hxxps://www[.]goldsky[.]com[.]uy/ceramica-y-porcelana/te-y-cafe/tazas-de-cafe/

Analysis

user interaction
yes
max time kernel
136s
max time network
137s
platform
windows11-21h2_x64
resource
win11-20260130-es
resource tags

arch:x64arch:x86image:win11-20260130-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
29/04/2026, 19:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.goldsky.com.uy/ceramica-y-porcelana/te-y-cafe/tazas-de-cafe/
Sample260429-xrt3caaz3p

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1332	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134219631579794080"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4220	chrome.exe
4220	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
656	Process not Found
656	Process not Found
656	Process not Found
656	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe
Token: SeShutdownPrivilege	4312	chrome.exe
Token: SeCreatePagefilePrivilege	4312	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe
4312	chrome.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4312 wrote to memory of 3376	4312	chrome.exe	79
PID 4312 wrote to memory of 3728	4312	chrome.exe	80
PID 4312 wrote to memory of 1332	4312	chrome.exe	81
PID 4312 wrote to memory of 3728	4312	chrome.exe	80
PID 4312 wrote to memory of 2808	4312	chrome.exe	83
PID 4312 wrote to memory of 2120	4312	chrome.exe	84
PID 4312 wrote to memory of 2808	4312	chrome.exe	83
PID 4312 wrote to memory of 2120	4312	chrome.exe	84
PID 4312 wrote to memory of 2316	4312	chrome.exe	82
PID 4312 wrote to memory of 2316	4312	chrome.exe	82
PID 4312 wrote to memory of 4748	4312	chrome.exe	86
PID 4312 wrote to memory of 4748	4312	chrome.exe	86
PID 4312 wrote to memory of 556	4312	chrome.exe	88
PID 4312 wrote to memory of 556	4312	chrome.exe	88
PID 4312 wrote to memory of 4520	4312	chrome.exe	89
PID 4312 wrote to memory of 4520	4312	chrome.exe	89
PID 4312 wrote to memory of 1460	4312	chrome.exe	90
PID 4312 wrote to memory of 1460	4312	chrome.exe	90
PID 4312 wrote to memory of 796	4312	chrome.exe	91
PID 4312 wrote to memory of 3896	4312	chrome.exe	93
PID 4312 wrote to memory of 3896	4312	chrome.exe	93
PID 4312 wrote to memory of 5088	4312	chrome.exe	94
PID 4312 wrote to memory of 5088	4312	chrome.exe	94
PID 4312 wrote to memory of 4544	4312	chrome.exe	95
PID 4312 wrote to memory of 1016	4312	chrome.exe	96
PID 4312 wrote to memory of 2344	4312	chrome.exe	97
PID 4312 wrote to memory of 4568	4312	chrome.exe	98
PID 4312 wrote to memory of 4568	4312	chrome.exe	98
PID 4312 wrote to memory of 2204	4312	chrome.exe	99
PID 4312 wrote to memory of 2204	4312	chrome.exe	99
PID 4312 wrote to memory of 2292	4312	chrome.exe	100
PID 4312 wrote to memory of 2292	4312	chrome.exe	100
PID 4312 wrote to memory of 4220	4312	chrome.exe	101

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.goldsky.com.uy/ceramica-y-porcelana/te-y-cafe/tazas-de-cafe/
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc07ebc728,0x7ffc07ebc734,0x7ffc07ebc740
  2⤵
  PID:3376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1580,i,13550766566758871979,7957229615092972057,262144 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1932 /prefetch:2
  2⤵
  PID:3728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2124,i,11630098917302039110,836963994010176292,524288 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2136 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,73360552240506419,16447908700553004837,524288 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2416 /prefetch:13
  2⤵
  PID:2316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3032,i,16618459563065810187,7022093813444031534,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3096 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3028,i,4680743393687619523,12363349755686923297,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3064 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4184,i,12445541796971119792,6752538718705424524,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4188 /prefetch:9
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4604,i,11730316092172673740,9222241274765453220,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3092,i,706298760978484423,6086238139734654923,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4616,i,4745389599541889249,16307835481049327312,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5692,i,17164240522680946026,13534264827538077233,524288 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5784,i,16523894890443857936,17007544964449379294,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=2876,i,17391692665783392189,1213540510262441551,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=212,i,1301564810151310966,7007946021138441270,524288 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3080 /prefetch:14
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3296,i,1116128248245003283,3634191410204125192,524288 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:1016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3256,i,17046688263286873772,12397224041033391719,524288 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3268 /prefetch:14
  2⤵
  PID:2344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3268,i,10944244986676720463,17043013118730113710,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6064,i,10533865067884031649,10304306100891338300,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:2204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3224,i,8810793494132541227,13908337384724224006,2097152 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6384,i,3001571451575075583,14414120115253818722,262144 --field-trial-handle=1936,i,8327319259090974227,12121887017044617814,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6368 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4220

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2224

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 384bca99544f5d86a43b39ce76f6cfa5bf2e62cede7c4a6c93980a4a253ee1f7
MD5 68e8b5db8743035930bb8ffb10a419ff
SHA1 56ea387462ef461409aa35eedb076ce603043eb7
SHA512 d18b7a5581872b34e375f1e98cb89e46905ee67f88721f6fe02f787605700cf04e6d2f76388f2682515472d79d4e8fee2ff86d7e17aebefff29385471802a8de
TLSH
T147E0AB9AC9319C3715FC0B1950100746F661135A2B50585F3A3CD10C8FF2A2A4941C6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
Size 33KB
SHA256 ac219c0adfcf625ac200f867e95642ed58bc89134646cc825c7bb3aa6a6e0041
MD5 1636a0ca74e978d10396304cca4214c2
SHA1 7e958154c63f90dfb7af49912442e4d09babac62
SHA512 bba64680b15be7708a446ab2243918f06b114fe955abb1a462c04d5040edfce2e9d8b8a258b390b5db8af0014a44b0b4d3c21b6d17f6bd282ea75060591bb0a1
SSDEEP 768:vJCWHL9g3b9EvRX/oPl43rByfG1ByvZG/C5PV2AsM5tW2+siCKVf:FRg9Evhol43le4EBblV2A9tWvsXKVf
TLSH
T1AEF2F2C789A0134B1298AFCF7EC01601910D81ED46A5DAD5DCCF0D8A5E1A39AEC7F76E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 261e819351a154ba7a695942bbbd1d0a0256f40ecc65edf23acf203d0c42c838
MD5 b3fa34bbd726b7817f781a53ad328ed5
SHA1 a6386795d182ffe8b0f1955efe7bcadba24b0ae4
SHA512 93bace533bbc667674788170c4b419a8234488479dc1c09c74e6cef0e2e5e5767b192a256437ce40001ed5b70ab8602db848ce25b66407f8661bb0a48084861e
TLSH
T180219974D0E8A11DCFCE1FFA45B54DC6743884B841BB0BF786881136A943AF8AD60E5D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 97f8452eb5beac2a1c67222933d6a07ec5d9854650744bf400956cad2272568f
MD5 f7c1fa03ba783fc6b886c8883e29b146
SHA1 86d9b4a846aa8fb4459ae0c6732caec7a5a14d61
SHA512 8552e800516a7c94c7f3881a3c8118111e054b729443441dbcb7101a6120363c24785a5771f95b9800af9ec2c59d721929829abf0c211828e1229e7fd8ef2c2b
SSDEEP 192:DF4C+hY0dk8fD3SLIaEagdmpmm03VqfiNBnRBPYwV5Mc63PCpdn/RBVVh3O:DF4C+hY0dk8fD3SLIaEagdmpmm03VqfZ
TLSH
T1FF229EF7D7E88B6D881152F46B252B1ACE2E0E18932C3C1BC9D9DF4B53E6472E14164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 6acd8534a91017bceb03b8ff21d8ba044a73ceba4cf0378e66c651f39e6fb1fd
MD5 bac298be695d773f984e991e4b7d912e
SHA1 09dcc946b859b542d1b27998b222c8ef72123d7a
SHA512 2840d70055b1fa00b4cd8c439a08bb831e090ecd0f8883e39fff17778c84abace32336217c9e0afdae42ca3ce5218cdec7bd90b35a72f430e8b2739c51560d5a
SSDEEP 192:DF4C+hY0dk8fDrIaEagdmpVEm03VESf4hNBnRBPU63PCpd3D+0IdaO:DF4C+hY0dk8fDrIaEagdmpVEm03VESfI
TLSH
T14222AFF7D7E88A6D881152F467242B1ACE2E0E14532C3C17C9D9DF4B53E6472E14164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 53518d4ca6a91e09a30e74081a3744a3172b2166ae0e4e3229d75bdcefc82823
MD5 aafbd86404612b59c183498f80039f00
SHA1 d310cd1f2ade6e668b3b8402e64d568788cec658
SHA512 732708baab9d12d96f3d47a63ed08865f2ee2bf8717d331be6c3270c293da43e048a7769deb722ded7ee94b6fe6fdeac097c4786e5ba024ecb12ca5e59b422c3
SSDEEP 192:NURkH7Sqlwv7HYpAPRp2NBLi98Hsb+WNnap1pLl3f2l9h2Y2isVyIsnAUgg7:aRkHjsEUX36wuz2N2YCK
TLSH
T1D342B52EB91469BB9CC6C32AFD22B717D7F5202161902E84E6FCCA2C15E76CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 818f23e9badd8eb3071a0f32fd5b777f6f089e3aa975c5fe865eb7ffcdb62617
MD5 b1ffcacc6eae94434434a0dc28d831bf
SHA1 c26a1cb665b289c10434ff4c23ce773e2e808321
SHA512 cabb0b55e2eca7020e80deb85acbe616b744a88870173104497c54ccac35c794b4c2ca4f31caa73b71811f65172f470fe3bdacce9b8bc99dea7657798ed4daec
SSDEEP 192:NURkH7SqlVv7HYpAPRp2NBG98Hsb+WNnap1pK4e6h2Y2isVyIsnAUgg7:aRkHjlEUXb6wuHem2YCK
TLSH
T1AC42C52EB91469BB5CC6C22AFD22B717D7F6102161902E84E6FCCA2C15E76CC321B427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1aed21b0101e66c352f0cc9696923c30925cf0d60b4b891b2c39628f366b7046
MD5 bc7eb11a156e75aa46980475ad6a4cd4
SHA1 b6e9734cb3ae913bec105f3786d322098c677a67
SHA512 d286f5be2e481bf571fd3dfe9e9b7f85b42aace85e3e670da232fbcc88edb297859791c8f36a134c0981492fb174ba77ef97b2630e8d5e7640c03eae15d22baf
SSDEEP 192:NURkH7Sqlcv7HYpAPRp2NBO98Hsb+WNnap1p5fY+h2Y2iuVyIsnAUgG7:aRkHjIEUXP6wurYi2Yww
TLSH
T1A852B62EB91469BB5CC7C22AFD22B717E7F5202161912E84E6FCCA2C15E76CD3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 63b39b43ea233c57d0cdb705cc6647d777a7982f50a3da110344b66b3cd3a81a
MD5 09ecd1d082438ac3127f61b9606c0067
SHA1 470ec14a4367c48637f82ba98d6ea19339926678
SHA512 85c8b496734afee31f6f801482983f4dd0c848616676ab78f24ab00825397fef668f38133b18c8a43936be9f7a7bbc797973ad0f1bbb1b61d19a6f8c5b9cdce1
SSDEEP 192:NURkH7SqBqv7HYpZPRp9NBfS98Hsb+WN1Qap1pMCEKh2Y2iaVyIsnAUgGSU:aRkHPmETXA6w7XEW2YEjU
TLSH
T18D52C76EB91469BB9CC7C22AFD21BB17D7F5202161902E84E6FCCA1C15E76CD321B427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5ae1cd4d0a3845c1a5db90fca166681182923c04b7ff9cc9c01b8658429e8e4f
MD5 4c387423375d008a99494b66a25663ce
SHA1 246dbc2dc983ee6bff39ef460595aa39d610cf35
SHA512 cd12bc2d22c3b2e7579f31b364fa6d941b5a30cff51a17095eb2a1d7e38d044eb82c8b60c2c908418b433c177f2fe4055b700f1b77a45adc166cfa742b15795d
SSDEEP 192:NURkH7SqBOv7HYpZPRp9NBbS98Hsb+WN1Qap1pMCEKh2Y2iaVyIsnAUgGSU:aRkHPqETXY6w7XEW2YEjU
TLSH
T13052C76EB91469BB9CC7C22AFD21BB17D7F5202161902E84E6FCCA1C15E76CD321B427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 8f0c734dbdbe5d613b2b7cee571bf17bd633e0834f6f2fb72bf1c4144dbf0a41
MD5 36d61ea33c8d1b30684b5a591187ef73
SHA1 57410dc62446a55358ad43eeb63d67c2e83f1250
SHA512 2042a6ce22ed7665de197865fd870e8c38456d6bef6e9214e655c68d426bd389c40f38af26836edcf892b51bd12790b957cd5fc8eb028ec8a021b31bff6a25f8
SSDEEP 384:hTjVw7KxkXqKf/pUZNCgVLH2HfgslXa7pLILcmf3yXODVw+ErU3LiH1cXcjX3:hfVw7KxkXqKf/pUZNCgVLH2HfgsVa7px
TLSH
T166720A676C4C9A370F84CACCDD27BA4FADB5024B65E9886443FB981903D5ACF010A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2566f7246e663459b742a8c694a0860756fa1cbc5788bcb71d8a18f428b1f78b
MD5 74143b1b02269ea2d81277635e6be970
SHA1 8a89a279c1a3b177262affc640654b0218391ce1
SHA512 ebd3270b5be27fb88bc2a49fc48fd3a0893f954301e7e5d3ac12b52eb5ec75957275e1ca40c69cfb8d46bbaf7f201e5e9a676b2ec27245d75a969494e0629fd5
TLSH
T146B012A2C0015542C05302B01182048836545F20970B270553E0BE72D8271B19114160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585f22.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585f22.TMP
Size 96B
SHA256 74ea09785871a3835b46e5723ff2ace66f58d0dacd346b67245110d72171f279
MD5 bf1e2b636696a7d92cf4b478a19781e1
SHA1 acbda391d56578cf9c08510a43cb7f43ed2e44ed
SHA512 b8a87df59f98451cc694c716bc79ffa9e99c1922d19445e0deda0f006a083b8153be736da02c557699e6f06b53fc9aa5a18663441dfbbfbf92a4cdbbec8b36b0
TLSH
T1C3B0029AC1326362D06243B0259796DD75E0FF35CA03121A92E06F67DC256B1C625260
MD5 SHA1 SHA512 TLSH

Submit Download

a49e45cd-c539-4024-a252-119437a2719b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a49e45cd-c539-4024-a252-119437a2719b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 35c476ae792c5287e3caf299b387d2ce5e27509605c4b7ac53df84b73b236f1a
MD5 413d74b633ab2aee123292ad980ed96d
SHA1 fb3936ab0a1fbc60b569cf9fb5e0d5e00b2620ab
SHA512 c00eb271c9fffcaff418da71de61610a8271299ab993e06109376fa6aefadbb72050452cbb617bacf91056157da09eb8e318adbdac39e67c6a702147fe1a314f
SSDEEP 1536:/SnP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:a++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T12E9312B9991E7C7963ABD3A6A003ACAC8CD3DCCE1514157C30C75F1E14BB392A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 92d7d4af52bab5dfce6dfd80faa9b2b0237caf6f2ac841480b9249630ce85b47
MD5 8a4ed062d8593d8514f5cc203b7d7d8d
SHA1 51ab394b249de986bad0eb1c7cef9ad6856edfb5
SHA512 f43ccc0af17e7dd81803f6390054e1b174fc13b110d3f1d198cd91e1dcf5729bc1f5698115df654ad03d3300c6d20bcffd9f8f85dbd3f73e71eff3d1f32be47c
SSDEEP 1536:/SZDoP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:QDu++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T1319302B9991E7C7913ABD3D691076CAC48D3DCCE2518257C30C76F0E14BA392A31B8A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 07908d398f2c817167439990182b2dcdd84fd78293f94c91fae8ee01897ec58a
MD5 00f6aa0b9d1e5afb78e12dd535f596f5
SHA1 d82f7f991ce1dad5d90e733297e001e531b201e1
SHA512 1e9e2383b9265593ed733f725939502a6bec31050019daf77f110fb51c185906e9e75e1e305ad506f30c02460114544446709f04c572da11f5ce4033c5a0765c
SSDEEP 1536:wSCP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:6++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T1439312B9991E7D79236FC396A0179CAC89D3DCCE151411BC30C76F1E14BB392A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 ea4163bdf7b444cc0278b55fbcffaceedec9f6c9f582f36789564ad2fc1e43e5
MD5 fd7266b264050210497763d50f22bf19
SHA1 2bc8e816f3b1fb9eae19b0ebb26cc3bf45082c9c
SHA512 67fe9a82c2a884a9a4b0846852c26feb3a0237daf31f379e31fdd45af0213723d3ed67b6fee7d1b503e7ffce4615d16c608d631b60e5730e09805b372c2d0623
SSDEEP 1536:/SnP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:S++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T1639312B9991E7C7963ABD7A6A003ACAC8CD3DCCE1514157C30C75F1E14BB392A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 da42ce637214d07cb196b0be087a23de45ea62149fe83be15085204326d50d98
MD5 a85e347e81fdf75ee5ba1fdf45141d3c
SHA1 15f3c0746946619a97420d0964a50e1587484499
SHA512 dbff296bd47cd13bee8138088d0b57206da650afe1308b460fa442333762f13116e65a3476977d414a9395bd739954bf4bed6ab062578a9f12542f76cf150134
SSDEEP 1536:aSnP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:X++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T16D9312B9991E7C7963ABD3A6A003ACAD8CD3DCCE1514157C30C75F1E14BB392A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2224-13-0x000001A5C2D80000-0x000001A5C2E2F000-memory.dmp

Download