hxxps://gamarevista[.]uol[.]com[.]br/semana/de-ferias-com-os-filhos/10-atividades-fora-das-telas/

Analysis

user interaction
yes
max time kernel
75s
max time network
76s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/09/2026, 18:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gamarevista.uol.com.br/semana/de-ferias-com-os-filhos/10-atividades-fora-das-telas/
Sample260903-xewemsdr71

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2108	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134329348857206523"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe
Token: SeShutdownPrivilege	1836	chrome.exe
Token: SeCreatePagefilePrivilege	1836	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe
1836	chrome.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 1836 wrote to memory of 3896	1836	chrome.exe	87
PID 1836 wrote to memory of 4772	1836	chrome.exe	88
PID 1836 wrote to memory of 4772	1836	chrome.exe	88
PID 1836 wrote to memory of 2108	1836	chrome.exe	89
PID 1836 wrote to memory of 2196	1836	chrome.exe	90
PID 1836 wrote to memory of 2196	1836	chrome.exe	90
PID 1836 wrote to memory of 764	1836	chrome.exe	92
PID 1836 wrote to memory of 2492	1836	chrome.exe	93
PID 1836 wrote to memory of 764	1836	chrome.exe	92
PID 1836 wrote to memory of 2492	1836	chrome.exe	93
PID 1836 wrote to memory of 2732	1836	chrome.exe	94
PID 1836 wrote to memory of 2732	1836	chrome.exe	94
PID 1836 wrote to memory of 2072	1836	chrome.exe	95
PID 1836 wrote to memory of 2072	1836	chrome.exe	95
PID 1836 wrote to memory of 1776	1836	chrome.exe	96
PID 1836 wrote to memory of 1776	1836	chrome.exe	96
PID 1836 wrote to memory of 4472	1836	chrome.exe	97
PID 1836 wrote to memory of 4472	1836	chrome.exe	97
PID 1836 wrote to memory of 4932	1836	chrome.exe	100
PID 1836 wrote to memory of 4932	1836	chrome.exe	100
PID 1836 wrote to memory of 2808	1836	chrome.exe	101
PID 1836 wrote to memory of 2808	1836	chrome.exe	101
PID 1836 wrote to memory of 4372	1836	chrome.exe	109
PID 1836 wrote to memory of 4372	1836	chrome.exe	109
PID 1836 wrote to memory of 1544	1836	chrome.exe	110
PID 1836 wrote to memory of 1544	1836	chrome.exe	110
PID 1836 wrote to memory of 3160	1836	chrome.exe	111
PID 1836 wrote to memory of 3160	1836	chrome.exe	111
PID 1836 wrote to memory of 3596	1836	chrome.exe	112
PID 1836 wrote to memory of 3596	1836	chrome.exe	112
PID 1836 wrote to memory of 5524	1836	chrome.exe	113
PID 1836 wrote to memory of 5524	1836	chrome.exe	113
PID 1836 wrote to memory of 5704	1836	chrome.exe	115
PID 1836 wrote to memory of 5704	1836	chrome.exe	115
PID 1836 wrote to memory of 5772	1836	chrome.exe	116
PID 1836 wrote to memory of 5780	1836	chrome.exe	117
PID 1836 wrote to memory of 5788	1836	chrome.exe	118
PID 1836 wrote to memory of 5972	1836	chrome.exe	119
PID 1836 wrote to memory of 5972	1836	chrome.exe	119
PID 1836 wrote to memory of 6068	1836	chrome.exe	120
PID 1836 wrote to memory of 6068	1836	chrome.exe	120
PID 1836 wrote to memory of 4876	1836	chrome.exe	121
PID 1836 wrote to memory of 4548	1836	chrome.exe	128
PID 1836 wrote to memory of 4548	1836	chrome.exe	128

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gamarevista.uol.com.br/semana/de-ferias-com-os-filhos/10-atividades-fora-das-telas/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffbf558c728,0x7ffbf558c734,0x7ffbf558c740
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1728,i,3838471020468693605,3610754342381268980,262144 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  PID:4772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2236,i,1285665961092167866,1740993084493082037,524288 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2100 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,12325381882472884327,665838938232065810,524288 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,10611297699295454093,18390745602757335144,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,6127996903138500257,11127716267326286110,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4416,i,6527035585221329250,5321692052943774713,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4420 /prefetch:2
  2⤵
  PID:2732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3952,i,6132804797452172031,11344156507552511232,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4848,i,9995523875108126707,10217808219061591772,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5404,i,18191550034330484964,13214267471834860603,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4732,i,6422031907595167301,5461305728796851118,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4776,i,8337477796603324979,4298831576325819969,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6280,i,1674409906803283516,16796810604347398746,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6436,i,9891557556802755890,7291495281865234929,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6616,i,1863728090892096584,9437522018809571991,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6740,i,11827090316911284865,11966396314927426769,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=7416,i,5137132305474666732,4370373025730159868,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=7844,i,17098467868320005613,6273874846702754864,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8100 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7724,i,17399654571754057090,2015970103262312669,524288 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8128 /prefetch:8
  2⤵
  PID:5772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=8152,i,6290418124525643226,15066195375094315223,524288 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8160 /prefetch:8
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=8140,i,1494057406873919964,9929943798681280522,524288 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7712 /prefetch:8
  2⤵
  PID:5788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4432,i,13254170812873533635,10004766778694823599,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:5972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4472,i,14498354921883395891,8728022136008410892,524288 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:6068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=8580,i,7720382662144182384,3198205260438953794,524288 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8556 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=8488,i,4838838703367915922,11681240048213517343,2097152 --field-trial-handle=1968,i,4714627378306199363,234605715619532943,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7352 /prefetch:1
  2⤵
  PID:4548

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2056

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5200

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 b9b992787caf3fa2de19e4d94c1837a2b5691fb4407de58a640223451545540d
MD5 17d29951873c0426490fd151b63799b8
SHA1 9510860e38133c4d61eaf9fdeef692a7dde226ed
SHA512 e7dc17e70a4ebe35393cab0481a8d6ac3d1779ee68b5861130658567e99491c9cb69a166667201ea23c943e9b80f0965c7fbfdfcce71c7185a5e543c1d665cde
TLSH
T112E022A6CC71AC772CFE0728509A4B46EA65131A2FC0991F3A3CD20C8FB162A4186C9C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Size 343KB
SHA256 07afd00bc6b13e35f702104aebea04e61d7f90b8447559279895e5f72cabd471
MD5 f39ab38ee79b1eb354356116d49017c4
SHA1 b97e8c1d90d46d372791af31561daa69e132d7c0
SHA512 01217bff1fb5b28e6d1e5e02473ea3154c97f36f87b8973da56e8ca84b636e0de2c318cedffaedf0c76ee90d3eb2e26e6689d5a973538b6f0f91bda10c7a5253
SSDEEP 6144:nQbTrYgHjNyXvc/D0GyVq9bk72B3QM/lUs7Jv2zjWriqGfkMzZh1RqXOzKY:nmTsgHHLlq72iM/mPzjWrykMzZhXqXSV
TLSH
T1177423D43C829CDEB5717D27911A93A6C213B4052D40E39377DB808A7E8B5E852FF86B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003c
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 592bee18d20432ee943a30e1216a57130f9ba76b22ff540c2870637e5310519f
MD5 f5520dd4744674d017fc98de9dbcc36e
SHA1 39289cdf90734d815b52ca1a28149bdca50a1323
SHA512 f6b90ecd24ab8495283acf4f34871349448edf9c10826238e08d94e05c66a6e74ad537c447104cf7120a1f78bb611fac039c0aa85e968eee04972f852c051b9f
TLSH
T1A341A4C265E3A395FFAC86B111D7CFBF227255A1F0224F172780D0689A833D86D380D9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_gamarevista.uol.com.br_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_gamarevista.uol.com.br_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d26743855d103e390fd38c7ca1deb646e92a1f09983289ae60f93327a2c8228d
MD5 bb67dfb44bb731ed838b842e75563f47
SHA1 993d516f2e6ffdbdf140dffad7e6b0a60a60c823
SHA512 3faee9dd6a13d4283f015f32269e19df4a0605c3cfdd1ee5ba0ea6ca03d5ec40933fcd69b1d58bbe6569659692b4c5962f2308c01680263694dc146b25d08871
TLSH
T1FA416BF3C7D8897D894156F4AB15AE1FCE690E14536C3C5AC8D8AE4F53E28B2D20158E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 26KB
SHA256 51e79e270620d7b770a133c88f5e1041525d08f56c937a322a95dc710df94439
MD5 db6b8d7d7eedb80a1383bfec32c0c07b
SHA1 5cb0f0f0313caf5091528aae2c3819fdad716b18
SHA512 60f49880556d57da1d6626acb8a1dc75cdde4db8f953cdae26a3a2616e46730544d845ed12b51a4de1eda5e44a20f9cfa6cdeb072f54bdef12cbf68a0c47bea0
SSDEEP 384:DhMgeR40IXBeQKie7WEe74uPgDIxuJcJK831KaaIaEdplCXZ1Ied19rdbGOGhzFP:nsS4BXa+oYolzYO3tn5uXNlwV
TLSH
T11FC299F383F4862D8A1166F0AA15FD1BCE590524432C397ACAE5BE5B53F2871E20179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b088f590494851ee8aee006a355d85280fd5651298851b9407141751c8243f20
MD5 471bb7f201ab1a1f8657085e03cfb1b3
SHA1 e6f08cb04fc726ba159d6291946af5f7982ef17c
SHA512 3431763be8970bba3ad7381d672c978f2353a5fb3bd220ca613f2c1d0f75789f4441cf8f1d9e949f4bc802f101c9d5d3a41167577cf70af61678eca096a0f076
SSDEEP 192:LRnQL2z7Ti5VQO5zv7hpAPRp2jB95Hsb+WNnTpyO2kw2tlebwYmjVyIsnAUge:LRnuSWRx9UXorwTo/2HeaFe
TLSH
T1A642D82EF910A97B8CCBD225F9267757E7F6146220A42F84E6FC891C15EB6CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 40dda59cfe466ccb316f45f6b8991e0d83bad48fc846e12225c018bbbbc4b0a6
MD5 35a9545e15981a52720cd360e847e59f
SHA1 7ea9ddc2f7827bf480182e610d97fb64f1252009
SHA512 69c7d97295dd2dafff7b480c9cbe6023b8cecd7f59c3533882123ac5e6f95d357cfe8d2f08fdbab9a7dd2eccc6045e56327d2ded756ffa8131ab07f497dd9a11
SSDEEP 192:LRnQL2z7Ti5VQOCv7hpYPPRphSjB95Hsb+WNnTpyO2dha9jlebwYIjVyIsnAUgvn:LRnuSWRO96XurwTo7a9BeMFvaw
TLSH
T19652E81EB910697B9CCBD229F9227B57E7F6146221A02F84E7FC891C15EB6CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3fcfabb7c67e8107a73d887c81624d86388e1bb097699cdb1922af4acd6d9cc5
MD5 2297283bac63f7ea239e680c435aa2d5
SHA1 6be2ae0041b273df24ac0c716c8e859a7e4b11f3
SHA512 bd73e05171f64e5a044733165cea767955de866df5e264464d5dd2555ff650b52aa6e7e28772b3142f63426f6ad504befc300ea93f864b2f73923a904f512bd0
SSDEEP 192:LRnQL2z7Ti5VQOgv7hpAPRp2jB95Hsb+WNnTpyO2aqeXlebwYmjVyIsnAUg5aw:LRnuSWR89UXorwToHe1eaF5aw
TLSH
T10842D82EB910697B8CCBD225F9267B57E7F6146220A42F84E7FC891C15EB6CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 284b3ddffc11eaebf2e637130e77f4de198744a987134cc0f9a32987e560a8e9
MD5 b12865172f90f27c25b7dc36c299a042
SHA1 5ad127f97aebcaf9d1e9435a4beba143adaf5436
SHA512 a9026dd9659fd682d925330b8eb03ecf20c46f08bee6c67ce3ea0e4e8e10c0984a609db98e1643683bc0ca500cf5a041d78122fc6e1a31b22d9748c66abe7584
SSDEEP 192:LRnQL2z7Ti5VQOFv7hpAPRp2jB95Hsb+WNnTpyO2dhaq8lebwYejVyIsnAUgvaw:LRnuSWR19UXorwTo7aqUeyFvaw
TLSH
T1BB42E92EB910697B9CCBD229F9227757E7F6146221A02F84E7FC891C15EB6CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d4a623cf29d6258319f850a934b739cb1d1e3299595bbea8962abaaa988b9035
MD5 21f964634118df4e7ff14f0088bfdd78
SHA1 4f48c12f8c47387ecfee1a026598cd73b5978238
SHA512 ca5c94a69d9ef731aaa4004e80f8e888b4f3a3149e135a9e9b39ad3ecef4915441b5d996ff74c37f084f9cf87548910a4903f94bff447a9d05ba39ed2d8f375d
SSDEEP 192:LRnQL2z7Ti5VQO0v7hpAPRp2jB95Hsb+WNnTpyO2x1E28lebwYejVyIsnAUgvaw:LRnuSWRw9UXorwToHE2UeyFvaw
TLSH
T17F42D91EB910697B9CCBD229F9227757E7F6146221A02F84E7FC891C15EB5CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d0cf47d6f4b35f42dd343e952fdce4c01f48cb1cf4f34531662df2880270b171
MD5 f1ad3153da32a2eee54a6f5835ac0c13
SHA1 df73e13a34093bbe9330b09b7926c9ab028a9baa
SHA512 7fd44d8eb69ab554fd60caeaeccc6ccb0e1885b1a01728f9822c62a4511e27fb8a48ca5511bb2ed9e1d1d1fa9fb56c953bafced8f302e3ca8c0a714ead47c116
TLSH
T186B0120084035351C04703B02186149CB5345F20A60A170143F0E922C8395618015050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5868f6.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5868f6.TMP
Size 96B
SHA256 38861b1226b061699d5d086c7b492fc9a23d3d1619dfed74627868c1985dd85b
MD5 8fff8dc0443c4911e5d0d134f883c851
SHA1 646c0560fffc158a1eff36b1745089a734223bcc
SHA512 c406c9d208844cce072e7472a3bf4a4e20ac92f3781e61910aabf336c5af316163450fb5d41455939c808dc864818211525e73416b2f1788df52c45a3cd00267
TLSH
T12EB00259C6476316C04243F12999E6ECB2A0EF35CA43337292E46B66DC256B5452E160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 4edfaab06b1c8b61bb9901df9dd1209b437e2b9dacbf147b67cfc5aea804b6b7
MD5 f6958bd4e19f6c89731e9bfa664e5ec8
SHA1 93e0eb906ffc9f76c810ae6600a901e834f4d2cb
SHA512 f496580b46d52aee6f6a6c1c44f3e9ae52bee808e298ca4fc69e4deaee881bb6fa5e333c818478ed0847fbb89f51748d709abf71137c36bcb9e7ba32be318eba
TLSH
T15CA0026087D50557F0690BB017C103503B64EA551215035F519949448CA05814D01290
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8e8bd955be851e85031cd1c7deb52f3f5286eb51ea25b6282e6302ed245f3f5a
MD5 37dcc9b0383e5938e5db5740a42064cc
SHA1 a4272b81f34f0d04636613d2754a2f8c56e82097
SHA512 6393ac6fc0b98684ffb804114092b18681e43b32046f2ba1679fc45dfcee22c8f6b5c38471f9d767ad44ce4507a4f001468b8d32f610ee127699458f2567e1c1
SSDEEP 1536:pvoyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:JKqfd7NtZL8cHQRZEQ6Sps9
TLSH
T19DC30237EFC21E335DC2DF60B9130FD797B6449A9034D305EABD2BAB689345564828AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f97847412cf7ff095bb2246f10cac715a64a5bcdd9b25c1644548fd10aa12a66
MD5 c1c1073a8c1294f7807ee1edf8e92ae0
SHA1 383be1217899e1b1bd943e6ab79bec77c2b11262
SHA512 ad0f0da22724b3a1b5b7e37815327d924a6480c66fbd7866bdfaa94950493a0d4ef23a6316395ecb97079fadde6a44f458acad9e457895d12f72d8fe5c8546a1
SSDEEP 1536:pLTyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:tdqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1CDC30237EBC21E335ED2DB70B9130FD7A7B544AA9034D301ABBD2BBB6883455658246C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 90704384272e37644839285279d39dff243ee487a08f99e9ef013d545db010fb
MD5 05f16e8bb439bc53c07b07d928d70dce
SHA1 06206667d62da1aec0a61947ce301ac2790d9d85
SHA512 e62c155be2f9baf1686a1fb5b27e14c00cdce6cbf723fe8b8e5f14d7371af01bb68be2a5a7ddd1612f2197820bfb83f17e8962430d6e50f9da4b4aa2954928ce
SSDEEP 1536:6iyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:5qfd7NtZL8cHQRZEQ6Sps9
TLSH
T11BC30237EBC25F335D82CB64BA534FDAA7B644A99030D301AABD3BFB6C93451644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2e560c3671f5fb87514bddc74457f3ba6b9f1896f3e98dec2a1070ead62d789f
MD5 477a1358ad9e6303a14b867ac8c2840a
SHA1 0556e1bb459606bded74075e39ab223cb2217b8b
SHA512 ba4371d851132273a967ffda8cebec2993aaea434940b64e1c62ed92c2303001428438b0c0894fdd9489cac6e5d1c4f7da3e42c245c777ae6c7f917d3e74a8a4
SSDEEP 1536:MLTyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Edqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1A7C30237EBC25E335ED2CB70B9130FD797B544AA9034D301ABBD2BBB6883455658246C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download