Overview

overview

5

Static

static

5

Email rece...e).eml

windows10-2004-x64

3

Email rece...e).eml

windows11-ltsc_2024-x64

1

Reservatio...26.pdf

windows10-2004-x64

3

Reservatio...26.pdf

windows11-ltsc_2024-x64

3

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/07/2026, 09:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Email recebido (fraude).eml
  • Size 89KB
  • Sample260727-k64twazbpc
  • SHA256 7a8b2e0b252310a278764927df923b2d8813a875b915c02d2e244237dda2abac
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
adwarediscoveryspyware

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 4 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 36 IoCs
  • Suspicious use of SendNotifyMessage 33 IoCs
  • Suspicious use of SetWindowsHookEx 36 IoCs
  • Suspicious use of WriteProcessMemory 39 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\Admin\AppData\Local\Temp\Email recebido (fraude).eml"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies Internet Explorer settings
    • Modifies registry class
    • NTFS ADS
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2076
  • C:\Windows\SysWOW64\prevhost.exe
    C:\Windows\SysWOW64\prevhost.exe {DC6EFB56-9CFA-464D-8880-44885D7DC193} -Embedding
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2716
    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
      "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" /b /id 2716_541672230 /if pdfshell_prev01010427-4ac6-41d0-9588-55c84aa12157
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:4584
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" --type=renderer /prefetch:1 /b /id 2716_541672230 /if pdfshell_prev01010427-4ac6-41d0-9588-55c84aa12157
        3⤵
        • System Location Discovery: System Language Discovery
        • Checks processor information in registry
        • Suspicious use of SetWindowsHookEx
        PID:3404
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4176
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffd9348c728,0x7ffd9348c734,0x7ffd9348c740
      2⤵
        PID:3836
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,2851642048921063645,1724509309159788209,262144 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
        2⤵
          PID:3292
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2172,i,3473800020075059658,9979852477151151967,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2236 /prefetch:3
          2⤵
          • System Time Discovery
          PID:2256
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,7595200397560410193,9373341193603137690,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2600 /prefetch:8
          2⤵
            PID:3616
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3088,i,3204698453821515685,14813795715009199376,2097152 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3096 /prefetch:1
            2⤵
              PID:1888
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3144,i,6829833805789760787,17802950228652618214,2097152 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3176 /prefetch:1
              2⤵
                PID:4640
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4520,i,11966101591665144403,11545839155324303512,2097152 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4568 /prefetch:1
                2⤵
                  PID:2272
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4752,i,6340806067198694543,936080270150867600,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4764 /prefetch:8
                  2⤵
                    PID:4744
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5364,i,3903111517035664811,6153626505090617681,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5360 /prefetch:8
                    2⤵
                      PID:4600
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5456,i,16867893276516342937,5108301787334532212,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5468 /prefetch:8
                      2⤵
                        PID:1584
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,2404086372330722912,15542248542571806762,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5364 /prefetch:8
                        2⤵
                          PID:3884
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5408,i,16472788612050484755,11700759669357739281,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
                          2⤵
                            PID:4752
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5688,i,8009088273806304100,2413999548633974460,2097152 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5592 /prefetch:1
                            2⤵
                              PID:2348
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5652,i,9012395313748937800,6116218316742623893,2097152 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1700 /prefetch:2
                              2⤵
                                PID:3240
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4748,i,6067663296167608656,18084856003107875913,2097152 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5744 /prefetch:1
                                2⤵
                                  PID:5556
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6300,i,7128062006658754268,14970238111914056677,2097152 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6268 /prefetch:1
                                  2⤵
                                    PID:6092
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6456,i,2485264296485228296,2518843838453973446,2097152 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6428 /prefetch:1
                                    2⤵
                                      PID:5152
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6308,i,2686642526108491079,7154093252179756240,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5496 /prefetch:8
                                      2⤵
                                        PID:2924
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6304,i,15663174776305145837,12189649192105947569,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:8
                                        2⤵
                                          PID:1176
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5936,i,11004608305514137780,16899170124082271879,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:8
                                          2⤵
                                            PID:2112
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5960,i,6943745514802868424,11201190967906516996,524288 --field-trial-handle=2004,i,9702332111730058039,5564536420823595772,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6140 /prefetch:8
                                            2⤵
                                            • Modifies registry class
                                            • Suspicious behavior: GetForegroundWindowSpam
                                            • Suspicious use of SetWindowsHookEx
                                            PID:5968
                                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                          1⤵
                                            PID:4724
                                          • C:\Windows\system32\svchost.exe
                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                            1⤵
                                              PID:4000

                                            Network

                                                  MITRE ATT&CK Enterprise v16

                                                  Replay Monitor

                                                  Loading Replay Monitor...

                                                  Downloads

                                                  BookmarkMergedSurfaceOrdering
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                  • Size 6B
                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  BrowsingTopicsState
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                  • Size 414B
                                                  • SHA256 ad7642ce165d0a3b69a059c8d79ac8da60ab83ae9135bbbf622c0e5eec9ae0e5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  temp-index
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                  • Size 696B
                                                  • SHA256 2e40f4d41d1ba515a8dd477d59cb31172f80792dcb8753f52527efd87423bc1b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                  • Size 593B
                                                  • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  craw_background.js
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                  • Size 531KB
                                                  • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Network Persistent State
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                  • Size 9KB
                                                  • SHA256 3917da0f43dcc9a1dac505f4115aab60823ff1e9c3460bc0465353193b0633d8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  SCT Auditing Pending Reports
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                  • Size 2B
                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  Preferences
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 12KB
                                                  • SHA256 fcaeeaf768f84e459d344ea8ceb803590249977b6858b3cc1858a69494793d87
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Preferences
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 12KB
                                                  • SHA256 e2b3e8f673083e97b021b184cbb7bc01dbaae57173797d0674acdc5dc18d806c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Preferences
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                  • Size 13KB
                                                  • SHA256 30c3dd236a8afc356ce2da84e63a682c2ede8703868300b6c581c679d2e1d83a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Secure Preferences
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                  • Size 13KB
                                                  • SHA256 d1dd7b4fc6a8fd33c82745e16734a0113d977376ec4a7962af9fadb5fb22d343
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                  • Size 96B
                                                  • SHA256 69288bba9488463f01951c11d08d18488e0f4556f270c42acdb837b4ae22c90b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                  • Size 72B
                                                  • SHA256 8812aa94474473d29f9771e2f28f2640c6228a59804bcfb32a9916f7f47cfa84
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                  • Size 48B
                                                  • SHA256 ae06389e345cc4ad454b33885bf8e5fc1f8bde48dde705cddbdf447b9e19d2ec
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  data_0
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
                                                  • Size 8KB
                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  data_1
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
                                                  • Size 264KB
                                                  • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  data_2
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
                                                  • Size 8KB
                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  data_3
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
                                                  • Size 8KB
                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  CURRENT
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\CURRENT
                                                  • Size 16B
                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  MANIFEST-000001
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\MANIFEST-000001
                                                  • Size 41B
                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  Local State
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                  • Size 236KB
                                                  • SHA256 1cc6eb0ab340465387ab0dd917defe6e191b52ebfd8798c057b96fbb05e365df
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Local State
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                  • Size 115KB
                                                  • SHA256 d6419903dc383887ec55bad2004ecc7d7a660983b813b3719457496cdb68d610
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Local State
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                  • Size 236KB
                                                  • SHA256 6b6ef254f4753521fee6d82420af69c40fa5ca358daac2fa1800c6d1c58b4912
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Local State
                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                  • Size 237KB
                                                  • SHA256 ee4d53307f2a6ec57607fb2c738861a3ba6a30dbd10dc88c8553d61fadc7ebeb
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Reservation #6657453112 quarta-feira 12 de agosto de 2026.pdf
                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\1RE9XKCE\Reservation #6657453112 quarta-feira 12 de agosto de 2026.pdf
                                                  • Size 24KB
                                                  • SHA256 b58cf99d46b84e5bc5391f2d23d669ca24f46fa35c07af9cfd9e7f9dfe5b2514
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  7ab398bc-0a4e-4568-84a3-271c387da713.tmp
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4176_1281934985\7ab398bc-0a4e-4568-84a3-271c387da713.tmp
                                                  • Size 242KB
                                                  • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4176_1281934985\CRX_INSTALL\_locales\en\messages.json
                                                  • Size 450B
                                                  • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  CUSTOM.DIC
                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
                                                  • Size 16B
                                                  • SHA256 a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  Reservation #6657453112, quarta-feira, 12 de agosto de 2026.pdf:Zone.Identifier
                                                  • Path C:\Users\Admin\Documents\Reservation #6657453112, quarta-feira, 12 de agosto de 2026.pdf:Zone.Identifier
                                                  • Size 26B
                                                  • SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  memory/2076-8-0x00007FFDBC6D0000-0x00007FFDBC8C5000-memory.dmp
                                                  Download

                                                  memory/2076-5-0x00007FFD7C750000-0x00007FFD7C760000-memory.dmp
                                                  Download

                                                  memory/2076-11-0x00007FFD79FE0000-0x00007FFD79FF0000-memory.dmp
                                                  Download

                                                  memory/2076-1-0x00007FFD7C750000-0x00007FFD7C760000-memory.dmp
                                                  Download

                                                  memory/2076-9-0x00007FFDBC6D0000-0x00007FFDBC8C5000-memory.dmp
                                                  Download

                                                  memory/2076-10-0x00007FFDBC6D0000-0x00007FFDBC8C5000-memory.dmp
                                                  Download

                                                  memory/2076-2-0x00007FFD7C750000-0x00007FFD7C760000-memory.dmp
                                                  Download

                                                  memory/2076-7-0x00007FFDBC6D0000-0x00007FFDBC8C5000-memory.dmp
                                                  Download

                                                  memory/2076-6-0x00007FFDBC6D0000-0x00007FFDBC8C5000-memory.dmp
                                                  Download

                                                  memory/2076-12-0x00007FFD79FE0000-0x00007FFD79FF0000-memory.dmp
                                                  Download

                                                  memory/2076-4-0x00007FFD7C750000-0x00007FFD7C760000-memory.dmp
                                                  Download

                                                  memory/2076-0-0x00007FFD7C750000-0x00007FFD7C760000-memory.dmp
                                                  Download

                                                  memory/2076-50-0x00007FFDBC6D0000-0x00007FFDBC8C5000-memory.dmp
                                                  Download

                                                  memory/2076-3-0x00007FFDBC76D000-0x00007FFDBC76E000-memory.dmp
                                                  Download

                                                  memory/4000-494-0x00000221526D0000-0x00000221527B9000-memory.dmp
                                                  Download