b691eda5878b5c
MD5 c914658da08e753ab70794eeeff52f69
SHA1 45027bc990a7f6c5536ee230645d4b00a95b9769
SHA512 554a75f08cc88c92b4a37543da33e6245c01c56ec0cd108351e2e396247759c90faeccb396c506eb4eba76e88c7419762ee0112f7a684728bc930b406a57e251
TLSH
T189B0125080429501D40302F816C318983128BF20CB49170253E079B19D262914118190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58aff2.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58aff2.TMP
Size 96B
SHA256 b8fcd77bc7b03b3af5c92880f52812c280ed225f4b5f8c1f4699a15d6aec1a18
MD5 75172944a5663b654af0eeef6e4d098a
SHA1 493c6dd9f51f6fa8d2381f79f5ac7f8d44cd8f8c
SHA512 5707bf4e50ef04a3f185b8e53f9187fd85b3496f083f2072c9e972e8ce690a6278fa2ebaa3e8a1be15c8e04d42ba62720c1e62d387c9279c4fc2f0051d397c23
TLSH
T1DFB0025DC262A212C05603B02A969BD8B172DF35DF032256D2E21B76DC256758525570
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 db0b00adc924dd26d9d23b25fdedaf85c45cebc84ff8914c9e93e1396509412a
MD5 a99c932b976bc176efd87c848ba70ab9
SHA1 0cf285db4bf0dcf4951a339e73d33a12210a6531
SHA512 0df4d918f45366ebe1a8ca795039c078ac4ac401cad82285b37d3583dd04b83fe620d2b63fbc16117e3d2d56268bd52e0bd25835cb8a17b568f42ecb38aa66e4
SSDEEP 1536:F2sKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:MsDlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T1389302B7396ADC77C5DC1102A53C2A4D2AC4B1EAD81CB57969CA7B7F00F1BE99143113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 787e90069f4049da7cefec48ca3b3831be58062bb4d3fda14b93550f4e5d8829
MD5 96ee48f711d8f58e8581e1388ad38969
SHA1 2fc6d980e327df8d40c8e3b3dedc62c9e03ea75e
SHA512 2b9bf68164cbbc3605725a8f9299bc2f0284141c5e97635db5480d64877c48dc399f50456dedd7e6c710e5639a49c60f8df6c671cdf93e10506cfcf04b09c83d
SSDEEP 1536:MEKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:DDlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T1C39302B73EA6DC73C59C4102A93C2A4D6BC4F5E9C829F66658CA773F41F2BE99103112
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 0ba7b966eca9d77c5a6840f5de5fbb51a9bdd1bb66cb64d8d7b646eb605baf94
MD5 169902090baa848074764953a7efff41
SHA1 df7c93a4c437dc2ce404988eb849e4329384c4d5
SHA512 c70d7f8b22cb8618a2a05e01b5d1e5c194f92e3c446d8a58ef53e9dd11b962039b30444ba8b3d0f41039c1a94ea028225fdd11d46e98cb919e74687910d462b8
SSDEEP 1536:K6vKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:HvDlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T1BD9302B73EA6EC33C5DC5202B93C2A4E6AC4B1EAD818F57559CA673F01F1BE95203112
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 767be0f2149488e30aa66716b12c245a017f9f12ae9706afd7635fa622949e41
MD5 66e99b26b0dd63e2d644a4666de1dd33
SHA1 ef0eb161c1aec04a0833660887efa74b85017098
SHA512 d8fd563164c9f639ea0b09799a50c1721ed8382b6babf8f1e54730de7fc237e6b5c06f044d976346e46c3758210496274e3bfbab42bd744ab90e954082a08bfa
SSDEEP 1536:11vKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:7vDlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T1419302B73EA6EC33C5DC5202B93C2A4E6AC4B1EAD818F57559CA677F01F1BE95203112
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 b671bd79eb468bc18451742fe9dde6055f7d2be2e8842569d46462275355210c
MD5 b7be78ac080195d058da3360e66a5485
SHA1 b0f4d9aa4da869024e71e81f66b0e7c105d5b4ac
SHA512 5a17006a7bbb2d87595f366e7df86cb64320cd30e3bb24f4ec10e466e4acb52d3d4f2961d45a0b36ee9743c6ba9f9240470be00b69ae74aad63e7abf4af6249b
SSDEEP 1536:12sKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:8sDlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T1199302B739AADC77C5DC1102A53C2A4D2AC4B1EAD81CB57969CA6B7F00F1BE99143113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 8f8f0fb4ac84308ddea1b8062455f6f0ffba9289a6a630f6c08ef749cd8a29a7
MD5 4e74c360bf3acef4f68f6011f1a8cf40
SHA1 47abc39996c6b03f9f07081369485d79d0f6abcb
SHA512 b6c084f22d5a87b9c51b222b3efe74dee76deefceb415b3d18422a87d7577f2574e149e7175352bd26f1dcfc4c89b62db0f1dab73be5ac4583bab1bd38478685
SSDEEP 1536:K1vKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:ovDlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T1F99302B73EA6EC33C5DC5102B93C2A4E6AC4B1EAD818F57559CA677F01F1BE95203112
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4824-13-0x000001DF55370000-0x000001DF55419000-memory.dmp

Download