b8a3d99b24bff6e01dcbe49ce33bb8d5ea537de853d44bb9401a531c85307691

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
899s
max time network
883s
platform
windows11-21h2_x64
resource
win11-20260513-es
resource tags

arch:x64arch:x86image:win11-20260513-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
30/07/2026, 17:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
modrinth.index.json
Size 9KB
Sample260730-wf87fsdr4x
SHA256 b8a3d99b24bff6e01dcbe49ce33bb8d5ea537de853d44bb9401a531c85307691
MD5 80d4f7efa3afeceec1fc2e349e0e7c06
SHA1 f4fba6380ea1246240071692b0ec55792191bb2c
SHA512 c53f493d3dd89206a13c066367036a0089f47bf4c15917535bb469f6eb36b28e8a4c3354295b2590664870ac155161ac7641fb7cc84be8c2f70f5ff2b9d805a1
SSDEEP 192:ZrRthrU6FrEeXrlqrWCqbNr/t9XTX7BX3SrzDXV4mrSRXeoXGXt+U:VRt9UClrlml8/tZDRePV4CSdpIwU
TLSH
T152127469D3F09DD706C0E272E82F605362215A9F0FA87D1579DC408C4F2F62E726A7E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
58	1856	chrome.exe

Probable phishing domain 1 TTPs 1 IoCs

Phishing

T1566

description	flow	ioc	stream
HTTP URL	58	https://anydesk.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a2363d819f6f964a	5

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4532	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1856	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299077201915552"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
1572	chrome.exe
1572	chrome.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
680	Process not Found
680	Process not Found
680	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe
Token: SeShutdownPrivilege	4256	chrome.exe
Token: SeCreatePagefilePrivilege	4256	chrome.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe
4256	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
436	OpenWith.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 4256 wrote to memory of 3388	4256	chrome.exe	83
PID 4256 wrote to memory of 2320	4256	chrome.exe	84
PID 4256 wrote to memory of 2320	4256	chrome.exe	84
PID 4256 wrote to memory of 1856	4256	chrome.exe	85
PID 4256 wrote to memory of 1440	4256	chrome.exe	87
PID 4256 wrote to memory of 1440	4256	chrome.exe	87
PID 4256 wrote to memory of 1348	4256	chrome.exe	88
PID 4256 wrote to memory of 3956	4256	chrome.exe	89
PID 4256 wrote to memory of 1348	4256	chrome.exe	88
PID 4256 wrote to memory of 3956	4256	chrome.exe	89
PID 4256 wrote to memory of 2348	4256	chrome.exe	90
PID 4256 wrote to memory of 2348	4256	chrome.exe	90
PID 4256 wrote to memory of 1888	4256	chrome.exe	92
PID 4256 wrote to memory of 1888	4256	chrome.exe	92
PID 4256 wrote to memory of 1640	4256	chrome.exe	93
PID 4256 wrote to memory of 2508	4256	chrome.exe	95
PID 4256 wrote to memory of 2508	4256	chrome.exe	95
PID 4256 wrote to memory of 4568	4256	chrome.exe	96
PID 4256 wrote to memory of 4636	4256	chrome.exe	97
PID 4256 wrote to memory of 4540	4256	chrome.exe	98
PID 4256 wrote to memory of 4576	4256	chrome.exe	99
PID 4256 wrote to memory of 4576	4256	chrome.exe	99
PID 4256 wrote to memory of 2496	4256	chrome.exe	100
PID 4256 wrote to memory of 2496	4256	chrome.exe	100
PID 4256 wrote to memory of 1572	4256	chrome.exe	101
PID 4256 wrote to memory of 1572	4256	chrome.exe	101
PID 4256 wrote to memory of 4836	4256	chrome.exe	102
PID 4256 wrote to memory of 4836	4256	chrome.exe	102
PID 4256 wrote to memory of 2444	4256	chrome.exe	103
PID 4256 wrote to memory of 2444	4256	chrome.exe	103
PID 4256 wrote to memory of 1688	4256	chrome.exe	104
PID 4256 wrote to memory of 1688	4256	chrome.exe	104
PID 4256 wrote to memory of 2272	4256	chrome.exe	105
PID 4256 wrote to memory of 2272	4256	chrome.exe	105
PID 4256 wrote to memory of 3488	4256	chrome.exe	106
PID 4256 wrote to memory of 3488	4256	chrome.exe	106
PID 4256 wrote to memory of 2660	4256	chrome.exe	107
PID 4256 wrote to memory of 2660	4256	chrome.exe	107
PID 4256 wrote to memory of 1632	4256	chrome.exe	108
PID 4256 wrote to memory of 1632	4256	chrome.exe	108
PID 4256 wrote to memory of 1572	4256	chrome.exe	109
PID 4256 wrote to memory of 4228	4256	chrome.exe	110
PID 4256 wrote to memory of 4228	4256	chrome.exe	110

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\modrinth.index.json
1⤵
- Executes a command shell one-liner
- Modifies registry class
PID:4532

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:436

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd5b04c728,0x7ffd5b04c734,0x7ffd5b04c740
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,13113641072158722585,10300929675873605983,262144 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2276,i,1622930106779499175,8338912671536722462,524288 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2280 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:1856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,4629974673662877959,5610237629733594701,524288 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2412 /prefetch:13
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,8702483912465776108,1083382297440119998,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,5493172262664319553,8879269345510410036,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4284,i,6418117048592210224,5850192387817003596,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4300 /prefetch:9
  2⤵
  PID:2348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4652,i,10677587958558413276,9636983697103786292,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5460,i,10465631839259405786,8484198920172441212,524288 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5280 /prefetch:14
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5512,i,1072418292088778364,966640945268865161,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:2508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3820,i,16999749725416971288,6016889026572757700,524288 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3088 /prefetch:14
  2⤵
  PID:4568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3816,i,18349847576089429023,7280038537977710113,524288 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:14
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3360,i,12524589680320410141,16875093721356922577,524288 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3696 /prefetch:14
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3648,i,10213383744803186199,10450235647173382189,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5888,i,8329792014980739629,1764546821579566564,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3088 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6020,i,10082494602057408320,17873070111867234971,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3816 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4908,i,2806269060447065092,12490375333239835147,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3396,i,11367061142326914535,16603435389458346555,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4356,i,6864005892949911324,3857185037803898445,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5360,i,16617471548248123042,10518847887838742454,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3704,i,17585148454269124643,17779123375980656115,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5788,i,5410076979882871147,4122623098508735590,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6028,i,2861801519678433411,17585386584538947144,2097152 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6180 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6436,i,506117288345628404,18009357673599385686,262144 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6456 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4316,i,11788091117236213976,9032220538773057107,524288 --field-trial-handle=1940,i,13355809900424250589,17263662813078127996,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:4228

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1288

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1504

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 01f7d2e17aec1346e126bdbe817f5b26458cb6d19e42ae7e8c436c170762f0c0
MD5 bdd6e2d84dadd664a4b9e8828d443937
SHA1 c2222bca733dae5d615299e1f4c57670fab01742
SHA512 a0f53d5d05eacb6118e13a927e4e6cfc42ee5a0a80e798195afd5ce4fc9dcbd1d8e53bb833e98faa8c732eba626bd8f185291e01f7628072d9041789ea7a48b3
TLSH
T1DDE02BBACE21A83B2CFC471855444A46DB5403676750490F3A3E81198FB22764585C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 373KB
SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
MD5 ad6388a08d35f6d67db1213404b7f81d
SHA1 55cb415cfa760fb4beda8422d7c635cd4caf1915
SHA512 1b92070f13725fbe34b18dce86e09ee76536ef7dd7190f2c11d54f71b91acdfd40f03c8972a85099b988fae24eaec038be967cbe7b57783340140481b9362248
SSDEEP 6144:qm2dRYZtgXkt4w9410UKjgGHjMaP8RVkqSRhP58OU5R67u4nORWO7lQ8E9:C8tg599lGDBskZP58B67znOwGQ8E9
TLSH
T1A084232C983F6900BB0252741FD6C76E4FF40988A2C0D4C28254A193F9B7EA7F5A7779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 c581926f1c92c2933abf819dbdd5546068393474f78abd494c582063d88c6ec4
MD5 75d169aa29a9a49694b036b45eacea26
SHA1 f6bdcd245ea09f5910c0f852b3c5d278f6bea512
SHA512 05b355e57576fd88fdd5824cd9a84eb9dd95ef01dfd102b9c72fffb8157c7656bdc8f5f0053f3b3b015fd00f787ef92f086a7fe2828e7504a38115f2e654721e
TLSH
T159C09202B8808256CB688BB40CE30BD2B7E01A585D135ACA82E244FD9872A724A40055
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 689128a15ae56a30ef3248e67e517804ffa2637e2551eb4ee1f43a8c65441a06
MD5 fe2d9aa88910848bc9ccd509f71143f8
SHA1 ce7c89ca1e5a9d71304599f63e2a6c224c310427
SHA512 1d0a7037cdaece869d66287e12e993d4c051b8876f76f5565f416125497a02246a42dd802fba531537b0684cbc89c96c23e7d473fda30a3e0b42f8db5159ba25
TLSH
T13531DA11F880B659EF941E7AD4C70EA671F0854A3027CF8E2DA06876205BFB0E4C6393
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_anydesk.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 d64b019840e73fc880f271998b9ebc88f5016df9760ee993677080c9bff8e49c
MD5 a6ba57394ba988a5541b5a54da9a5f5d
SHA1 8866c61339c0a080d14228d84e66a952029c8e62
SHA512 607ee90c8d40f38b601f1834d04d592998324c09ea13a64d91962a7b140a9b235179933c1f201ea4a6ca6323fd9a15338e9978cd809d3e6a89e9bc369021f3e8
SSDEEP 192:D0uGlwWtxkYPmIat7PQ3xaIFFEd2MjhrekqAIQgNPimvaPifPiKNmUeZR0CFHUIp:D0uGlwWtxkYPmIat7PQ3xaIFFEd2Mpee
TLSH
T15922BAF783E8826DD91196F4DB15AF2FCE290924032C387689D8AE17D3E2432E14975F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 dbbb7121367237d105b83ca300bbacaa60352ff9adaa67859e0414a7a063b082
MD5 c86f61bc9128539a7b6be908317ab3ba
SHA1 c2d967088a655a09fa801f1e23de5e39553f6133
SHA512 a2d61c7eb1e8c2b74514322167e84c115255565517567fda81f6d80515e8585a4b7bb37698a6bf39fcfa29bc9b191039c2257b1763c65b8ad8386e3cdddae8c2
SSDEEP 192:D0uGlWtxkYmIat7PQE9kYaIFFEd2MjhrekqAIQgNPimvaPifPiKNmUeZR0CFHUIY:D0uGlWtxkYmIat7PQE9kYaIFFEd2Mpez
TLSH
T12822B9F783E8826DD91196F4DB15AF2FCE290924032C387689D9AE17D3E2432E14975F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 e39b06da5d7b4720e13f21ef013a1c11704d90e0158e003e16d90a74f1c3f64b
MD5 ceead6aab9c6d347f2140524fb79045e
SHA1 e68eac4ee1cf6ddba5612e6307ce7508a22e891e
SHA512 f0989cab56686ed0f9bc4df609da3639af54b7cac0383b57d20124e7457195196baa65070e3b36b07dd176e5d65d678e20da5437860d2e83110db4dfe86c76e4
SSDEEP 192:D0uGlwWtxkYmIat7PQEpQaIFFEd2MjhrekqAIQgNPimvaPifPiKNmUeZR0CFHUIv:D0uGlwWtxkYmIat7PQEpQaIFFEd2Mpeg
TLSH
T10C22BAF783E8826DD91196F4DB15AF2FCE290924032C387689D8AE17D3E2432E14975F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 a55219e9a95a791f2b3ccc1172b68e48ed783fccff6670ba64830b8875658d20
MD5 92760ce49049e10112d4a774ca084fb7
SHA1 689de275f7df5c0b3c6a9ee35653aefe9103b5f9
SHA512 47382bcee9b5990c353308bbeb0455b16f251c8184f06f5da804470e89676f4fcf0773d1949dbad5695bf3863275cf2180145a7e485e81b40449be6784651d84
SSDEEP 384:DHtVyYDkVgJdVhhc4eyaIFFO42Mpe1sAIDgNscvaqfOxG9omUehz0ClHUI9kYWuD:LUwGkdX/C
TLSH
T1AB42CEF7C3E8826DD91256F89B15BE1FCE290A24432C3C66C8D9EE1B93E2471D24564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 c6b088612b48e1a6c96f54615161581894d74476524948ff9fa401ce6a99f6ba
MD5 34df74c5a1df8b276d9e25879f973027
SHA1 d340c795e737c0778a857e9e8b7f5c4282ec9464
SHA512 54f5c5498715f76935b8489a51e8f195c525e505b54e337474fed176a498cae093131653b7131f62d740baea0113f0f36bb5d645816dd33476a9667739379e1a
SSDEEP 384:DHtVyYDkVgJdVhhc4eKraIFFO42Mpe1sAIDgNscvaqfOx+mUehz0ClHUI9kYWuJ5:jUwGPdX/E
TLSH
T12942CDF7C3E8826DD91256F89B15BE1FCE290A24432C3C66C8D9EE1B93E2471D24564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 bcd9d3247edc8fa34e4449861623cca926daa17e28f2bf14c7d520a7c9b0f39a
MD5 0aa80214c185e33053aa3544dd8efc26
SHA1 a511d6e00b5f25eeeffb21240365418b99d14fd5
SHA512 8c5d9f45ebd539b4604c20e322d66ea8731caec82254ed53c756e8f09a578fb74a2cc6e267e758b16bf4123a36c88c9cb19553ac13f273e357dfd5166f8b8b38
TLSH
T15D81BDF7C3E8D56D891196F4EB156E1FCE290A14432D3C6788D4AE5B93F2872D20134E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 c66e98aae005d1c2e2671a514ebf74fbc6b7f5461936b8704b63e4a76c43998b
MD5 5b44fa47a1a4a740a23ed6580886c4f9
SHA1 e7474b45718e6c527fc02dd841acb09fc7424cf8
SHA512 99287488781abeb92ff496ef3cbaff03ec45efab9f3674217aa0b8cbae703d68301d25360179e4e80d5bfe94a941fa764eb5c53de8c016479da43b62864b5842
TLSH
T1E03190DB967EB817202D4ABF1E48BC061576B83199516DF4CA9B827CB0C58F32716817
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0bd077befaca75e8ed2ad2674ce60ab9c14f5becf07e55155f777b75c993feb8
MD5 0a4489a4adab33d07e035e42f2aee481
SHA1 cc611241d2d9e07a6f51356a4ec175b11ffb596d
SHA512 a025b503556036b09f7a0d3940c11396253fac2bd1be841024223dc0d6d2205ef86c99299ba4fd95bb35234ed0f42a23892365f836fa2bbf8ae5b3f89c6126a3
SSDEEP 192:ARgH1P6UOKi7v7sBpAPRp2Z9NHsb+WNn/D40QZeV2j3adVyIsnAUgtaJ:ARgVvcD8UXerwb40/27ar8
TLSH
T1BB42D82EBA10653B6CDBD25AFD227753E7F5102171D02D84E6FC8A1C15EBACC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ef79b3724bcdeb953b3c640734bb7f4acf201f6058e416f49464f50d115258a5
MD5 e89042e1b58433c48aea1daf19d9e279
SHA1 da4f1b4c9d7981780da16917aadcf9eb5209d677
SHA512 78cb1c9070f00240ad6ffc9654bb454a84872223762fdbd82b169838491e64b5365a689a2bf642e0def9e74558bf26f17342ac65cbc633ff8bcff2cc5faae072
SSDEEP 192:ARgH1P6UOKIGv7sBhAPRp2alu9NHsb+WNn/D440Y420ZeV2j3aWVyIsnAUgraJ:ARgVvay88XUrwb4Q42D27aue
TLSH
T1CE52E72FBA10653B6CDBD25AF9227753E7F5102172D02E84E6FC8A1C15EBACC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 728adc4f5478efa7a11136cf9d753da7b4eb3ebe85c469c365dce78517ce8234
MD5 4986527c6dc5d0c942787ff4c305c5bd
SHA1 6530f8485694b19a6a780b3dd311fa8d5e5519a8
SHA512 3dd7c2edeb1e05a777598456fdd62b41bdb2728f9710783703364e9e01dae9c8d8e996062053c7a2e3312af94dc5997c56ca0b12ebef43e060a9d4d92661ebd7
SSDEEP 192:ARIcBzT1D6UOKI8v7sBhmPRp6X3xon9NHsb+WNiK/D4V7n+wwEmZeV2j3aKVyIs1:ARImzxDao8uXXrwJ41KEh27aKvO
TLSH
T1F462D66FA92015776CEBD25AF922B727E7F51021B2D01D84E6FC8E1C15EBACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 456823006cd10fffdd8e49c4154448b689c454771db77bc81dea758d0837573f
MD5 f0f0387488dfc127fc986efc21ef800e
SHA1 e895930273ef15aa566afb12db29ea6924f15d72
SHA512 ba2d5cb64a87fba93591e76b95a212e8d0e2b2da243e16372159f5cc1a7376ee494e86372497f12dd43a6866eae69fb62152621fc503f087fc74fe5151415760
SSDEEP 192:ARgH1D6UOKIGv7sBhmPRp6alu9NHsb+WNn/D44+64YLZeV2j3aKVyIsnAUgraJ:ARgVDay8uXorwb4I4Ym27aKe
TLSH
T18252D72FB91065776CDBD25AF9227B13E7F52021B2D01E84E6FC8A1C15EBACC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 88e8438c3e62d9a1a0d893291f757e2792753aa6b53478a1ca87e755a8cbca70
MD5 36db98126753e9f48878a05c0143cd30
SHA1 5f0dc6282cfa528748e9d94fc53171614dc65a32
SHA512 65e59e0269686844da5d962605c8124f885d338432ad59a21b4ce6062374df2addddd8008f0777297de4a53de95a765e2c1f702a2109519d46b8fe127d6046f8
SSDEEP 192:ARIcBzH1D6UOKI/v7sBhmPRp6X3x0n9NHsb+WNiK/D44wwE9ZeV2j3aKVyIsnAUd:ARImzVDaX8uXvrwJ4YEE27aKvO
TLSH
T1D962D72FB92015776CDBD25AF922B727E7F52021B2D01D84E6FC8A1C15EBACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 67f79e2295295666ba84ede200a27ecfc8d9e4ee31f6102fb7dd681e11c04c5d
MD5 476f59708b05db3a9dceaf9369468ee0
SHA1 6ab22445b214d420f0c87a5189834fb3cb06e095
SHA512 e1c5e4404da8d92849beacb910876dbd0ab1d51e6fae3d154daa3428c7348ae53d295139aa6979e937b3b636c619888b02fdfdab98615dffacc088d917805495
SSDEEP 192:ARIcBzT1D6UOKI4v7sBhmPRp6X3xon9NHsb+WNiK/D4V7n+wwEmZeV2j3aKVyIs1:ARImzxDak8uXXrwJ41KEh27aKvO
TLSH
T1E462D66FA92015776CEBD25AF922B727E7F51021B2D01D84E6FC8E1C15EBACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 219db7acf380c142a244fd11d2def059b6c8fc454e0d1f267f3170f83d8f20f4
MD5 6829413167491e65583f4bbd120f3ba3
SHA1 13fcd5864497cf2d1561d82a3f2afb41116cd9c8
SHA512 22c4813d0f7309f4d63bde121919cb6b4ab623c4dc8b048501dd9e934dd890260eee5efc595875026c6ca72c540a8f457811ca6bb99d7796439ae3ae6485c3e1
SSDEEP 384:7tjtw7KxkXqKf/pUZNCgVLH2HfgslsD7pLILc2j5EXODtw+ErU3UlH14wnTGv:7ttw7KxkXqKf/pUZNCgVLH2HfgsiD7pg
TLSH
T1EF72F9A76C4C8E770F94CACCD817BB4FADB5024B65E9C86447FA581903D5BCB110A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 bbb25dcc51fee7b64b5a401a8d63baf320e9e6f32bf2e87bf5a0d166324ca96b
MD5 1c635aeb694182fd8414472d2899f542
SHA1 c32a3a71c08d11c71f95dae311865784d761e2d3
SHA512 b920053279dacae43dd3d4c871a6f5196ab96cc099643eb99f4dadc75dc986d98e27356bacb62c60795e76dd5fb91f5f73db2ab598456a2237c0e111de0adf2e
TLSH
T118B0125084029111C40706F8124368887118AF20D60A1B0543E06922D8351A09414050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f75b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f75b.TMP
Size 96B
SHA256 51a5afc824259ccabdd204fedce35f7ef1f06aa66ab99836fec483d074b2343c
MD5 80dbbfa70f9c1645962b01368b864138
SHA1 39db8a3944f3f9beb137190aee43d0665ee75a91
SHA512 8a66542f03f9c099ba9464ae059894edbcf0f51234f04152739a627f71f63bcb9784f1d59b9f9372a9a5eb7b1053265619ec70e6fca69df359bdfab95a9f5c96
TLSH
T13DB02202C0032203C00303B0288B80C8B020CF28CB03020AE2E00BAACC22F300028030
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 9bee3a6fef1a1d91201dd7ee270b154809212a5f96780c7a3c71a853ddd37b2e
MD5 22c91402478f1f7ba8015c7a52e9ac19
SHA1 afa30818c0b2aec5930b5c368d2d7bfc1a7572e9
SHA512 8e13bd4b927e61d416df2d5c5418caec72d2a726f8c83207128995c58eab15c33fcbf14a13cd57b68f569d1d79bc46680a341eb9ad3edfd0cb92eb417ca798d4
TLSH
T183B012184240000AC609077283D1245173A018141393809B806210488102107D341A41
MD5 SHA1 SHA512 TLSH

Submit Download

.usage

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\FileSystem\t\.usage
Size 24B
SHA256 c7d8233319fb8b5137d3d30bab5b4fba5ffddfddcd1413dea3173a8fc7bc58ec
MD5 2aa4e8256c1d438a6b454e6f092574f7
SHA1 2b54a19605efaf72aeb7443df91dc93be404b389
SHA512 59ada4ef83225bfcf95d7b70a1aaac4300c282b694823e08a0130fdbe4202b0b5d635d5b25212622695e288343475f2ee42c09a2c0d46c7b8540c474c696dc59
MD5 SHA1 SHA512

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\FileSystem\t\00\00000000
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 bb7156c1cf652b6ca0f3b779786fa65758c0e6c8c50c855f4f20c6706ce9a88a
MD5 bf2be50ebfca098c6cff9919d2211b01
SHA1 34a0f993d2d9f744fb60238d83640a40b66f9df8
SHA512 5464d504715b9a1a9835f2c98485b1809bbe4bb3a79230dce3950bf881074d5fd945f66002dd9bb052e2a7632f1d91e9df236ec6f1cfa74828c0a309bb3d8829
SSDEEP 6144:HXKcPZzrI/qLULsBaCI0pH25tzm7Rkm1tYpBeh2BAoq:HacPZ5LA9C3wbC9oBGcAoq
TLSH
T16434133BBEAA9E375576E3476049160F2EF10DF3E815ED52D9C82E051358BAC1B0EE14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 79177137af0dba7e94c24e91c2cc5b228f467639fbb08fd4f527a2c5b103bb1b
MD5 88b8f6fd11bc796fb320cedf77cd76d5
SHA1 fc507832a4707b285f7ad8cbfc48c9a1271b4fb9
SHA512 8fcdf9ff54bf45fe43619b9947cfda187119625fde573500af791533f5c3a21b260f8f586b79454519890cb1fae659893cb861bdb725e299f3cad0dbad65cef9
SSDEEP 6144:6XKcPZzrI/qLULsBaCI0pH25tzm7Rkm1tYpBeh2BAoq:6acPZ5LA9C3wbC9oBGcAoq
TLSH
T1EC34133BBEA99E379165E35B604A260F2EF10CF3E415EDA2D5C82F051259B7C1B0EE14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 57f01b02a5a6e6378f0e9543c6f067e5f7283511b70f2b20962c099c17a64ce9
MD5 25f1244d96473c14bb1d3f1f8bf47e28
SHA1 b8539ce42cf799597c02c19748eaec28ff4f2c9b
SHA512 d4d704ca3f1dd808cfa1335c3243a24ecf7d00d325ef8022500e7fa033a11e5847dc4e9977df82d20fa8e10212569793e9283b1eb79ce060baca605c2d1f28c1
SSDEEP 6144:/XKcPZzrI/qLULsBaCI0pH25tzm7Rkm1tYpBeh2BAoq:/acPZ5LA9C3wbC9oBGcAoq
TLSH
T16D34133BBEA99E379165E35B604A260F2EF10CF3E415EDA2D5C82F051259B7C1B0EE14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 cecdcc805fc0f08543c43dd3c8ae5f6fda49341aba236f805833c13771afc931
MD5 1183a3db5019aae1bed9451858a8e329
SHA1 10b0988f16b3e4ef246aeea5d784b05819e27b1a
SHA512 a370fc8abd2820e0be53acc4eea2a68ed74f4e83231795c11bfd482bde178c27e78ecba5c2bdb672dcc09f3828a1174e1c2df799a8813006b3d55a67ccfb7e66
SSDEEP 3072:lGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:sm7Rkm1tYpBeh2BAoe
TLSH
T100C3122B5E75A97759B5B70EB08E0B1F1EF14EA6D920DE82C8D85B0437E97CC0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 ced081b0914a9ffdbcc99b5474affa61117f944e36f6bc88a3365529224c4df1
MD5 b273d528ffc953242ac1c4b3036e4c17
SHA1 34e74b46b8a905605022de26d0d7f775721c08b2
SHA512 c24c4448027b3f5c0fe113bee771d1685ee19b3a4bbae8303491f4e55bfdffd5358e1bff5dc7d8343bda1c49f05a14d706cb48fcf7ee96fc69ab44978a9c2f95
SSDEEP 6144:TXKcPZzrI/qLULsBaCI0pH25tzm7Rkm1tYpBeh2BAoq:TacPZ5LA9C3wbC9oBGcAoq
TLSH
T1EE34133BBEAA9E375572E34B6049160F2EF10DF3E815ED52D9C82E051358BAC1B0EE14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sin confirmar 320037.crdownload

Path C:\Users\Admin\Downloads\Sin confirmar 320037.crdownload
Size 8.0MB
SHA256 624d333a4d84985992fb655786ecb040fbc044dba34cb6b16c075feec39294c0
MD5 d155f0e50b07f4c5701916a9c3d786c4
SHA1 83e3c23012c0f5353d714ce3a7bf0d22b8af7280
SHA512 888afd52234c86b30d98f88ee4c65d63f4d91c28dc15121fc222caad0f4e88f389cf13467260a4dbb1074482b6775648decc59db9a8c93dd387dee83d5b887d5
SSDEEP 196608:hekKqaIBvQOcdSVgNloY9EqzZW7z5uIlKRblNdKcvU:hlDWHSVgNl3qlD
TLSH
T14C8633A33AD01A73D437783127ADA8902628F8416979DC4D9ED0DA93DFBB178D13F846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download