cc7531f9ad6e0da2c7243afbd1fd7670589cecebaaa7a568ec32bc60030425ec

Analysis

user interaction
yes
max time kernel
299s
max time network
304s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260126-es
resource tags

arch:x64arch:x86image:win10ltsc2021-20260126-eslocale:es-esos:windows10-ltsc_2021-x64systemwindows
submitted
11/05/2026, 12:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Archivo_Adjunto_934.zip
Size 1.2MB
Sample260511-pnet9ac18k
SHA256 cc7531f9ad6e0da2c7243afbd1fd7670589cecebaaa7a568ec32bc60030425ec
MD5 ef26aff0b8719fa9bc19dcc1cff42427
SHA1 5a610263bd7092f947d6e1db4e4dcdf2eb7f68f7
SHA512 3fd6940233f7cc6d7cb17ae15f33a9707e74fcd1378a50587ac0f394dfbf5764c8e7f9945c0de945b84081c4a8f0166635750bc011f7790448890e8283ddf52e
SSDEEP 24576:u6zDiVkgEq9zRhop3FN8LLP3I1sO7+I1FCD9ih4tp6/o4DtceqKlhd8FWV83:u6XiCgEq9zRhoJALfI1sO725u4z6tDxM
TLSH
T1085533732F917C8FE7DB9591F3CE12287C6C2FA6CEEF9034957492C200644A651B998B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
9	4464	mshta.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
416	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134229761995747246"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4214655515-2537246629-1547560666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4214655515-2537246629-1547560666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4214655515-2537246629-1547560666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4214655515-2537246629-1547560666-1000\{274D9ADF-4AA7-417D-A54B-F4A35CACB813}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4214655515-2537246629-1547560666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
2464	chrome.exe
2464	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe
Token: SeShutdownPrivilege	3364	chrome.exe
Token: SeCreatePagefilePrivilege	3364	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe
3364	chrome.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3364 wrote to memory of 5188	3364	chrome.exe	94
PID 3364 wrote to memory of 800	3364	chrome.exe	95
PID 3364 wrote to memory of 800	3364	chrome.exe	95
PID 3364 wrote to memory of 416	3364	chrome.exe	96
PID 3364 wrote to memory of 5036	3364	chrome.exe	97
PID 3364 wrote to memory of 5036	3364	chrome.exe	97
PID 3364 wrote to memory of 3972	3364	chrome.exe	99
PID 3364 wrote to memory of 5728	3364	chrome.exe	100
PID 3364 wrote to memory of 3972	3364	chrome.exe	99
PID 3364 wrote to memory of 5728	3364	chrome.exe	100
PID 3364 wrote to memory of 3760	3364	chrome.exe	101
PID 3364 wrote to memory of 3760	3364	chrome.exe	101
PID 3364 wrote to memory of 3780	3364	chrome.exe	102
PID 3364 wrote to memory of 3780	3364	chrome.exe	102
PID 3364 wrote to memory of 1224	3364	chrome.exe	103
PID 3364 wrote to memory of 1224	3364	chrome.exe	103
PID 3364 wrote to memory of 2024	3364	chrome.exe	104
PID 3364 wrote to memory of 3188	3364	chrome.exe	106
PID 3364 wrote to memory of 3188	3364	chrome.exe	106
PID 3364 wrote to memory of 552	3364	chrome.exe	107
PID 3364 wrote to memory of 552	3364	chrome.exe	107
PID 3364 wrote to memory of 5820	3364	chrome.exe	108
PID 3364 wrote to memory of 5820	3364	chrome.exe	108
PID 3364 wrote to memory of 900	3364	chrome.exe	109
PID 3364 wrote to memory of 900	3364	chrome.exe	109
PID 3364 wrote to memory of 4976	3364	chrome.exe	110
PID 3364 wrote to memory of 5624	3364	chrome.exe	111
PID 3364 wrote to memory of 5624	3364	chrome.exe	111
PID 3364 wrote to memory of 3220	3364	chrome.exe	112
PID 3364 wrote to memory of 3220	3364	chrome.exe	112
PID 3364 wrote to memory of 5184	3364	chrome.exe	113
PID 3364 wrote to memory of 5184	3364	chrome.exe	113
PID 3364 wrote to memory of 4716	3364	chrome.exe	114
PID 3364 wrote to memory of 4716	3364	chrome.exe	114
PID 3364 wrote to memory of 1108	3364	chrome.exe	120
PID 3364 wrote to memory of 3224	3364	chrome.exe	121
PID 3364 wrote to memory of 4932	3364	chrome.exe	122
PID 3364 wrote to memory of 2464	3364	chrome.exe	123
PID 3364 wrote to memory of 5012	3364	chrome.exe	124
PID 3364 wrote to memory of 5012	3364	chrome.exe	124

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Archivo_Adjunto_934.zip
1⤵
PID:4268

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4112

C:\Windows\SysWOW64\mshta.exe
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\ca79d734-2937-4f74-a1c0-ebd760b19b82_Archivo_Adjunto_934.zip.b82\Archivo_Adjunto_23º.HTA" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- Badlisted process makes network request
- System Location Discovery: System Language Discovery
PID:4464

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ffa0067c728,0x7ffa0067c734,0x7ffa0067c740
  2⤵
  PID:5188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,5340032126770504691,15326950194561954595,262144 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1636,i,17181695283000758420,10628824067287959444,524288 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,4387252763807453866,11240538617993923478,524288 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,8183867703151267794,9367020664495726610,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3212,i,9133483706494181276,5514344587946020241,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4424,i,10928363639993640948,6477277144719530158,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=4448 /prefetch:2
  2⤵
  PID:3760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4760,i,10087144834159332402,10426326074914862121,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5004,i,6218758031565616169,16395399359219307463,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:1224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5564,i,1661217802646131461,16133043139616280376,524288 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:2024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4696,i,10101434979459231142,13989618273076970955,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6080,i,9643156240005396166,7186133936040906787,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6120,i,17886521082303490219,6184172533916787021,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3404,i,1955442804517773015,205341550619085934,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3276,i,17579282696145012121,8449717101141096097,524288 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4748,i,5726157760992118505,17638393704294989245,524288 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=3380 /prefetch:8
  2⤵
  PID:5624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4956,i,2478275559048530832,5198889394774472671,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3460,i,7580239369235016473,10554446453829487067,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3308,i,13804981498519646972,5548412852564894228,2097152 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6320,i,18285353246894803681,1455971159872950666,524288 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:1108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3208,i,14083998545853625338,9330442930065435393,524288 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3688,i,9660263452898846380,17147441900337879902,524288 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4536,i,6947062486792978638,192140254888544752,262144 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4580,i,10342303532395521119,14328192138441597038,524288 --field-trial-handle=2008,i,11950029777883242047,5665146487707110688,262144 --variations-seed-version=20260126-010020.760000 --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:5012

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5948

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 447a7d6cb06da15e292d872d26f5e4c32e3939d120be20f09725dbec06938e69
MD5 e06fb7a1b96aba1c3d4c93af9ddbf2be
SHA1 b2b1ff5ee05d8b03119c58023bd142ead9b89860
SHA512 736bee77788e3f1562de158ee8baaa514812e6a21f0c6270449cfd12e4bb3734484a8132416ca4cfdbeb83166b0ad9597d00c987940ecadb9251b9724e37079f
TLSH
T11AE02BBACC32AC370DFE07287054574AE760135B2740898B763C821CCFB06364585D5C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 76f3dc6b42d1f34174c2a1050663d757d74252f926406dfde6f6e762dea3e463
MD5 d7ecf7ee04c7dd6e655f3f336ce4b40a
SHA1 829a188be54d57542f98e997e1e4cbd7fad9034d
SHA512 71bc1968083b3c225edbd88f9dba7e000f053eb30cc608d4edf169a0d5eec71cc41e223b7c88ecbaa59dd381afe0b62f4c5f302d3d8b0ffdc69f169a6507afd4
TLSH
T1BB31A61146CE4674DFF817FCC9A71EC860B495910242AB2F39786325D523FE337A7A58
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 509cb4386ff26044639ba3fb5053ab46cf5a4d7b56a8b921c0acbdb32bf66ece
MD5 92984b902bc301838f8f7be1b6e94ef9
SHA1 3fdd5293e2fe53cfdb937dc2d4646000f3742456
SHA512 8cd40b4e4fae227cbf99f1a6377c5aae720638ffda7ffcc49264cccae99365e774474d87941b19d9450575da427eb9370f24f89b57d9dddd4a048e5033fa37cf
TLSH
T11331DD1155CE4A30DFF813FDCCA71EC8A474844412956B2B35386324E033FE33266A58
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 27a87c5a9a6c1edfb954fbf68f53264d1bd229644fba08af6036ecf1b886199b
MD5 ca1fcf8bd64a64a885fb6260beca37c8
SHA1 6d73363729f77f31c2af161d332d03c9c45dbf46
SHA512 95bb0f9b18caecf40c3cf19e1f8ff5ee9350e90b6d22d58c4738ac3f843f86c516dac34947f4166c851df8167c35d78169982b47ed6d1a7b02c1af15eb0465a4
SSDEEP 384:D2sMDxpVuu33x0JxHi2xwaIahQryaKVRA+60/NKGkrXK2wzWZ+I/gaj90yK7tfVY:cv3gDmqwfqmGSH3t
TLSH
T17542BBF383E4CB6DDA2211F0DA10AD1BCE5D0A14533C386AC8D97F5A5BF2871D210A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 6157beb912c9a57ac7084ada3de2aa9bbcb7120a5eb74b69d9af840d0f4903ad
MD5 ab274ade65ef306f497279e06f0b751d
SHA1 c796224d8a64a26a559a61ac98fc48417fc98ce7
SHA512 62309cba76f8a201d8a4b014a12045955b33fcb06bae4b0111280596f049061d72b356dfaf76812f75ee1b92de1aa32cf13ed83c50fa17afd63818df1a5ef25c
SSDEEP 384:D2sMDxpVuu33x0JxHi2JaIahQryaKVRA+60/NKGkrXK2wzWZ+I/gaj90yK7tfVHy:cv3gDBqwfqmbDd35
TLSH
T1C242BAF383E5CB6DDA2211F0D610AD1BCE5D0A14533D386AC8D9BF5A5BF2870D210A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e160c5fd9a4bbb69393074a657f326eafbc749cd9af1ab97f88da3d3bb35cc25
MD5 f8e8983113201818a3ea8721ff5abc16
SHA1 980c714b985a97a3afdc60adb0effa7e353a7bcb
SHA512 6debc322b330adf2bde03a1441185c6d22dcda04b9dc407215b2e118a787449438c5cc0357f3febb174cef743d94a3bebb6b612ca7ec411ad7320d5367d2da11
SSDEEP 192:oR0khXqOJcBgDv7x2MAPRp242C9MHsb+WNtJ2lxWVIc2ykHN2AFkwkJVyIsnAUg8:oR0kFJwg70tXNRewtoWF27HN2AFEv8
TLSH
T1D652D66EBA14653B8CCBD22EFA217B53D7F9107121812E88E6FC8A1C15D76CC321781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4892fc8d12a66876f2f66d60c709e884fdf659250e8d4adeb4747dfe2264e27b
MD5 afe30368dbff8964222ae73ae78cee48
SHA1 8a6efa2e78c84d4b44ff2bc40a543ca2b74348e8
SHA512 74134bf8505352e667f0babd9a4632ad0832e26b536efed9989be34d93c6419828a11356c4d4258eec1f613ede219263c4383d190c8ddf710cb2513b0b66e88a
SSDEEP 192:oR0khXqOJcBgGv7x2M2PRpM42C9MHsb+WNtJ2lxWVIc2OkHN2AFkwKJVyIsnAUge:oR0kFJwgy0HXDRewtoWF2nHN2AFqve
TLSH
T1FD52D56EB910693B9CDBD22EF9217B53D3F9207121912E88E6FC8A1C15E76CD321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d909d1b37734f04e26f38375ac3eebd88a2b46bc2642fdb5f3d44e1b5c2a7151
MD5 d0c74cb216a49e3890355d475074e964
SHA1 5b27a6ca8ba35808ad48e3066aaebe187da43b0f
SHA512 51eb575015e69c67eda6f8ca03645b2990ea66ea2133345c6a4ba59a270809529d326b2ff044fdadc1e41bc258a5ecdab60a4c384d4c6d62e9779be524a97427
SSDEEP 192:yR0khXqOJcBgDv7x2hAPRp242C9MHsb+WNtJ2T79VIc2JkHN2AFkwkJVyIsnAUg8:yR0kFJwg708XNRewtw9F2uHN2AFEv8
TLSH
T1E452D76EBA14653B8CCBD22EFA217B53D7F9107121812E88E6FC8A1C15D76CC321781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1bc8aaaa9315539b559078af5357322c5e4a9ded670254aeb0ba0a70c9b35812
MD5 a8f19e2b9e6bfbe2fea8ef5d90278324
SHA1 20a0790f24349cfdddb06d691c3fa2280a267fdb
SHA512 2a32b480d75697e87a7099f9d62cec935d9064ae38ba8e7006b819f1e13e37959ff540fceb225edac6bb7ecb34ede772ccd28c47f865bab04ec765aa07d0519e
SSDEEP 192:oR0khXqOJcBgcv7x2MAPRp242C9MHsb+WNtJ2lxWVIc28kHN2AFkwGJVyIsnAUge:oR0kFJwgI0tXNRewtoWF2VHN2AFmve
TLSH
T1C652D76EB914653B9CDBD22EFA217B53D3F9207121812E88E6FC8A1C15E76CC3217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 5139365f8deb62cce36046cfb6af1b484de08036f06e591a14f6aa0adc7a82e6
MD5 578b61c860c6e86a35341897d0a7e1ee
SHA1 4af526e5ecd039564dd12a1389849d0757f5b7d6
SHA512 28d0144a13de3dd417e7fbf96aed0f559eb25c327e90c86f312e37295dcde97276f9caf9106a6bcd0ce53527caec285c02e5b1a1a474ec5d0dddc0e63d19c771
SSDEEP 384:rljnG7KxkXqKf/pUZNCgVLH2Hfgslyz7pLILcmfhMXODnC+ErU3qNH1WgI9Nl4:r1nG7KxkXqKf/pUZNCgVLH2HfgsAz7px
TLSH
T1BD7219A76C4C8E774F94CA8CD827BB4FADB5015B65E9C86842FA582503D4BCF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 3b1bf39fc3a75bec20004d27adf9308342c0ae173303a01a86f11d57192e1586
MD5 92f11e96029183308c862b1f66481a1b
SHA1 1389185c46c2cff91a60762508026643c841ecc8
SHA512 7bfe9357b9b4782c5b7aaf5f4d453bd0c7d0b06cbefdd2afd2ac554a0705f04c767410407e8d273106e0a2ab22761a8c762ab7636decd146c1dc159e9866862a
TLSH
T1A2B01290C0415501C48302F421C6448836189F188707230173E0AD719C271904119151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595078.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe595078.TMP
Size 96B
SHA256 23e286573dda9903837f2fc24ecacba4dc93690af144c37f09e11347f50fff46
MD5 47f660200d4a3723817af515afe8ba1d
SHA1 067485bf6e4f740ab21efced4fa6cd696e771c3e
SHA512 aa656c9e8d8c145390c6f58db640cb0e21ebd8b135e31631bf89e25864babac60797e5d542328510effaf1b60518009fc0cb2e282ef12b0fe24a9281d82345f0
TLSH
T1C6B02228C0033202C08203B2288AC2C830A0CF30CA03020383F00EAAEC28A200030220
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 8231e5f7684d9c597a9783693ad90b0c43c47483990f8a4c84edd8f7bf54196e
MD5 fdb3f8e7b1a077c3a92d29ca007347aa
SHA1 e73aa047c4a939e202273b52f69b65a7c06065d0
SHA512 4ec69ce0c02ab7643968ed2f3acaae25b46408bf45e11dcf62eb14f4bfc75a1e688e54e6c8b23650df6029994547b933981386f1923f6958c03dbdf4725e337d
SSDEEP 3072:uyNKFBzY2u3+DY7Ly51QhYbeflYMZeTWS4zw4VsmYa0gZxK1Ih0vTcZbG:uyIfzna+DALOQhYifvZAWXszBexqeG
TLSH
T1521412B52FFA4A37228DD96C3B7BA155E262D5A1C4CCAE9F00551B062CFF934170624F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 85KB
SHA256 a5dad119a6a6743f0855c571500d35cc9796b91da1364e57b3a3258958753eb8
MD5 fead95e15cf37da2a90a39256e00cbb0
SHA1 3873f8cb506383c10345f45078c3bc1d423a51c4
SHA512 31fd0c45e0498554ca499433a7ce8807c5b7adc9e566300557f0a8d57a264f2adbd3dfc1d9894c16cb93c1cd3c1a2094184af4a3c06aa0a279c0b2be381afbd8
SSDEEP 1536:oYuggYMAx0eTp8VS4zdy4VsL6YAJvIsBmVc1CgAOfaoAQm1Ih0vTu7raZSFFC:9WYMZeTWS4zw4VsmYa0gZxK1Ih0vTcZ2
TLSH
T1CB8302BC77FA5E3305AC1D653A5B73E4A79EE2D0C880EEDE10E62F0584FB634060515A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 fe915d9a73b60ac8689092625f0d622b222b25b663bf7d2048f658fbd152880c
MD5 3f2520e7dedf6da8e0973bb8f45835c8
SHA1 8217a977b041ceec3b2d4f4a5229130738e64485
SHA512 b40e8685d2133026c5d045790512a3051b2bb510fd08aace9ff2775cb551aa115cf1523f8138b43d7bdb77b086f904a5dccc2891b4c9696fc8f1f16401419c39
SSDEEP 3072:NEyNKFBzY2u3+DY7Ly51QhYbeflYMZeTWS4zw4VsmYa0gZxK1Ih0vTcZbG:NEyIfzna+DALOQhYifvZAWXszBexqeG
TLSH
T1921422B62FFA0937368D986C2A3BB6519996D593C8CCBF4F40552F061CEE5340B0624F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 e25db0bd8d82941a7adafaab2f59e8778a056af16aeb5998579817869679ea75
MD5 5a3adab4bde0e973265785e10ab56ab8
SHA1 d0dd09a0a4acdc9388274cdd9a8a0d745f06f472
SHA512 cccec8986f9bed161d626b171ba324fa1a79a25768a9ebb6a821705bb68bd233dd7d17a2f975682bab00c3a1ed92914bd6471fc1dbbc6d9472f4bbede675c08f
SSDEEP 3072:9yNKFBzY2u3+DY7Ly51QhYbeflYMZeTWS4zw4VsmYa0gZxK1Ih0vTcZbG:9yIfzna+DALOQhYifvZAWXszBexqeG
TLSH
T1701412B52FFA4A37228DD96C3B7BA155E262D5A1C4CCAE9F00551B062CFF934170624F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 c8e1c777d67c2f3e0a3e975d411f207f91323107b99964597ec8c49ed50df162
MD5 32f535ffd25bdee32972c68bac2084ad
SHA1 cf603440109e527c1ac9aad81fcfa37b721102ad
SHA512 fb4ab3086eec4ba16ba09f32662b546e3c93fad378c24475849883fb3d8cf40e206c09876fabec23d766ec7768d955f2e1d637bb721cbb37b1cbc1a52621ae01
SSDEEP 3072:ZEyNKFBzY2u3+DY7Ly51QhYbeflYMZeTWS4zw4VsmYa0gZxK1Ih0vTcZbG:ZEyIfzna+DALOQhYifvZAWXszBexqeG
TLSH
T16C1422B62FFA0937368D986C2A3BB6519996D593C8CCBF8F40552F061CEE5341B0624F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 cfea2887a6182919a0ab72fbe47ef4a875dffa6632b9e511a3a09f61d463b609
MD5 e6efceb4dae4de6c94b0ce35975a48bc
SHA1 329b04b0c2142e8a22606dca6dbd87248c79d008
SHA512 06096254c30593fdf02b7185ff3b58ff40c6567d2f58485823d63e80f5710b08df02ca149ba22c2cb75b63986222ae97008af641ab3f16e5feac32d3278ff636
SSDEEP 3072:CyNKFBzY2u3+DY7Ly51QhYbeflYMZeTWS4zw4VsmYa0gZxK1Ih0vTcZbG:CyIfzna+DALOQhYifvZAWXszBexqeG
TLSH
T1331412B52FFA4A37228DD96C3B7BA255E262D5A1C4CCAE9F01551B062CFF934070624F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4464-0-0x0000000003200000-0x000000000327E000-memory.dmp

Download

memory/5948-17-0x0000026CEE640000-0x0000026CEE76B000-memory.dmp

Download