22817ab17aadf11eedeea79db6b945e76cc8f9a0f69dec510ce05ca9651f6774

Analysis

user interaction
yes
max time kernel
46s
max time network
47s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/08/2026, 17:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
formulario_citas.zip
Size 13.1MB
Sample260824-wdpp2a1fnd
SHA256 22817ab17aadf11eedeea79db6b945e76cc8f9a0f69dec510ce05ca9651f6774
MD5 a7e7588bda0fca1b91f28444ec59ff4e
SHA1 332ed25a50f479105de6ec16efa68ed0f04adb58
SHA512 fa9f734722276ebaf7f04676fa4f9ceaa44ab9f7047f8f25d8a0a6bb16b6cad5a299c88c55efd39c24fcfbbebe624139212740977a0000d167e69222f32118e2
SSDEEP 196608:9fc7qi6J7E0BYOaywMdjcVqeT7+yVpD6AfL+v4G9zWVhmRxKY/pPDfiqAbsPz/:C7A7xqM9cgWDD+vR9SaT/JnPD
TLSH
T1A9D633D5E242C930EB867A889A752793136FE68A716335B71E0943C824C6D5C8FCC7E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3948	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320673540230178"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4864	chrome.exe
4864	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe

Suspicious use of AdjustPrivilegeToken 22 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe
Token: SeShutdownPrivilege	4864	chrome.exe
Token: SeCreatePagefilePrivilege	4864	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe
4864	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 4864 wrote to memory of 2632	4864	chrome.exe	90
PID 4864 wrote to memory of 3948	4864	chrome.exe	91
PID 4864 wrote to memory of 4448	4864	chrome.exe	92
PID 4864 wrote to memory of 4448	4864	chrome.exe	92
PID 4864 wrote to memory of 4068	4864	chrome.exe	93
PID 4864 wrote to memory of 4068	4864	chrome.exe	93
PID 4864 wrote to memory of 2180	4864	chrome.exe	94
PID 4864 wrote to memory of 216	4864	chrome.exe	95
PID 4864 wrote to memory of 2180	4864	chrome.exe	94
PID 4864 wrote to memory of 216	4864	chrome.exe	95
PID 4864 wrote to memory of 1556	4864	chrome.exe	97
PID 4864 wrote to memory of 1556	4864	chrome.exe	97
PID 4864 wrote to memory of 2936	4864	chrome.exe	98
PID 4864 wrote to memory of 2936	4864	chrome.exe	98
PID 4864 wrote to memory of 2908	4864	chrome.exe	99
PID 4864 wrote to memory of 1860	4864	chrome.exe	103
PID 4864 wrote to memory of 1860	4864	chrome.exe	103

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\formulario_citas.zip
1⤵
PID:1584

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffaeaccc728,0x7ffaeaccc734,0x7ffaeaccc740
  2⤵
  PID:2632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,14047475693899270374,2275339603466511209,524288 --field-trial-handle=2012,i,16467692088856928889,13018572380456453527,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1804 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1744,i,4736518708440072353,17852141207696099240,262144 --field-trial-handle=2012,i,16467692088856928889,13018572380456453527,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,3405647142717076104,5208433912412920225,524288 --field-trial-handle=2012,i,16467692088856928889,13018572380456453527,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,9785817312852380964,8734124358306404642,2097152 --field-trial-handle=2012,i,16467692088856928889,13018572380456453527,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,14305908566331377766,1688912245507994315,2097152 --field-trial-handle=2012,i,16467692088856928889,13018572380456453527,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4488,i,10360495176794353274,8971800773905718686,2097152 --field-trial-handle=2012,i,16467692088856928889,13018572380456453527,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4492 /prefetch:2
  2⤵
  PID:1556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4608,i,16679242544930889526,3189914289639381246,2097152 --field-trial-handle=2012,i,16467692088856928889,13018572380456453527,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5536,i,14106746516491787835,12042436004555666095,524288 --field-trial-handle=2012,i,16467692088856928889,13018572380456453527,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5820,i,17280436161211117631,482415110991994396,2097152 --field-trial-handle=2012,i,16467692088856928889,13018572380456453527,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:1860

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 59d4cb5620d94fbac5cdc60365a7a0cb9dba2dbe7109e37e272b4192d2f78823
MD5 d6e461407c8def8e742528c9afe04bc0
SHA1 9e831e2ef56de471c613bdbc3219bf519b197f8b
SHA512 ef734abfbf9899ca97169c82d5e8cbb8a11b50df3eb86998eb2169d1fb3d17d3f0859a9d6d30fd6932bb3c2b47a36e6f1b20ff3e175b2d6616de1ed6ac9d0d17
TLSH
T1FCE02BA9CD21AC2719F91B2864900A46E755031A3F90C84F7A3D82088FB5B3A85A686C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 4e97cdc6d91a3e04eef17bd7ced48b75fae94969650613ce7c267332cbaddd84
MD5 2564139778994aebe7c15ff454529f55
SHA1 e598db3e7281a36b8f85ba3d024b84d095a91b48
SHA512 ff6999b0ac0e1d1395fea975975cf951de07460c99b1749e04d238daad2ce2da42c74efe4bc385222fa620e1871428785190f1b2c767536dfdb0326f235029bd
TLSH
T1B4D012CEF4F07454F71805B9B85DC8FD0DF3089D45819D0339F4646F88264E17516741
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 09301596159c07fd387f2222fb4d6a2a443a3e9710f213e2ea9267d6011c881c
MD5 f7f990c16ba979736cdb5a94c231e89c
SHA1 fe0a833ee2aa6fadd46a8582e05e396ef0fef245
SHA512 5ef09895f30f458dceda1ae117e3afbea09be29e17f02780398f867746e80c3641119cc970bc8d398e53bfc83f392f4a4a8c7d412c0adc8157ed2a3cc33cebec
TLSH
T1A9618EB7C3D4CA7D890156F5DA256E2BCD290A14121C3C5AC9D4AE5B63F28F2D240B8E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 bd5f6d93ffaac6e49ff42c36d48f1c77326a36646f4cc0fd3b12c126f2faf2ae
MD5 80e8132d369b9bee2a3857b7e9ab8e6a
SHA1 b4b8b9d3542521ce3000a94f9e85eeb5dd05d30a
SHA512 65753777d05a948810fc7ca51acbd44c9c04c747c630877e3c9fd09930873e3ab756569b6bdb2c482316c6558f6f2031bb8d33e68919d8487328b4a58e4ad150
TLSH
T1FC017B6B96AFB86702BC89BB2E08BC0515F5B4310281A4E9DA6BC16DA0954FB1B01863
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 502bcbbd6d39bb02d20bdf026a331fe77b93bae498a6d65005d3887a8da5cd51
MD5 ae32bd183e382d76bf1d0519c378d192
SHA1 8931cd183fd113538f846d21c054726f83c92bdd
SHA512 9ac3a34fd1fc7eced8895b8248b5c01430d640a738d61f90b407ab39fdea0fc646c76c3e5ed619fa1f930d41018fc10deb0ad07401c1827c231c5d6742f68a9b
SSDEEP 192:WRN5jpJXmsOCYAPv7cpAPRp2qg9BHsb+WNnZG0ZK2MnnQBXkwY/VyIsnAUgtaJ:WRTjT+MHwUXlgrwA042Mnn64Z8
TLSH
T1A242D92EBE50797B9CDAC219FD567B43D7F9102225842E84E6FC8A2C19E75CC321B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b18831ed6c73e35e5d81c0b6041aa693458d2f6ab629a60f582aa434cfe4c1cb
MD5 89efcdb260bae43bd785bfadd33f6be9
SHA1 43e851c01c50a7d41f32fbfdc2178d3b8395b435
SHA512 5ae9c8323bfc286b34ee345dc37ea73b3219e7ba5f8f39bf857f9a48c74e0ff1290c707a7f6d0dcfa95aa78fe32055cc49b6737425515a4878a1d2fc70243ccd
TLSH
T18DB01245C0427100C10601B4110B18BC6164AF119509170143E06D2788261A1C014154
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590044.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe590044.TMP
Size 96B
SHA256 1ed8e3131efcfe80bdb5995601986e3f32988fc093fa053d02465127b5d41f47
MD5 5701d0db5277d9b5f36382c3d366afc8
SHA1 e3a26e20d30bec4969739351814f1a83dfe7bb24
SHA512 9a7f578da47c20b950cddc82dae67fb7b22328360f8172ced401e115def14a710c738ec4ed47fa633b6c9726cf98ca1b3f9f696b90defd488975dab8e50c1ef3
TLSH
T121B00296C502A212C44243B0299A95ECB6A0DF66D783161293F03A6ADD2D6B14629660
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 0cf5b74171c3ef7e4bff283ec875842b796b91c74359b84fa1af8021388ba030
MD5 16a33de1428fc776469930d5bddc071e
SHA1 1eb86fd8de214f69b17c81cdc142441af76d3970
SHA512 61e562274262a78c8943cb32c31507adef9fa0dbb962ad2531f5831489ba0285e1fb6bfe517ea03ae6d3cfb6033a8ec2127fce9cdf91ec3285ab51453df5cb51
SSDEEP 3072:STFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:qFmUi21rSm8uUVNSlzY/
TLSH
T18EC31300BAE3F8F2EE5930447BEE2A149D6C4D818191C64152739D419DEF3C62FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 064632f24bc475434d6a34055c8779c4b44dac758eb1cabb5bd3d383978bc9e5
MD5 60263ff89d4ce801b317709205403b2c
SHA1 6e785912502d2f97b90156e1e141406a62ec4ff1
SHA512 79f4d1a87ac8fc91fd5915dce2f6231f157919742e83fef91aedd891696652d73777156a32ba9c6e203d8aff1bf3dda51ac1044a7439069bd58f678db593fd07
SSDEEP 6144:9uVJYou2brFbUj8N41fxscdg6FmUi21rSm8uUVNSlzYl:UVJYou2brFbS+qacdXfi21b8j8zc
TLSH
T1B1342340E6936CF2FA1C911476E614195EBD1AA95128C70043FBE146B9CF3A33FAF939
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 7ebed612a6af238f5f665cb183bd3feb190667255a62641c1f08d0b1387357ab
MD5 0f82e7dad8d191203d9a45c74ff519f8
SHA1 8f4729ae0d20cf6e7e2babc958abbad9bb146c6d
SHA512 6fb418957839e48de26b68033de6b42e3b1678c397b5b31bba7a695573bf58d0f7791994ca8344a84326c7b8ff88428b3a31aa49da2ab4041b2ce50870ccfea6
SSDEEP 6144:AuVJYou2brFbUj8N41fxscdg6FmUi21rSm8uUVNSlzYl:NVJYou2brFbS+qacdXfi21b8j8zc
TLSH
T119342340E6936CF2F91C911476E714195EBD1AA95128C70043FBA146B9CF3A33FAF938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download