hxxps://www[.]google[.]it/url?q=https%3A%2F%2Finstitutomaehilda[.]org[.]br%2F[.]well-known%2Facme-challenge%2Fdrs%2F&sa=D&sntz=1&usg=AOvVaw1BfOEQ1eYJ-SK99G5snE_Y#?nh=Y2xhdWRpYS5nYXJyb0BpYXMuY29tLmNv

Analysis

user interaction
yes
max time kernel
300s
max time network
302s
platform
windows11-21h2_x64
resource
win11-20260130-es
resource tags

arch:x64arch:x86image:win11-20260130-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
23/04/2026, 21:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.google.it/url?q=https%3A%2F%2Finstitutomaehilda.org.br%2F.well-known%2Facme-challenge%2Fdrs%2F&sa=D&sntz=1&usg=AOvVaw1BfOEQ1eYJ-SK99G5snE_Y#?nh=Y2xhdWRpYS5nYXJyb0BpYXMuY29tLmNv
Sample260423-zze99sf14p

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3188	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134214521746173215"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3119821332-640943685-2562343641-1000\{B1FA3022-DA1E-4426-8F38-71C167344B49}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
2584	chrome.exe
2584	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe
Token: SeShutdownPrivilege	4916	chrome.exe
Token: SeCreatePagefilePrivilege	4916	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe
4916	chrome.exe

Suspicious use of WriteProcessMemory 60 IoCs

description	pid	Process	procid_target
PID 4916 wrote to memory of 5056	4916	chrome.exe	79
PID 4916 wrote to memory of 3188	4916	chrome.exe	81
PID 4916 wrote to memory of 1232	4916	chrome.exe	82
PID 4916 wrote to memory of 1232	4916	chrome.exe	82
PID 4916 wrote to memory of 4348	4916	chrome.exe	83
PID 4916 wrote to memory of 4348	4916	chrome.exe	83
PID 4916 wrote to memory of 3148	4916	chrome.exe	84
PID 4916 wrote to memory of 3148	4916	chrome.exe	84
PID 4916 wrote to memory of 4356	4916	chrome.exe	85
PID 4916 wrote to memory of 4356	4916	chrome.exe	85
PID 4916 wrote to memory of 4260	4916	chrome.exe	86
PID 4916 wrote to memory of 4260	4916	chrome.exe	86
PID 4916 wrote to memory of 4760	4916	chrome.exe	88
PID 4916 wrote to memory of 4760	4916	chrome.exe	88
PID 4916 wrote to memory of 4564	4916	chrome.exe	89
PID 4916 wrote to memory of 4564	4916	chrome.exe	89
PID 4916 wrote to memory of 3504	4916	chrome.exe	90
PID 4916 wrote to memory of 3504	4916	chrome.exe	90
PID 4916 wrote to memory of 232	4916	chrome.exe	91
PID 4916 wrote to memory of 1724	4916	chrome.exe	93
PID 4916 wrote to memory of 1724	4916	chrome.exe	93
PID 4916 wrote to memory of 3508	4916	chrome.exe	94
PID 4916 wrote to memory of 3508	4916	chrome.exe	94
PID 4916 wrote to memory of 4660	4916	chrome.exe	95
PID 4916 wrote to memory of 4532	4916	chrome.exe	96
PID 4916 wrote to memory of 3964	4916	chrome.exe	97
PID 4916 wrote to memory of 4796	4916	chrome.exe	98
PID 4916 wrote to memory of 4796	4916	chrome.exe	98
PID 4916 wrote to memory of 1160	4916	chrome.exe	99
PID 4916 wrote to memory of 1160	4916	chrome.exe	99
PID 4916 wrote to memory of 4548	4916	chrome.exe	100
PID 4916 wrote to memory of 4548	4916	chrome.exe	100
PID 4916 wrote to memory of 4724	4916	chrome.exe	101
PID 4916 wrote to memory of 4724	4916	chrome.exe	101
PID 4916 wrote to memory of 2772	4916	chrome.exe	102
PID 4916 wrote to memory of 2772	4916	chrome.exe	102
PID 4916 wrote to memory of 4536	4916	chrome.exe	103
PID 4916 wrote to memory of 4536	4916	chrome.exe	103
PID 4916 wrote to memory of 960	4916	chrome.exe	104
PID 4916 wrote to memory of 960	4916	chrome.exe	104
PID 4916 wrote to memory of 3700	4916	chrome.exe	105
PID 4916 wrote to memory of 3700	4916	chrome.exe	105
PID 4916 wrote to memory of 1252	4916	chrome.exe	106
PID 4916 wrote to memory of 1252	4916	chrome.exe	106
PID 4916 wrote to memory of 2004	4916	chrome.exe	107
PID 4916 wrote to memory of 2004	4916	chrome.exe	107
PID 4916 wrote to memory of 616	4916	chrome.exe	108
PID 4916 wrote to memory of 616	4916	chrome.exe	108
PID 4916 wrote to memory of 2584	4916	chrome.exe	109
PID 4916 wrote to memory of 3548	4916	chrome.exe	110
PID 4916 wrote to memory of 4872	4916	chrome.exe	111
PID 4916 wrote to memory of 4872	4916	chrome.exe	111
PID 4916 wrote to memory of 2664	4916	chrome.exe	112
PID 4916 wrote to memory of 2664	4916	chrome.exe	112
PID 4916 wrote to memory of 2336	4916	chrome.exe	113
PID 4916 wrote to memory of 2336	4916	chrome.exe	113
PID 4916 wrote to memory of 4572	4916	chrome.exe	114
PID 4916 wrote to memory of 4572	4916	chrome.exe	114
PID 4916 wrote to memory of 5044	4916	chrome.exe	115
PID 4916 wrote to memory of 5044	4916	chrome.exe	115

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.google.it/url?q=https%3A%2F%2Finstitutomaehilda.org.br%2F.well-known%2Facme-challenge%2Fdrs%2F&sa=D&sntz=1&usg=AOvVaw1BfOEQ1eYJ-SK99G5snE_Y#?nh=Y2xhdWRpYS5nYXJyb0BpYXMuY29tLmNv
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff3d58c728,0x7fff3d58c734,0x7fff3d58c740
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1444,i,8479981047441463270,1430653545952805418,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2232 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1592,i,1113476289910249012,14859571194840630448,262144 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:1232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2280,i,9028916980485670463,12090218227346812316,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2712 /prefetch:13
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3124,i,1115709402666482911,103592823356499104,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3128,i,6642459895156305191,11639601070739005102,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4192,i,11513297230759393863,10137897700492661241,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3108 /prefetch:9
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4664,i,9879790534292775014,612087214336039331,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3220,i,7364162956287475292,3366819801080818651,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4760,i,17514545347140970003,6089550612133003343,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5484,i,499499552272425059,6683214498379568222,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4840,i,18303067989801995422,10259151329270099730,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2984 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6120,i,15534460300381581983,576562885947718726,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4780,i,10931474310440249394,5270068832353063271,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4864 /prefetch:14
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3824,i,18210730989436325937,5522285542904052011,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4676 /prefetch:14
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3172,i,17962720982270034539,8380015445824388218,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4828 /prefetch:14
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6028,i,10172794483300990057,8009560852518104800,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4912,i,6368780953343061145,10641742995788025771,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:1160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,16969324240082508969,7159182047999172952,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6264 /prefetch:14
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6292,i,5936319202617933658,14455277759207933228,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6420 /prefetch:14
  2⤵
  PID:4724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6476,i,8028607507986452898,15349587212137586811,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4788,i,4773387741464627200,13100614383905036734,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5916,i,9887320609599815689,3655874956148828103,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,9603937580703090392,1931981106317275379,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4912 /prefetch:14
  2⤵
  PID:3700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5380,i,7689921940598250227,10064466198911058077,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=744 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=3628,i,15292274702206282135,16127526728981139206,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6872,i,13638407324849131717,11070670370808765326,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6976 /prefetch:1
  2⤵
  PID:616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7040,i,2783241518452953826,13215949585025779657,262144 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7048 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6840,i,14381060634526463712,10037173339959498403,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6836 /prefetch:14
  2⤵
  - Modifies registry class
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=7036,i,15265915882084371843,5175868335483783474,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7076 /prefetch:12
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4492,i,18373245780890574716,3862270066518069053,524288 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3660 /prefetch:14
  2⤵
  PID:2664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=5856,i,3194649251118370401,16144510673511889669,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6132,i,10927842176641756381,5488059573755304568,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6896,i,5224754807158396495,10507242830708391565,2097152 --field-trial-handle=2144,i,16092434607155956668,10589867127093828545,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6936 /prefetch:1
  2⤵
  PID:5044

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4444

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 26e4c26652af25ad04f98a04b6ee2a8ea6a7b123725e427c4a7bc7a9873bba92
MD5 9dcedc5fea080ec82990caa5a693cb20
SHA1 5c417ea82ae6fe21a8543bd5223bd10636d906d4
SHA512 55e00792f1ae70a37d199771eea4d7261802993c2711b433374b67e1a2d7e0ee75d0b73b7a2cd7c6b872c689f13336a753748d13c756918c6d3f2b9995e6e1e4
TLSH
T148E02BDDE9219C674DFD0B6860544B46FB60136B2740884F3B7C920C4FB053B458785C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00004c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004c
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 c1e8b55d2e2a4151e8b04b82bfc7ab47a815cc2cd3daa654c26e4afb1a3ef38f
MD5 c0b3bc07c1d3c6c55bd112f37560a95b
SHA1 b29d9aa65977553af1923301cff725b909598d7f
SHA512 8ab0756d065ac46cc7a2ab59159e75032b7e2595c7c43bd2eb54ff5236b57c737e776685399b6b0e4febf81de92320ec37e7645e7d2ae0ee1be029cc5ece324c
TLSH
T1E5B01120A0E0A822CA800238BA82888022320828A3230302CAE003AE82AABA0A000000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 62592d476afdd50094ff2801f0e9d66e7cd97bf743060975f4dbce84be1aa7c2
MD5 36b63cb859e61488ca22c3e19fb4dad8
SHA1 445fc1e2a64f9649d157ca42c933e797aa2ac473
SHA512 870e8586fdd3434d3156d0e1c1dd477ffda12d86e96f3b1c3275e3c042a18789b7548a7bbd695077139847730544067bdaec2df7c95cf087987754066b1f2da6
TLSH
T1A14130055ED4E243FF191C3C86F2E954B6F00206419B0FD344DBA4BC1C573A6A669EAE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 ce6ff5c4ca0a698f156a026afdd0884e6a62176f780c126e9a59a0118177360a
MD5 170e1a915ee8f26e734a3875b56401de
SHA1 eeea739db4de2afd7c346aff14100d8c01b12136
SHA512 373189bc3a0f18fbd237e07188d776c4d35d15db8cbef79c401365610c84b5c399818e12aa46ca9f41b6f0d92a7da0348a8ea6c3eff02030256e1a25eeba5d47
TLSH
T173310D081888D613FF095C7C95F2FA14B6F1410241C70FC391EB98BD8D577E692A0E6E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 e239e6db75ec68019a0082508e7e86e0f37d5255af39cac0d2b19c42409144d0
MD5 49c63e149f643eb94b97d23c95913c09
SHA1 2ab53afa2ae3c250011ed153764b0aa7be997b70
SHA512 598fa9b11629977feda1487cc3e1d29281bee5475f065c4fc0ea44cd54d4aa441073e4cb37dca7e512dc7b99d16573ede785522f46151bca183248f035df98f6
TLSH
T12BD0128041D4E441FF8585B6A523FDB067D2041956214F57D4E1ADB9644B1D4713011A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 707436b0c16c08bda7f32f0b3c09c927414b0b9794e2f7101e13e5bc81fc8916
MD5 63466b7c02189121bb7f7e4c9a463589
SHA1 6d6ca2f76a2bb695afe4b1ddf53937ca65df11a2
SHA512 06730f40c95c00cca2e89df80924e8d0e2fe2f84bf2d18b7cfb796d8476f24d0e91bc91b4893ebb589eafea84ca32ca5de36cb4573582b7007a40ddbd78296f6
TLSH
T1F6313E081884D613FF4A1C7C95F5FA14B6F1010641C70FC391EBA8BC8D577E6A6A0E6E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c2df396609e36aa22709ef92296a36fe4d0fd94053d006831da05dd8eabbe888
MD5 387dab87e85b8e6cf514da6ea26549fb
SHA1 a7a4f51007bba5bf75c10d384761572bad19427f
SHA512 e20275ea0c56d7bfe24a17b1a6ff6dfeef03ff44cf7ad7f5b1b9614d58e0dbfaeafe359480a6b8c5bdc105a707c785b3d49271d525e7ff3192f6b5cd3d3903de
TLSH
T1AF415E055EC4E243FF190C3C82F2E954B2F00206419B0FD344DBA8BD1C573A6A6A9EAE
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 5d9eafb6a8829e856d0a15b623d86b22f943de11d9e9d4bc0b3f516547b63e07
MD5 b6241bfb334fc9c167065dd5a27540a7
SHA1 28206f1268ee9580380bed376cac53f28fa32172
SHA512 389fcb8b02343e0d1c593b5d2a50de1e3d5d804d5b5e3c24d1fa04921251bbd3c0a5dd08d7507e4ff25d0d9f8f9fb82377c0ac0bd605ea1bc8f527d2453bb210
SSDEEP 192:DvskR3xtZ1IaamSM/1jjsHCsutHUw157DuICnvjGXnQPb:Dvsi3xtZ1IaamSM/JjsHCs+HUw157DuZ
TLSH
T138028FB3C3E48A2D881165F4AB257E2BCE6D0A28535C3D67C9D4EF4B57E18B2D20064F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 fb055b7e516dc4bf566160d6246bc1572c96ccef79c88c4fb09ebd262abf11df
MD5 be85644a6656f1f2d49b8afb0dd68d13
SHA1 206acac7fcc5294ff042b1f7202da5aabfa8def1
SHA512 b78738673f7079e0850805f94a6c4a53e9be7f25b58e52337309a3566439089b5788bca967d5659b786bcf5dd8f8385a9b8abed78065b85d17ca41e2a3019e54
SSDEEP 384:Dvsi3xZtgNadXDEn16Sm/YIaa5MtTHCsH7157DuICnKQnQwlNwhIqTvmivISfRzH:VI
TLSH
T18C5281B383E48A2DC81166F1AF147E1BCE6D0A28536C3D6BC9D5EF4B57E2472D20164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 d7168ea09de18916df6dbcae83b496105ccdd463a42c1088a484401742ad4bb3
MD5 2a3755b23b784c2a76f25fc5ce793823
SHA1 26f6013a8ed048e74816f3bc189966f4d91caf31
SHA512 485cb2eedd00f0c58d4b1448c9fa49097b907ec449faa31090a5cddcf33dfce4040265c385d0ce697f5cd0f01b86c25ba7c161975d50826fdc6b1f439660952c
SSDEEP 384:Dvsi3xZtgNadXDEn1iIaa5MtTHCsH7157DuICnKQnQwlNLl9hIqHavSmivIzE:WT
TLSH
T1594280B383E48A2DC81166F4AF247E1BCE6D0A28536C3D67C9D5EF4B57E2472D20164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6ceefa6818f7f2266cb8ee3f4db830654fc4792e2faaf32f71f4f839eda3303f
MD5 029921c604856ff79b3fbe99c35aa686
SHA1 42e5a004dbd9d2c5fe090accd7edbe01d1c88190
SHA512 814de97c18b01478a52d121172758c0250fe4ddbbcf42589765360070e53f3f3e54396829886c0e2572a642956c760f5e883eece69835c0243bc1bf15b5069cf
SSDEEP 192:2RtXo0ZlfyBJS9Vv7ApAPRp26uWWal9qHsb+WNyK1KB+5L9hp732aVdL23ewDaF+:2RtXNZlG4rsUXp4wdo0Lh2KdL2vazvU
TLSH
T10052C72EA91429BB5DDAC229F961B757E3F9102161D42E84FBFCDA1C01E7ACC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1f1337ecb7bbe39fba1fda9cbe87c11e8719d195431629cbc709662590be2feb
MD5 e286e4d5c6fa9ea4daf8934c938607ca
SHA1 0e6e6944aaa4f057e9a455c8e6aeeacde698c98d
SHA512 60b1015a8a06391e533f1e53ea3df23b6f2bbf721cd9454ae1b183ed380e0fb3176082e3ab139b13782fa076b8635ccdde4f7a38ac8b9e1ccc298634154b55d4
SSDEEP 192:2RtXo0ZlfyBJsVv7ApAPRp26uWVl9qHsb+WNyK1+5L9hp732jVdL23ewDa3VyIsV:2RtXNZlG4sUXd4wd0Lh2RdL2vaR5U
TLSH
T19F52D72EA924297B5CCAC229F961B767E3F9102161D42E84FBFC9A1C01E79CC3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7b5cfd6bdf0382c59f1e799d0ac13b322052af9d33c55b06024a43d50ac2cd00
MD5 3cc1b20e0b70f5c688eb864f89e7fd8a
SHA1 b6cb06dc76b53fd79807ab6face50e2002635a13
SHA512 7e47c889ffe47179c27434bef18240fb9854494cfe4c0a6f2854fac582abcaa7701f9ecfedef369076b224e03d784b29c79decc866b5bcadf4740498a06027df
SSDEEP 192:2RtXo0ZlfyBJs3Vv7ApAPRp26uWC9qHsb+WN85L9hp732jVdL23ewDa3VyIsnAUt:2RtXNZlGwsUX04wCLh2RdL2vaR5U
TLSH
T11A52D72EA914297B5CCBC229F965B757E7F5102161D42E84FBFC8A2C05E79CC3227427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 5eae8fb17aeb187e49b79168ea8072ea3d6e8b3c40457540aaf58278abfa1772
MD5 4b66db8ee2b48af354dfc35c3e4a9e90
SHA1 abe702d576c85eefeb1dc9794d19bb8a769ee653
SHA512 8ccc43c4d1763968e76fe40985ac956eae3de2cc4daae39e4ec9c50a40207f40ffbfd00831e887ab6fd862619d9a7082e9da5c7e0dbcae6a3f0047803bb8d4c3
SSDEEP 192:QRtXo0ZlfyhJkVv7ApTPRpbGuLpB6uWWajc9qHsb+WNyK1KB+5LwY6730qW2PVdv:QRtXNZlIQsRXj4wdo0jSs2ddL2vaXvf
TLSH
T11D62A52FA81429BB5DDAC229F961F767E2F91021A1D41E84FBFCDA1C01E7ADC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 3992b87b3c105744ff91c3f462ec84a717cf6a06c438b457ed232075e79052d9
MD5 42586dc41f6fbffed96ddac647c4b69c
SHA1 4220f0aaa8b5f8ebc03ff739437601bcffcf2d72
SHA512 6e1ae3efc4af92ba7d1125c5fcec5a84f40e86976b57a3e82bf5144c685eac5e02e31a266d5e0bb716d2335e8b537387d215a2b95e8c54d4e39c635652a6950f
SSDEEP 192:QRtXo0ZlfyhJTVv7lpTPRpbGuLpBmHuWzaGeF9qHsb+WNy/aR5C3wY6730ZjeoVG:QRtXNZlIPxRX34w5gS2eMdL2vaWvF
TLSH
T1F562B52FA82429BB9DDAC229F951F767E3F51021A2C41D84FBF8DA1C05E7ADC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 b2ebd3b5456135dbe397fa7530cf177e3c47da1a3744664b8b08b0eaaffea931
MD5 c6c9cf006c015969dc760ac500d2da71
SHA1 63f026d2cff866268f4c24ea443c958791a7610b
SHA512 32d49c60eec53a641804580991a9846dfceaa16c1e1b1307889e809948f58f2cb46e89d9f3bba6070907c49bfb2a0d50d3937c826f9b8239441094776c42aead
SSDEEP 192:QRtXo0ZlfyhJkVv7lpTPRpbGuLpBmHuWzaGeF9qHsb+WNy/aR5C3wY6730ZjeoVG:QRtXNZlIQxRX34w5gS2eMdL2vaWvF
TLSH
T15D62B52FA82429BB9DDAC229F951F767E3F51021A2C41D84FBF8DA1C05E7ADC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 c7acd43e0d53cca36c79dd04e22d5d775edc93e65598ed6feaa96f23159eb28f
MD5 332ca1c299963cbdcdde4fc093dec9a4
SHA1 3ad37185ff77ba38682166739bc5c98dab621c0f
SHA512 59430618c8c64eeb4b0d658f47867db8e5eb5d7dba50414acfdb8116d4021e57b406467705d4aa55009d704c41193bb037a6ccfe603c69ed1a92b7cfe08e7043
SSDEEP 192:QRtXo0ZlfyhJUVv7lpTPRpbGuLpBmHuWzaGeF9qHsb+WNy/aR5C3wY6730cyYJVG:QRtXNZlIsxRX34w5gSSYLdL2vaWvF
TLSH
T10962C52FA82429BB9DDAC229F951F767E3F51021A2D41D84FBF8DA1C05E7ADC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 ce3176313dcc1ccbd2aaad3616d31572cf330bdaee11f0f953649020b137cd11
MD5 648e47cde032b658c8307f6b7614146d
SHA1 6cf12a64a2c2f2cc17a72aec9859c9ec5f25f3d7
SHA512 ad43d65c9fb532695ffe09d525a1e9934f853a2601ad9f785854328a207e1d0d391bde3cdf192e27e9e7a3807d04c5395171cda197653398242e56da6158f480
SSDEEP 192:QRtXo0Zlfy3JQVv7lpTPRpbGuLpBmHuWKaReF9qHsb+WNyYIR5CGVwY6730cyYJ+:QRtXNZlyQxRXX4ww3SSYLdL2vaWvj
TLSH
T1B372B52FA82429BB9DDAC229F951F767E3F51022A1C41D84FBF8DA1C05E7ADD2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 1dc1877fe3447d94a5442bab4e75bfe89cd0218e25e97316ba4d4ce1061ba80a
MD5 53a27542d7a6854025ca42b6d5f4ba1a
SHA1 0bea35170592869a62e806eff11ace441b161424
SHA512 406f9e43e9714b2ddefeca3b3a651487fee4b7330adb683d24efe864bb0e103e4de5bd4f1fbbe7359953d9bdb340830947248bffe5ed3afdfdccf4fa7ac6f981
SSDEEP 192:QRtXo0ZlfyhJQVv7lpTPRpbGuLpBmHuWKaGeF9qHsb+WNy/aR5CGVwY6730cyYJF:QRtXNZlIQxRXA4w53SSYLdL2vaWv4
TLSH
T17172B62FA82429BB9DDAC229F951F767E3F51021A2D41D84FBF8DA1C05E7ADC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 634a62e5c1c96bdd791ff07305ab62a8d8660481596bdbe1a7bcc487673e8583
MD5 716b8b793ef7479278378a26dcb5c9a1
SHA1 7c069746cde1d516e34396182653111a4a286af5
SHA512 d99550aa822873651f7b3245b762657383be1baa3bde71ce06b8a07805ff614078dd3e23cb2b92cf102c4f04d931d1db0d7f569e804b9b6956a072594e9786b2
SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLILcmfklXODqt+ErU3sgH19TD59al2X:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67pm
TLSH
T14F72F9676C4C9D7B0F94C68CD82A7E4FADB5021B65ED886443FA582603D5BCF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 9beaadcc12fe16a294771e441daa0009f210714c6fd5dca661c76e0eeb89cc5f
MD5 85abd38e6c28490c3d7d900bf2f986b9
SHA1 0be60b745f61c0fd98ecbe041bb1511149b8be55
SHA512 a12fb81991e71e4f48fc0bc1e4b9ef9e854e65f7947fd92453b039b2783d081e61179839d2adff7b3035d0fba719d304c5194ae9ddee53981ddaeb6fc53878d0
TLSH
T130C02B019B00E132C061437006B24C4C31483F9DC6090304A2F4582AA4310324074393
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 d9128d0444bb994d3aaa2bbd5d174c9ecbcc012a6a1111671336a7f0aed9b1e3
MD5 c60fce721ec8cc9d54cf3d1be2f57c06
SHA1 8d3515634e860b264abd4c9aa0458025bc475812
SHA512 88b1baefed4a73e0ce110c1c829eff3125b7ae9021e6b16e3baaa179504759e6ba71b0844cd420df311518f858398e9a58117c087db2d9ac0635279a3fa64087
TLSH
T1F7C01211C201F032C06603B115A78CDCB39C5F6DDB090388B3E07E39ED79121433A2A5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5762f9c3c2bd4d36b2663c8481dc81859c31aad6dd3e002929d20a4ae8cb924a
MD5 c3127044025c11be71dc0623584ffa3e
SHA1 27852dbb5abc1df2c47c0da5513354c290614ff0
SHA512 08b5fe267e5e6963d780db4aaf435e89fdf1f4ad4ae8ece788c97b31eb14b174591f889e4a1a0f844572782c19e44c8e1f1ceb8a3406b2acb9a9915567349a3d
TLSH
T185B01250CC01E516C45B02B01182748831245F20AB09330197E06971DC365A140142B0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586433.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586433.TMP
Size 96B
SHA256 3a09e56148bb85dfb220edba5d9dccc44f012ec108fefcb63f6e47992e4b307b
MD5 65859168b811a56f01378650afa2ac56
SHA1 8309fa9f43980e9641fc83c5c44c44760b492c34
SHA512 79f43eb19064f95dd13e30df2baa177e5c400598b2ccad9e0c7c10c70056a8628cc802bcdac0f525c5df8158b75686f85a6c0bd6d44aed5a7a2b5ca44732c728
TLSH
T193B02200C002AB02C00303B0A080ABCC3020CF20C323320282F00B23CC20A3080320B0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 92KB
SHA256 3093fc23d18318021a07549318b705827355d9eed093d382d016152e4353ac55
MD5 24bfb17796a9cc03cf78cb4d8fef5d13
SHA1 76caf6dc8d8c4a250a40f8ad6e135b213f6f1703
SHA512 52a6a0a73fe66760cd53f317e02f15120f9995118fff9f67c5db832a67aaa5c4a6cb8227b3161a1dae2b486029b2c9c5c53eed84f76dfab18190cbe811213675
SSDEEP 1536:kZwRgP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:xG++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1599302B9981E7D7913ABD2A6D0079CAD4CD38CDE1518657C30C7AF0E04BA393A34B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 0757a9df6055a1ffd2fcd7690b709a4d27845ff26a6062dec4a5e427c4547ed2
MD5 1994086e4acb80c2a31fae393c5a42db
SHA1 a7f1db30b4e56005d33ec01c12ff01cef5eee172
SHA512 b9ed1a1d07ac3a353b34858835bf703b487160058ef96104069cc1f0ffafece71eb3529807c2aa9881fa561073d19391eacbf7122f8b70b1df31bf0f774bf0ca
SSDEEP 1536:7ZNyP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:Q++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1689302B99C1E7D3923ABD2A6D0079CAD4CE39CDE1114557C31C76F0E04BA393A34B895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 6b659f1d026e52dcdd61d6cfb94442887321b636ec0f0ba7383f07558b922716
MD5 926410d3abc95378f8f6ffb96635401d
SHA1 34ccf4f3d198563ae0c44db8c452527c4ac7a094
SHA512 578d3c8e190ffbe568cbcbf11a3b6e056c5a51decb0d93da1dea4cbaf198208db12d1e8c52a29e96b287c446fb8ed39f0ef25ac6bd16775850f0df6149ee4fe9
SSDEEP 1536:kZNyP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:R++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1CE9302B99C1E7D3523ABD2A6E0079CAD4CE39CDE1114557C31C7AF0E14BA393A34B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 6104abb9ee2272b213458b94d70de3ca64d53ded009e1ca01b28e75f80c38672
MD5 7546ec31cccc703ed6ed5bd01e107df5
SHA1 96eaafc0a4ad810196c579fcd4d0d41686be4cc5
SHA512 37c85033ac3bcb136915ca50540555fcc90ba41fb0b76e402278b4927f3221c697323dc8a06a54adcde4866330b5c4dda4460c36b1a9c0698f6e1fe9488ad1be
SSDEEP 1536:UZwfP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:3n++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1F29302B9981E7D7913ABD6A6D0079CAD4CD38CDE1518647C30C7AF0E14BA393A34B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 096484437cdeecb3863db18f9ec905ff06b348f6cdbfeec02ba492ae171ec46b
MD5 23f81c771c35930f8eac3d29c541f453
SHA1 b4b54a10daa52255f568e65dbe5ec70014a32eed
SHA512 67a46f98f9768ce7a846b905fbdc390e8c3eef0985b2fa9843000f876cf7c6285966e09c6490e47acdac9296437ef8bf367e2fb7e169f25a39bb882377e4fd01
SSDEEP 1536:hZuP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:M++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1129312BA591E7D79536AC296D007DCAC8CE3CCCE1514557C30C7AB1E14BA393A30B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 b3ca9908104e22ae2b90230273832ba29699873a7c7fb3f3e8b055f0aaf929d0
MD5 c1ae260ddab842817f1dbb4721933b63
SHA1 f13b4f9b4a1f2fa87df62d045ba2e37ab15b92b2
SHA512 3636fc827fe0f22f3754f7d244ed1a4776c8b3fbcdf37f555869cdd5e616310ee5cf1d76556521d99dd66c94623141c7508e7b3a8c13e2207a68e307ab6ff728
SSDEEP 1536:kZwfP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:Hn++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1A59302B9981E7D7913ABD6A6D0079CAD4CD38CCE1518657C30C7AF0E14BA393A34B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download