Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    685s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-es
  • resource tags

    arch:x64arch:x86image:win11-20260513-eslocale:es-esos:windows11-21h2-x64systemwindows
  • submitted
    19/05/2026, 02:51

General

  • Target
    $PLUGINSDIR/ioSpecial.ini
  • Size 193B
  • Sample260519-dcf3dsft5s
  • SHA256 4868ee046975b35282e7a613526d3c9d7b3e0b1122794238d286aa464b0b5bd1
  • MD5 SHA1 SHA512 TLSH
Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 48 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 56 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\ioSpecial.ini
    1⤵
    • Modifies registry class
    PID:3404
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:5108
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:3748
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4652
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8d478c728,0x7ff8d478c734,0x7ff8d478c740
        2⤵
          PID:1528
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,12922087486927001391,16744278914442536492,262144 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1908 /prefetch:2
          2⤵
            PID:440
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1840,i,7139341427472703564,6347263119900302293,524288 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2292 /prefetch:11
            2⤵
            • System Time Discovery
            PID:1892
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=1812,i,17756360098488273584,5858051225725357876,524288 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2540 /prefetch:13
            2⤵
              PID:2968
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3124,i,16022683320308755991,13200968859429199757,2097152 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3264 /prefetch:1
              2⤵
                PID:3060
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3128,i,9238345285532358807,14209596071192702909,2097152 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3296 /prefetch:1
                2⤵
                  PID:1512
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4352,i,9585960602556377718,18101655918798036388,2097152 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4428 /prefetch:9
                  2⤵
                    PID:4824
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,59385066137120767,8102944152176397406,2097152 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4744 /prefetch:1
                    2⤵
                      PID:2620
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,11620074039046543731,7240302358964200082,524288 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5520 /prefetch:14
                      2⤵
                        PID:1444
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4864,i,4344928104961898801,6967887921544426604,2097152 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5148 /prefetch:1
                        2⤵
                          PID:728
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5900,i,3516224935924767245,299769685633992425,2097152 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5716 /prefetch:1
                          2⤵
                            PID:4996
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4824,i,13271125979713884670,16733556813154943671,2097152 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4720 /prefetch:1
                            2⤵
                              PID:4392
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4692,i,13098411488228300427,16153854879679092932,2097152 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6060 /prefetch:1
                              2⤵
                                PID:2200
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5504,i,5514887179524801926,7332926490031709283,2097152 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5544 /prefetch:1
                                2⤵
                                  PID:1604
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,951805347447260086,3095289669773113903,524288 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5944 /prefetch:12
                                  2⤵
                                    PID:1204
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,10914229179429799355,3579228999699035100,524288 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6292 /prefetch:14
                                    2⤵
                                    • Modifies registry class
                                    PID:220
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4736,i,14404410098239481907,2821411643560227810,524288 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5504 /prefetch:14
                                    2⤵
                                      PID:3860
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4812,i,1113977555668322437,7556844308730495983,524288 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6132 /prefetch:14
                                      2⤵
                                        PID:3968
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6116,i,4638743059981546648,9599905461317950632,524288 --field-trial-handle=1912,i,11989856512536111808,2543838941721433318,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4740 /prefetch:14
                                        2⤵
                                          PID:4916
                                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                        1⤵
                                          PID:4448
                                        • C:\Windows\system32\svchost.exe
                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                          1⤵
                                            PID:1920
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                            1⤵
                                            • Drops file in Windows directory
                                            • Enumerates system info in registry
                                            • Modifies data under HKEY_USERS
                                            • Modifies registry class
                                            • Suspicious behavior: EnumeratesProcesses
                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                            • Suspicious use of AdjustPrivilegeToken
                                            • Suspicious use of SendNotifyMessage
                                            • Suspicious use of WriteProcessMemory
                                            PID:3896
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8d478c728,0x7ff8d478c734,0x7ff8d478c740
                                              2⤵
                                                PID:4820
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1964,i,17672007578167279498,4684452921214502652,524288 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=2112 /prefetch:11
                                                2⤵
                                                • System Time Discovery
                                                PID:1676
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,557626979172476980,13670434359014379431,262144 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=2080 /prefetch:2
                                                2⤵
                                                  PID:4360
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,5002963688072451813,15221491841563007933,524288 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=2472 /prefetch:13
                                                  2⤵
                                                    PID:2564
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3268,i,17337437481953683822,15418612269539669289,2097152 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=3300 /prefetch:1
                                                    2⤵
                                                      PID:3012
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3308,i,44640185138791899,18220904597236570748,2097152 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=3320 /prefetch:1
                                                      2⤵
                                                        PID:1372
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4584,i,10690465830544919925,16023645620096108845,2097152 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=4600 /prefetch:1
                                                        2⤵
                                                          PID:5052
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5300,i,5384763929247989351,4346203362431459561,524288 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=5304 /prefetch:14
                                                          2⤵
                                                            PID:4536
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5724,i,17630943029597500928,14534835667004254957,2097152 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=5616 /prefetch:1
                                                            2⤵
                                                              PID:2176
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3512,i,7607775103311527120,9774688444130139763,2097152 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=3544 /prefetch:1
                                                              2⤵
                                                                PID:3996
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3440,i,396424509140552603,8812932700012923627,524288 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=4560 /prefetch:12
                                                                2⤵
                                                                  PID:2988
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,10106918213688613427,17981399406358346044,524288 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=5568 /prefetch:14
                                                                  2⤵
                                                                  • Modifies registry class
                                                                  PID:3216
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,7911208767688497708,2326378881783470517,524288 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=5804 /prefetch:14
                                                                  2⤵
                                                                    PID:4444
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6016,i,12440560937675438180,17506155644492103953,524288 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=6028 /prefetch:14
                                                                    2⤵
                                                                      PID:3068
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6020,i,15023932849842003548,12313362567631444294,524288 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=5984 /prefetch:14
                                                                      2⤵
                                                                        PID:3400
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6024,i,14064323490781490290,13907122465788376753,524288 --field-trial-handle=2084,i,5632477619122467501,18281959139666616162,262144 --variations-seed-version=20260518-054822.019000-production --mojo-platform-channel-handle=6172 /prefetch:14
                                                                        2⤵
                                                                          PID:4020
                                                                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                        1⤵
                                                                          PID:1192
                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
                                                                          1⤵
                                                                          • Modifies registry class
                                                                          • Suspicious use of SetWindowsHookEx
                                                                          PID:3188

                                                                        Network

                                                                              MITRE ATT&CK Enterprise v16

                                                                              Replay Monitor

                                                                              Loading Replay Monitor...

                                                                              Downloads

                                                                              CrashpadMetrics-active.pma

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
                                                                              • Size 1024KB
                                                                              • SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              settings.dat

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                              • Size 40B
                                                                              • SHA256 1e4f54776b1b40b456dd805327615b3c5deffcf2db33e589d5bc6b52bbcd1933
                                                                              • MD5 SHA1 SHA512

                                                                              BookmarkMergedSurfaceOrdering

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                              • Size 6B
                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                              • MD5 SHA1 SHA512

                                                                              BrowsingTopicsState

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                              • Size 414B
                                                                              • SHA256 dbaff343936ed8526e23eaf0bff2ab3bf588185f6de4d73187238d2e0778a1c8
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              data_0

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
                                                                              • Size 44KB
                                                                              • SHA256 48e11fa09e1c0023e55a53e1aa60d673c52290af332da6960afaef1aab404706
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              data_1

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
                                                                              • Size 264KB
                                                                              • SHA256 d42d0f43db7f440ad90781e5e1509f25daf918b6f1da860d17529061f9399245
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              data_3

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
                                                                              • Size 4.0MB
                                                                              • SHA256 ed208ce257838548f6706078b35dc0768045d20f413e2077dd82557b0227328d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000004

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
                                                                              • Size 35KB
                                                                              • SHA256 a1a9c8cce2ae2a44963fe4037dd0e20356b491925cca4284ad52e14742debd45
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000005

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
                                                                              • Size 67KB
                                                                              • SHA256 8f9a1d2362f66337acbc53b184b0d2357181e528b07deda233bb523975d7a150
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00001c

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
                                                                              • Size 269KB
                                                                              • SHA256 a75b9cc7c05b2af0777e66a3b021d4c2c5624f2e27f8128b7f9410256c1a837b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00001f

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
                                                                              • Size 57KB
                                                                              • SHA256 312c70679b536146d69c4a5698febe01aa1defe092167e87fa9f3be6ef9f148a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 1KB
                                                                              • SHA256 d948d58a4d49e8e4713dcb45e7dbbc9a390cb57c19305a9da9cc3c699628d076
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              data_1

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
                                                                              • Size 264KB
                                                                              • SHA256 8b69502b7f87ed5cd1b8018a3b577b0df5c59ae6c848635b6460284994d22d22
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              LOG

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
                                                                              • Size 317B
                                                                              • SHA256 a867344ab2742455f72e47fbec8fed36534554183cbfabbd597292805f357621
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              000014.ldb

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
                                                                              • Size 18KB
                                                                              • SHA256 95486b5eccc9b62e96911ddee0f49f88c8ed4fe02a8a18fc3998de424657eff3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              000015.log

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000015.log
                                                                              • Size 38KB
                                                                              • SHA256 e0d339216868988b14dec430aa441502a51a4365890c2be0ca3fec2ce6fe4127
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              000017.ldb

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
                                                                              • Size 12KB
                                                                              • SHA256 914d9769d7dc396d05b65653314a6ddc68796b08ae8d7bf5814bb72e8d6969f5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              LOG

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                              • Size 5KB
                                                                              • SHA256 ce8e67330d9bf7c4d5fc7efaba109bad975c89ba48705ddbd16f20b9da3a7b6d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              MANIFEST-000001

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                              • Size 856B
                                                                              • SHA256 8a2215e8fa1b9eb5af12a37e7fcbc33c77365c446b8a56a2e3c0a25972ec3651
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              LOG

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
                                                                              • Size 332B
                                                                              • SHA256 3c68a692db52c544a923cb246a1a82f1d399d75b006c3040441522c41801e0ff
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Cookies

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
                                                                              • Size 20KB
                                                                              • SHA256 2da1930d6f69d1a1b7629d49576279cde575cf2760ad569d1dd4d52a97dc7fba
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Network Persistent State

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                              • Size 15KB
                                                                              • SHA256 6a006bf1ba884f3c5841ae518bb9095295000ae0c8e50f314ada001f52404131
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Network Persistent State

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                              • Size 3KB
                                                                              • SHA256 f0cc9b726736bd3cf2351f88d63c02597966dccac2554d03dbb9f6a7d94ec4f7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Reporting and NEL

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
                                                                              • Size 36KB
                                                                              • SHA256 4138509adc9b7532825024775572f1e52387f1906712aa9dc3ba347fb9adae8a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              SCT Auditing Pending Reports

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                              • Size 2B
                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                              • MD5 SHA1 SHA512

                                                                              TransportSecurity

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                              • Size 523B
                                                                              • SHA256 f01959137e5e6d65411ece59eaf60765025a41846233c7a581e69ca64f1b07c6
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              TransportSecurity

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                              • Size 1KB
                                                                              • SHA256 5d419ca1a4182d375cbd4fcff1c22b61234f8099718c8777f33c7d6f2e80e0eb
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              CURRENT

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
                                                                              • Size 16B
                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                              • MD5 SHA1 SHA512

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                              • Size 12KB
                                                                              • SHA256 0fc02087501ae3483a9c689735fb806a13cefe006553c0e6580255c5d3930928
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                              • Size 11KB
                                                                              • SHA256 b01486ff8dbd3d6647efce7836608983fab7eff0563baebc9cfdebd01c817403
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                              • Size 13KB
                                                                              • SHA256 fa38265bfdfad9e86a87f62c0d78932802f92f7606a87f6338a88397c4406065
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                              • Size 12KB
                                                                              • SHA256 161e6ecf2a5ed7ef197f92f336339dddb4c1cf56864aaa79db8f71ac827c506d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Secure Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                              • Size 17KB
                                                                              • SHA256 ba758b57426020503a6afa3980da432aa4242fd04c2e9eb22fef5397fb313aca
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              index

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\629206c7-9a38-435a-9c64-dbe31da1e9f5\index
                                                                              • Size 24B
                                                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                              • MD5 SHA1 SHA512

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\629206c7-9a38-435a-9c64-dbe31da1e9f5\index-dir\the-real-index
                                                                              • Size 576B
                                                                              • SHA256 b4074e7ecec359645309781f0dcae9ac06df87e7a1a4d1fad2a0dea00e916fba
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index~RFe5c5a5c.TMP

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\629206c7-9a38-435a-9c64-dbe31da1e9f5\index-dir\the-real-index~RFe5c5a5c.TMP
                                                                              • Size 48B
                                                                              • SHA256 c6567fac522c1327d6121706d851562fe60e865a8d8a738adb70bc67e31e31b8
                                                                              • MD5 SHA1 SHA512

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7efb8586-41ce-436c-807b-ac8a22c9ea87\index-dir\the-real-index
                                                                              • Size 2KB
                                                                              • SHA256 b089c49a7a85a51c569b3b4d1ab183dae7f8cac0089d66fdfc321c393e769cd7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7efb8586-41ce-436c-807b-ac8a22c9ea87\index-dir\the-real-index
                                                                              • Size 2KB
                                                                              • SHA256 6201dea09cd2cd53ec44552c8d03015059b009422ff9017ed5b7771217e4dba4
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index~RFe5c020b.TMP

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7efb8586-41ce-436c-807b-ac8a22c9ea87\index-dir\the-real-index~RFe5c020b.TMP
                                                                              • Size 48B
                                                                              • SHA256 19cbe86f15ca7d170b2a8f56acec13e263df6719ba2a7c7e8c40127bf04fb308
                                                                              • MD5 SHA1 SHA512

                                                                              index.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                              • Size 214B
                                                                              • SHA256 e08e68cbed8e5a18645781ccb38fedb5c7e31ac683cbdeaf2882f37748c944d5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                              • Size 390B
                                                                              • SHA256 cf2b2fff0738ccb73cc7ca97608703b963a770ea040720fc7dff8e7bb3035a09
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                              • Size 130B
                                                                              • SHA256 de5cc1426f87e99cf83090cc0a52a44cfcd0ac32b85d8347d3dc6ac95edfa23f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                              • Size 243B
                                                                              • SHA256 052d10076574fe9041bd59cde3e9787e3acf6c80048f64552b10adf69ea728f2
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                              • Size 216B
                                                                              • SHA256 fa0f50f7d9bf4de712fbda42ea19a49b322ebfaccfe86d640751ee22decbd882
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                              • Size 132B
                                                                              • SHA256 137ec5290368b2b5efdd4197c70802ce29f7cfcf04f194b0a93795edb25c773b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                              • Size 383B
                                                                              • SHA256 e413ad196bb3532f551f73459e20da4ce710457a64d21255e10060d12377aaff
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt~RFe5bf5f5.TMP

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5bf5f5.TMP
                                                                              • Size 137B
                                                                              • SHA256 ea7d47a98e99decd1b42eef3f0e27286037919c93f52ae5bad0087fbd8d5921b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              000003.log

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
                                                                              • Size 4KB
                                                                              • SHA256 f071baf80951a415588f46f2ac9e355a706804c43237741b9642f22bc9844fc6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              LOG

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
                                                                              • Size 333B
                                                                              • SHA256 68b75dc74b0107e8744e00b36cec9666bce0958c5fe00feea0529033fc9a7902
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                              • Size 120B
                                                                              • SHA256 ad983962aede73875f95437471cf8b579775eb21fea2896d0ff25e83bffc76ae
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                              • Size 168B
                                                                              • SHA256 84ea77321371ec3c25ab0fb97a529f4b0b4d0ef35d623956aa79498c6b81b2b5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index~RFe5b313e.TMP

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b313e.TMP
                                                                              • Size 96B
                                                                              • SHA256 5e7d00e142becec4bc236c5440d8277cfab4bfdfecb3e5538225a7e64746171d
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              000003.log

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
                                                                              • Size 308B
                                                                              • SHA256 cbee1100a2c9add47776b7e416b58a809f6feb9fe458bef8185b0c176b5db340
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              LOG

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
                                                                              • Size 320B
                                                                              • SHA256 c135f3424d72bf7a48aeb23ba1c27e72aabc6a597db933cb0bdcd8b87184eaea
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Session_13423633271917890

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13423633271917890
                                                                              • Size 2KB
                                                                              • SHA256 0118ee53bb09d3d27a082995a4125b60ccfc99749c8bb1914f536093e28f5bdf
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                              • Size 72B
                                                                              • SHA256 3ceb590974cad346c1d5a8599e23372ed1c9a8fe6299a9dfa51bfec19685ae5e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              LOG

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
                                                                              • Size 348B
                                                                              • SHA256 1aef3c095a269c547defb4ba41a055a7ceda9ebf7a480d016481938c9f562728
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              LOG

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
                                                                              • Size 321B
                                                                              • SHA256 55808a0bc1ec6869c3c20cef1835406ea054f4b71d124c2d61dbb8459ad8ffde
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              512.png

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3896_1421488794\Shortcuts Menu Icons\Monochrome\0\512.png
                                                                              • Size 2KB
                                                                              • SHA256 e7537de88977426000cf535f51c50337339a74dcafbc57f4a8e3da6e72d6bb7f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              16.png

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3896_346530680\Icons Monochrome\16.png
                                                                              • Size 257B
                                                                              • SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Web Data

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
                                                                              • Size 138KB
                                                                              • SHA256 4c0a8b9f497df755d4d7dab151d5668caacdf89a235d7b9dc4ffae0395e59ee8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              QuotaManager

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
                                                                              • Size 40KB
                                                                              • SHA256 87b720d709e444207673f7e7ab295a9f9f2fa5b2a8262cfac3f2270d1780732a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              QuotaManager-journal

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
                                                                              • Size 8KB
                                                                              • SHA256 ab63dbf7c5856a8a4994caebfb74e6185fa7d9db149363442ad4d8b4437595d4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              000003.log

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
                                                                              • Size 23KB
                                                                              • SHA256 1c2a27d6be0cc8fc2c4c45f666c3d84ce70f3c343b0bf090e8475117149845eb
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              LOG

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
                                                                              • Size 317B
                                                                              • SHA256 6e15bc22e10a268fe72e0751a653e47f9db652702b1c7bb0d2be233277f05c29
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              000003.log

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
                                                                              • Size 1KB
                                                                              • SHA256 76019407bf542bcf35bc7cdde02c2146e98598f2fe775c056feb3a7c924f76d0
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              LOG

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
                                                                              • Size 335B
                                                                              • SHA256 07ee575cdadd83739fc475aee6b8f5aea6097d94ffb4e071368500e6af88c811
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              data_1

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1
                                                                              • Size 264KB
                                                                              • SHA256 c0c811cb3f9c115f22bc3125a6d10ea46c50d63c2623abadf2cb58d9ec20f5a8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Last Version

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
                                                                              • Size 13B
                                                                              • SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
                                                                              • MD5 SHA1 SHA512

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                              • Size 228KB
                                                                              • SHA256 17965fee5a05d655aba555e90aa0599e1fc59f3f53956289c5f6f6834e65ce41
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                              • Size 228KB
                                                                              • SHA256 5e815ca489ca11f8800fd2e463d29d0063f17286d09a6cd91555c69bc9c7f450
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                              • Size 115KB
                                                                              • SHA256 f6b9d846361f0a54509b0a5bc8747b0b98f18dcb19d25b6bb4eb29aec7558c8e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                              • Size 118KB
                                                                              • SHA256 316cbc4a6cf95042e7e3d2e8161532688e5d8a384572fe29b88b50554401690a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                              • Size 118KB
                                                                              • SHA256 f25ce244edd4be583346a9bbf63fafc8067a2b3ab99b0ff04ad5aede5c1b677b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                              • Size 117KB
                                                                              • SHA256 3617dca4cf846cc26a137f701e9fae41fc83c47f4edef5299b8e62ae9916e989
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              data_1

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                                                              • Size 264KB
                                                                              • SHA256 07a5d4f0573ae2d34052a1c50cc8f16bcba828b791e0c855e38e541c8f88ef59
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Variations

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
                                                                              • Size 85B
                                                                              • SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
                                                                              • Size 13B
                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                              • MD5 SHA1 SHA512