hxxp://verificarcuenta-micros0ft2026way[.]zya[.]me

Analysis

user interaction
yes
max time kernel
279s
max time network
276s
platform
windows10-2004_x64
resource
win10v2004-20260911-es
resource tags

arch:x64arch:x86image:win10v2004-20260911-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
28/09/2026, 21:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://verificarcuenta-micros0ft2026way.zya.me
Sample260928-1pp76avyas

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
156	discord.com
157	discord.com

Looks up external IP address via web service 1 TTPs 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
154	ipapi.co
155	ipapi.co

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5124	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
5452	chrome.exe
5452	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe
Token: SeShutdownPrivilege	4456	chrome.exe
Token: SeCreatePagefilePrivilege	4456	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe
4456	chrome.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 4456 wrote to memory of 2220	4456	chrome.exe	85
PID 4456 wrote to memory of 5668	4456	chrome.exe	86
PID 4456 wrote to memory of 5668	4456	chrome.exe	86
PID 4456 wrote to memory of 5124	4456	chrome.exe	87
PID 4456 wrote to memory of 2324	4456	chrome.exe	88
PID 4456 wrote to memory of 2324	4456	chrome.exe	88
PID 4456 wrote to memory of 5660	4456	chrome.exe	89
PID 4456 wrote to memory of 5324	4456	chrome.exe	90
PID 4456 wrote to memory of 5660	4456	chrome.exe	89
PID 4456 wrote to memory of 5324	4456	chrome.exe	90
PID 4456 wrote to memory of 832	4456	chrome.exe	91
PID 4456 wrote to memory of 832	4456	chrome.exe	91
PID 4456 wrote to memory of 3768	4456	chrome.exe	93
PID 4456 wrote to memory of 3768	4456	chrome.exe	93
PID 4456 wrote to memory of 4416	4456	chrome.exe	97
PID 4456 wrote to memory of 2524	4456	chrome.exe	110
PID 4456 wrote to memory of 1892	4456	chrome.exe	111
PID 4456 wrote to memory of 1772	4456	chrome.exe	112
PID 4456 wrote to memory of 5452	4456	chrome.exe	123
PID 4456 wrote to memory of 1708	4456	chrome.exe	124
PID 4456 wrote to memory of 1708	4456	chrome.exe	124
PID 4456 wrote to memory of 5580	4456	chrome.exe	125
PID 4456 wrote to memory of 5580	4456	chrome.exe	125
PID 4456 wrote to memory of 5428	4456	chrome.exe	126
PID 4456 wrote to memory of 5428	4456	chrome.exe	126
PID 4456 wrote to memory of 4804	4456	chrome.exe	127
PID 4456 wrote to memory of 4804	4456	chrome.exe	127
PID 4456 wrote to memory of 3004	4456	chrome.exe	128
PID 4456 wrote to memory of 3004	4456	chrome.exe	128

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://verificarcuenta-micros0ft2026way.zya.me
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xdc,0x104,0x7ffc55f8c728,0x7ffc55f8c734,0x7ffc55f8c740
  2⤵
  PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,177979953856270696,18031675581627188886,262144 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1968 /prefetch:2
  2⤵
  PID:5668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2240,i,9613593469816730347,8470319849367670509,524288 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1576 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2364,i,9777187022291322998,15439704531180629953,524288 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:2324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3076,i,11388602913621742981,8252718988882438084,2097152 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3088,i,5431274003965855940,14348790101851143953,2097152 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,3386996796726774453,2267966017599858788,2097152 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4464 /prefetch:2
  2⤵
  PID:832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3056,i,11497752713497366254,2084619006979607089,2097152 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,10738107260056208711,1200409598384196293,524288 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5776,i,10147621263086443166,12345820826166015251,524288 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:2524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5752,i,4299231869275039489,16949987224041168785,524288 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5760,i,9096625742272981275,9770056961950656620,524288 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5820,i,6661804229960741771,8718013572251103378,262144 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3172,i,3899891072120375545,14285462966056084063,2097152 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5884,i,2329714566382235275,18032092536541241474,2097152 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6052,i,2531200671977116463,5412377600099891734,2097152 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5676,i,3074800743623403203,8808956437527491463,524288 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6324,i,12461765606069565112,6742935415233212979,2097152 --field-trial-handle=1936,i,9602063710433555339,18104281074649664938,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:3004

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4384

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 5214b2733f4b2fd75c5f0be85825adcbdcd56929402583b0f29f1c2f383b0365
MD5 574a63971b2f6da1836ef6743f4cfc90
SHA1 2c4f5e1b92437b6dae82ffac16b19344497ae151
SHA512 421a98c705ddbac83dcceb73865bdea3130347f6778d7a5ddda9552bd0c7d31aa303a43ade1613295441a8c92612db1e080c0eef2b64f9953eedf93833ec97ae
TLSH
T12FF02DB5C831AC371CFE0B5D20A58A46FBA0232B2740495F3A3D911C8F7553B4695D5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 f515a15e22648926081bd25ea0ce0be8901d5b4f59c727e9eed6b52a19711bc6
MD5 917c5f5ef163f244b4340cb81883684d
SHA1 3990e94193f9766be0fb939a19acaf1dcfc9cab1
SHA512 07c1e17d8cdbc1910f76fa5318cbad1cad44929e394c5981df8b776670f45fa8d73688382655fd2480dc6a5dada791eb32cfc4ae7acda278413625d94224d62e
TLSH
T13EC04C5056841400DB8137F224ED995060A15D5D166956B2469244797D21FBCD580797
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 ace1d7100a5e19c34832b20b2364f359c690da8b9ea5ad1922e5adef60bbc7ad
MD5 6d043c3fcdfcfacc9c69be46a7e87537
SHA1 f6c3d4131826a78b312f798bb655156c335dc34a
SHA512 d47a46a689b2671fbddc162039bcea22afa8cbcf62adbab20c5be58b043442bef9a4e96fd922a3b4935a2fd46289b75ebd2b2aa7c80cbaf2b937e5e9961f3444
TLSH
T1B3D0125412946801EBA56BF364DCB89060B51C2E13565AB242D35668FD33FACD6C0BA3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 2aaa7f9baca06fbdf3a6f999b1e4f707f9565eda8dd00b3b1a395c8239562ac1
MD5 d749ea9efa3c12caad9c1222dc1dbb06
SHA1 5699fe1576bb6d3024d2435fdafccc5a80eb4116
SHA512 bd7b32db969e6830be9538d3ec56ac2d7279867239daeead4199d4c0e23e9d5d2ecdb0ac784a443cf47b5a37de16f9bef379e0051c13a72effb56572ac9d27fa
TLSH
T1CA118E0160819791CB803AF9E4EF6AA084F81C3AF3021D2883C3DA19FF61F7C82851F5
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 982b41c8fa51b5e8cbae4734e48237dbaf79e8787a2eca4822c4a28f8a3eb7e3
MD5 9451f172748cbee764c9c14b656c1a94
SHA1 b4cf5a5e810ec14155398e9754dd4392521aa3e2
SHA512 9953eef60f15dd99bdc48adbe0da9a3de2067ba08f498ca0494cced546e4c173ca317d7eaaa58b20de2b8f5a13bea31ae6db4cce6c13ae309dc05e1afb1894f0
TLSH
T1B8818EF7C3E8867D890155F4AB252F1FCE690A24532C3C57C9D8AE1FA7E2871E25054E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 398e646f584773f0f4ed6331a39f5ca0d3bd867b0bda5024a1a0f3cbe465be8a
MD5 8c2dff55524d3749848ea36b7a92a07e
SHA1 3bdf0df794e1681aecc68ef9f5d97658083a8fc8
SHA512 9ad1cdb1641b8da71a2f376a749ee7de220e82ca05a51e3583707a1230d334be594fe1fbfe6636e107d6918d6c6d0074d7a89b1cef623e41916f9e7d1079425d
SSDEEP 192:DYtCLyMALNp59JYHKqs2/E/MV/MyU4Tljhjttp46ZI6IRaP8f2vRfPyNPTsPR:DYtCLyMALNp59JYHKqs2/E/2/MyU4Tl/
TLSH
T1CB12D1F7C3D8C62DC80156F49B256F1FCE2D1A28432C3C66C8D8AE5BA3E2471D25528E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 0111b7fdf54d496227fe952468c763c57d75d195f30b6195221b1760fc42972f
MD5 5acf7f6be7689f1c621fe3ebeaf831f0
SHA1 3ec12411b4bac0581748adf09f0ddbd29bb31f52
SHA512 c065923b4c0bf1a5e9b87e3ff21509e70291f9f938dcfc2acc856169943ad0e4905592abc9a37dc247f2c9e67a58d83626f34f17b2bd1252eabb3b682ac8a118
TLSH
T18261AFF7C3E88A7DC90156F4AB252E1BCE690918532C3D57C9D8AE1F67E28B1E24054E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9be782a8bb54979db250edc7633e85713a0cfdf2d5feaf36d1085ff59b29f3f1
MD5 af7c83b1ccba025d4e494060097e1c4a
SHA1 d46c6c632704eba4338b95f075ecd88db83c1faf
SHA512 a0757734b550d103232180423cd13207e421333937bcd257256311968e9ceb9d33ff0ece1e9ddcbfb65cd92d2a6db4099697c20a04df1895bebdbe0379922b75
SSDEEP 192:kRaRMVxQHJoHIrDv78pAPRp2519THsb+WNn21qbQ2e0C2KSXxkwdVyIsnAUge:kRaRbV74UXWJw0f2eL2jhLe
TLSH
T15442B22DED10797B9CDBC22AE965B767D7F5002120942E88EAFC893C29E75CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 256bf898a8720236be52aa33e18cabead5d32156a72f1167d5099a28358c935d
MD5 bebf14d67f35a9a454bd884050718c39
SHA1 2aec7709f4ade2cdd2a6fc092a4b99853e198ce4
SHA512 11fb05dc78a669841b56cfafdebc40d8ffa738075d2d599be67ec22a27669f3fc3e04167f9a931a8498b09cfde7b5189b502e9fa92933904061d549d167512e0
SSDEEP 192:rRaRmVxQHJoHIRtv78hePRpMYRE19THsb+WNnHtpmM0QOeejqC2KSXxkw98yIsnv:rRaRhXN4KXOJwN/2eejZ2jhqE
TLSH
T12252C56AED10397B5CCBC22AF961BB67D7F5102161942E88FAFC893C29E75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8114a94014b0be1ad0a73175e3f2cde5ef818270364e733a4e3303c7aab23053
MD5 b965f227250a66c685fd2be09d3621b1
SHA1 c78d501cedf00c15135a452463f561c23c2765d3
SHA512 b77915df185d4597c0b11bba45a16114994aff8cdd3e31e712fe7ab3a252ba74b93e9576547f6ca46a9514eed6648c880f2300dd1dc81bc0165292f7fb06e765
SSDEEP 192:rRacBzRmVxQHJoHIRtv78hePRpMYY519THsb+WNnHtpmM0NzYewqC2KSXxkw98yR:rRamzRhXN4KXSJwN/CYewZ2jhqvU
TLSH
T1B152C66EED10397B5CCBC22AF961BB66D7F5102161942E88FAFC893C25E75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7a91aee4da8815420d753a01c3b51e22bd0f9dac7098887e39f28e06624ecd22
MD5 19d97b9856a4c1c1d752e1e87dcbb63a
SHA1 f222d6c5e8129ba9f242291f38d5f531a7de7c0d
SHA512 3704210d02b3b58388450113641ff87b8ec034ecfbc9631b4ab2d4f197aab1bd84ec56d866709b7e5b2549d77515e115bbca7dd701e97dc53b13037d40ea6f99
SSDEEP 192:kRaRMVxQHJoHIrmFv78pAPRp2519THsb+WNn21qmHeeeFC2KSXxkwBVyIsnAUgE:kRaRbV+4UXWJw0Peeew2jhHE
TLSH
T16F42A22DED10797B9CDBC22BE925B767D7F5102160942E88EAFC893C25E79CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8d3b4cc69a2b48e03dd7093f6619ccdc9a995eee631563ded381467196e3fc65
MD5 17788f1d3128e083281acf6567627f8b
SHA1 80d854b0bbf1ccbef183598a5a9275494a060ac2
SHA512 d00007b125a5a56a87be486ce60a67f1e93d4c8e49a00f920e5ba3120db35e3607d065418b396dc2220c610d7552ff90d905355bae60f75486fe87e21b6ef238
SSDEEP 192:rRaRMVxQHJoHIRtv78hePRpMYRE19THsb+WNnHtpmM0Wk2eJqC2KSXxkw98yIsnv:rRaRbXN4KXOJwN/a2eJZ2jhqE
TLSH
T1A752C46AED10397B5CCBC22AF921BB67D7F5102161942E88FAFC893C25E79CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 fdc0c04cfd96f634775d46110ce9b7dd8ae07d184a9be7441588ff4d7c749f3c
MD5 29621a444fe78ee457323f93c67b3121
SHA1 489accb1393878428fcecaccd5ede62062114b32
SHA512 36d01be122642b74d81a5c0ee2a92d320933e74dfc1f454116c42e1b439d86339537823c034bbfcf01b00b39e70757c92df1c04ac4360209d83a3648ae2c859b
SSDEEP 192:kRaRMVxQHJoHIrNv78pePRpM519THsb+WNn21qOkEeRqC2KSXxkw98yIsnAUgE:kRaRbVt4CXUJw0AEeRZ2jhqE
TLSH
T15C52B52DED10797B9CDBC22AF965BB67D7F5102160942E88E6FC893C25E75CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 db7f8fd00ba21060e2a58e63dd3e0a6468a385edc0bf7f53e4d83a0312f587b4
MD5 fd119c02e13b51d34411176aa624b65e
SHA1 18d9c1ccf954e307cbb169642b7179a6cbf364d1
SHA512 3e18003a64db78da24d9ed9aff42a6e68188ee5d8758c2ba6d4b13f94a851655e5f623a65e37c47ac3f90da89a589f9b519a56b9f373c9bd073d5589b1c6f313
SSDEEP 384:j5j3S7KxkXqKf/pUZNCgVLH2HfgslA/7pLILcCS9YXOD32+ErU3tSH1T7ku0:jJ3S7KxkXqKf/pUZNCgVLH2HfgsC/7pD
TLSH
T1AB72F967AC4C9A3B0FD4C68CDC267B4FADB5025B65ED886443FA582603D4BCB15062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 54e7f6e82cbcba095102c1a52780eb57fcd4199213049fee47c4de0ae75d2e6e
MD5 9ace4676959dd67a24cbdab2e5467c72
SHA1 77e23354757a5f92531fb7ee067d5f3828089f8f
SHA512 ef908e1f0242830220e835f5c098a9d5c5b2d527554d7396ea5afc1a50a9802f390f4f782dab5f4abe73092c37664aa98d8f7802a6e563e9f61bf79abe15bacb
TLSH
T1C9B0120980413325C44613703258D0587260CF3AD212138545E00D01D8316744017709
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59099b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59099b.TMP
Size 96B
SHA256 41f70a51053a5c6b6f24543f5b78ccd7c4ae728de7d332ff285e3a59ddccd571
MD5 399d3f772d90e845c39b89e890b2bce0
SHA1 a7003be29d1069cbcb2bffbd16488b873ec2b848
SHA512 b1ed10e66dc0b0ebb8fe258efb783c545cec87d1d54cddee7592e3922dfd7c6670a1941acbe3c2b3419a00ecb37dd961f92f144b9c015881a9365b4edeebdf13
TLSH
T114B02200C0322202E80203B020A0C0EC3030CF2AC203020382E00EA3EC20E3800A3322
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 4d5def4cae1412703eca17e52340e3cd74335007b58ca17cce031ac381acf22f
MD5 6cec2d2d1c86ebaff93a2129371e32d7
SHA1 10814ac4b75882216476e5790993ae286c74a301
SHA512 b9677bb476a5e075119cfcb614dac70700d3059282dfbd34e835af2202cf19c000e3ef88f5b2abad35b04c2257043de391a4ba7d7f0405fe66e1f4574791e6ba
TLSH
T1ECB0247C30C30F01C401077053F15C4533F55C311343014307DD00D0DDF1540C101050
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 659dd48b8d82f93161df079541e70ebd453069d85f313592e99787529f598b73
MD5 25635467710482e1f866d18c45c968b0
SHA1 f7285833cdf93813476de6560d3111278c3a6ee7
SHA512 24900d200b2ecf334f51ebfaaa5722c377949ab6193c324148e5ec31ecc5b1a191f210dc62ad4877e7796a7fd6bf7194da30517726c319babbaca3adbcacfdca
SSDEEP 3072:d+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:d+hFD+7t56OD9ZfSAppry
TLSH
T14CD31232A991DCBBC9FC6541F247A304DD666CED41DE3A0984469F8E909F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 1b8d5ab15bc94da0a0e8ce16d333bda9af4f448c385c2e9fd4d6ec56bac87a2d
MD5 eaa7fd17aa847a5e53ed38dd072855e3
SHA1 ac3525ac7fef08a026f870d19c23ad9de7cf7fac
SHA512 2f569c55213b83ed03c1b1017677cb19c378e447d804fb358e808a2d5f9d0f440003049e074a3e7e03423305bfbf0ef2eebfbc63723c3aa6b8037d0616d86b94
SSDEEP 3072:k+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:k+hFD+7t56OD9ZfSAppry
TLSH
T131D31232AA91C8BBC9BC6541B297A304DE766CED41DE3A09444A5F8EE05FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 cc25a880de9ee9bb2c0aee2009d838de72134b41d30f6e57f082476b7777a2b7
MD5 a2baef37ecd9cb62d3cdd3709f9817af
SHA1 b3de5c5fd8a1d63b306f0a6766d209efb9716246
SHA512 d8cbec7eeeb186f3c12528d88391c6d2f878a38242e8187b66ac0bd80269cb9e06012e5a9a554ecd3252c4f8d1490ad5a009eaa827e1111c46d2796c82b468c1
SSDEEP 3072:3+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:3+hFD+7t56OD9ZfSAppry
TLSH
T141D31232AA95D8BB89FC6541F287A300DD666CED42DE3A0944469F8ED09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 4a7d443238df6a6e4bf4daaf9284d1ce80a52b53c492b461ed9fbecf706202b6
MD5 4b55244623a9fd1ea669efe1add0f099
SHA1 76486322aebe2b4cdc4864696f11374a3c680687
SHA512 c2ab2beec8a8236b61568abbb11e50da85f6400d73b5fe57e8b6abb7344df8ef9e41dbba33b5b28fb0e6f6f69006a9979adfff5cbcdbc4bcbc1da9e5282a1585
SSDEEP 3072:y+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:y+hFD+7t56OD9ZfSAppry
TLSH
T13DD31232A991DCBBC9FC6541F147A304DD666CED41DE3A0984469F8E909F84C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 9514457249e603ae2084685d3878ebf816df01d1686e6ad0ab6f4a368688fe69
MD5 bd8cc25dbea4b6f24eea19fa52cce39a
SHA1 67d1917088d3c7871d83b70c18e4a02c24d03df3
SHA512 3ed240610b73e10d481c1725857ef2bbbc4b2f61aac4b3393164c179b10742430d6c388a3b8fe8fecf2ec25975ec6405d4294c824e32f60033ac0690413c8c79
SSDEEP 3072:u+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:u+hFD+7t56OD9ZfSAppry
TLSH
T181D31232A991DCBBC9FC6541F247A304DD666CED41DE3A0984469F8E909F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 0257101608aebc67185dbdd59cc421368f5c67385adb6442fdcad45ab41392c3
MD5 74ea2f407328de5bcb034bacd88dc379
SHA1 3911d7c992ddfdd09e783768760ee347f75d8c86
SHA512 ac15abf853b059ce39b4af424b6747f57456d6510fe1c378d820b142f25e12323379821df4519bcdb1f27d018d07b0b6131e7b0e6085a254127ce267fbd6cd4a
SSDEEP 3072:q+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:q+hFD+7t56OD9ZfSAppry
TLSH
T1F3D31232AA95D8BB89FC6541F287A300DD666CED42DE3A0944465F8ED09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download