hxxp://youtube[.]com

Analysis

max time kernel
454s
max time network
529s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2023, 19:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://youtube.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133444642387455212"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5036	chrome.exe
5036	chrome.exe
3992	chrome.exe
3992	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4944	LOIC.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 36 IoCs

pid	Process
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: 33	892	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	892	AUDIODG.EXE
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4944	LOIC.exe
4944	LOIC.exe
7052	LOIC.exe
7052	LOIC.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5036 wrote to memory of 5048	5036	chrome.exe	87
PID 5036 wrote to memory of 5048	5036	chrome.exe	87
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 2272	5036	chrome.exe	90
PID 5036 wrote to memory of 3976	5036	chrome.exe	91
PID 5036 wrote to memory of 3976	5036	chrome.exe	91
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92
PID 5036 wrote to memory of 528	5036	chrome.exe	92

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd13539758,0x7ffd13539768,0x7ffd13539778
  2⤵
  PID:5048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1716 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:2
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1872 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2092 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:8
  2⤵
  PID:528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2996 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2976 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4428 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4664 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4940 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3388 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5484 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3380 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5476 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5800 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5216 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=6192 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5224 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=6792 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:5732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6608 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:8
  2⤵
  PID:5844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=6524 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=6108 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=5776 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=6692 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=5792 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:5964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=7336 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=6604 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=7772 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=7920 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=7896 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=6840 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=5072 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=8676 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=8732 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=8704 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=8400 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=8844 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=8880 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=8896 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=8904 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=8392 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:7080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=7348 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:7120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=8544 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=8504 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=936 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=9648 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:1
  2⤵
  PID:6636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1820 --field-trial-handle=1972,i,15006686423500899255,2951859832619795580,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3992

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1912

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4a0 0x4b4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:892

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5524

C:\Users\Admin\Downloads\LOIC-1.0.8-binary\LOIC.exe
"C:\Users\Admin\Downloads\LOIC-1.0.8-binary\LOIC.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4944

C:\Users\Admin\Downloads\LOIC-1.0.8-binary\LOIC.exe
"C:\Users\Admin\Downloads\LOIC-1.0.8-binary\LOIC.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:7052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

Filesize
28KB

MD5
8e587f837c16041efc4dc733be2ecaa4

SHA1
d0da1748240851041830a7a023df8d92856f6933

SHA256
136d4c612c6676ab4e100d29b14d4a85ced9b6052d3839a8c71256eba1d8dd77

SHA512
1636a5625bf7e3cdb6d8f488c2c466ff46baf22b6711f51fb42cabef3a029d5521fa3f55a1b9a9e64d27e7509337b0ab2b05f212927faeef1820d7b72002b94e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027

Filesize
54KB

MD5
64e5ee1705981d9d2cdfce155d0df441

SHA1
bba3e34cc3c0c4b3bad93ec660a6d86fd6f3fc7e

SHA256
4099dcb0b712bbdff3331b87129b657450b8a74a9c5e14295919489441130e58

SHA512
133650b7c3ee068184f48cdc9a8c3da0e3a70aaaac3cfae7e4ca11d214ec2a672d1f70a65be8730a7509807c3cd302dfa7605bb04dab3581196f48de355c96ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
c8ff9af1e7b01697fb0f26ae1fec10e9

SHA1
8a8f38c6fee556697fd48441ed0010de24a8052b

SHA256
8a14596a380297c7841b822018053ec377fea0c7f4105dccc7a03785221b10bd

SHA512
48772ea484dbe1f0ba2647750f453873ff18fe0108881d7582b48bc5e43c9398c334fd29881762c9333847a36c92ae7fef5e7cfafeafb9499d10832130ffbe8a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
c5ea4acc29e9f6d601a45cf631ba58bd

SHA1
e5a081220974f2530efe1f7849731bfc3fdbc744

SHA256
18eaa996cca95b7fcb9004a0ef6b2aa747d7b2f74d918d37955af88b14345a72

SHA512
1cd736aa19888baff67ce91841830675b3af59b544ea341e85c8cd9be144386469ad43fed00fe6c6b31e2bfea0850734f0ed911fd3f0ef63fc8de99f2592c3a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7ce0e44d-df0b-4404-9d25-34a4ec8ba470.tmp

Filesize
3KB

MD5
1d75eb70125d3d73edd5ffe0a18929ea

SHA1
b0c66a7ec7284b76f97f8e5bb2620ee1734346f8

SHA256
bc2366f488fbeafc4395103df99b03b275220b5fbfc261e0236e25392255e50f

SHA512
38e1299593ffcaaf0ddf88e549b1e4ff7201fd59cde463383f80640e1cb4fa7aa585c479eed9e01e92cfe0c9a4f6dd6b19364cfaa672db17aae9db0a96c9db84

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
8KB

MD5
9532ced1593795d24b3f7ced4cef5fec

SHA1
30496d0b52f6a9b9ab4f639682a18b2cd1c90a38

SHA256
288b9c80a3a6da500eabede05c9b5770935d3c04f7012aff32a30dcf9327d407

SHA512
af86ea2cccd96a146943dedb9c0420fc17e53f66593e639f8c74d8d021a11c22d04c6eaeb2b5acd7917dc5c9cc6a13969b7b9f449fc117909da5a5560ffadf02

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
10KB

MD5
195a94ddedbbe3b2ecc114848b033d37

SHA1
79fceb8131304f5790a4aa557d0f186be25eef99

SHA256
3737389a47898bfc65d52887defdca9bf85879454478399acf21812c670526e4

SHA512
6c1954352d6e239d558d0f7bac116890346ce1057658f4b52666ae4c5b4e78fdeece0df04d1c553e4f9e0c4b37968a68f63202603ab915ac92e32777f6fb8900

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
10KB

MD5
bcc9f801d72bb01dcd43234e78b3d424

SHA1
db117caebe0ac86a5a6f46b2f8a05ec6fe857bd4

SHA256
9d23f92a92f63c4a375bb01271c9e1bac501de6b12fc1f2e937c0b49d33ad937

SHA512
a4b2dfcaea3196b95cf439a0b41e90410e00474b163668f8c8e559c2b4f39cab1a0c78059af2acdafab670e42e3954257c98acc53053c8a08c99b442892812c3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
874B

MD5
1aa0d2b63c2484464e7798694c304901

SHA1
23301d8b1939d0f98858d8b6903f1b9286b02ab2

SHA256
4d43b13629e13961177fcc03c224c19c7f54c720da96a9dcf1e9a8298056b91f

SHA512
6cb481694aa20ac232ef679b2b858c171448faa127e1766f5e8797163f98eba20c6fdf2edd1696515a398deb58e674531740ac8c46752a392943b49ce160702c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
eceb60223fa172cbfcaf0a2f787a71cd

SHA1
d344bd55a776e1ba80fb1dbd1b862d6d7fa13dad

SHA256
718fab133b692053766653a93c5ad731c8e1547cc0d8f44a1a62d28234665c42

SHA512
4dbdd270a135f91aeda627700468b0793070d0a2cff8a237f3d538fc52269812eaed841be9d7d91261b63a7b83793fdf7743d9ed6eee7d024d635efd59a9fa27

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
1b4222026dcf5393c784c2b678472515

SHA1
5039c77022205226df304aa06f13f81962954aff

SHA256
88110e6993c1a676b04ff602ea2de934fa03b80f422af614ac99b6e33cf7609e

SHA512
2aa83e99b6921b194067aede79fb0fb2cc929ce3eda2c0decd2c40bd9f7c4b2bc9371d1f88881626aba77a7eb256029c4245ee1db5d59a4a53eb0430fe5200f2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
705b43692b607f4cfd2b94b7a06a5cb0

SHA1
0219a6b9bb577967a34cda87daed1b494cb16bd7

SHA256
795f94a86133b8126747bd35967d8e0fd4ad90978438b015e6525fdb439a7c59

SHA512
4ad42685f649dbc449471b40a76dfc0980d6122fe9f2b7af9e2437bc9b9117f09f9a707ea114fa20e43498d93fbaf478b2f94021b07450c13c788d33bcfdefea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
bdd49f93983673914412dac57acf799e

SHA1
e54bb57f58dafa56bd5e51982a413578187d60ba

SHA256
7d93e68f83288d8221d2516f2df0179a5af62e242dd80e06289666c664a905de

SHA512
509e4aaa1bfddb77fe07fb6278d7f3d52c66b5ba4ade4fe6ba51bec69976dd32d9e88081a3f715f6a186ab68b8514a52f6a3be83c79bf1609e4eb174ab11436a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
e37b3a257df93cf534e70a10d2562cbe

SHA1
5ba6e127e9f6dbc9cd2ec3faa368b146fae18f4d

SHA256
4c4d105c76f84cb942ab9398942465dfac66bb5a7b3a8668b7e57fdd996fe694

SHA512
7199aa24b359a84a56eb329e1872876d520f2b6be565c1c39f2f2db8b45afbdf4071b3b48e5ea1de174a4dde738bd848d25e01d7a16b0baa31c9c0644f5dafd8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
24bf2a132bea01f0584d7b888248a6a8

SHA1
825358a36c82818af365e850ceb3be99cd283dde

SHA256
0f4b0d92fb4585571116a383e3338d7561de6cf4277c6c2613d4f9daa708fbd2

SHA512
710282244bc1607bea64396ea6de81c21c1d83e701753871701bfd50de81ab698bf886041371596614407b292030f9e170cc2de98be8a6e1640a0b96eda507fd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
582e283912c84e9dbe890aadde313759

SHA1
3b69b1666ef8f7451fa0f86d5022f7c891f20d12

SHA256
9044238c891fe0eee0652004778276c05d78785fc4838d9fd505ae1a46e9a24b

SHA512
3da45f7df77595bceab37d6b49cadc006be6d7a3d705b5bf15b98b81c4bb79107f72713077379eb66aeb629fafd4f6e39efbf2034f9d5b10d41527b56afeac7a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
479fa60da0d2fbd201ff6151305cf59c

SHA1
3656bc4b952d2a7242d7b79b403e8d1eed9c351a

SHA256
43b5b64609ee3861db7e8416554c5a6a333febc7eedb7932987fed49b4a585df

SHA512
75122449c32cf4a89e890ffdf8c17ca56ddedc4cdd15f6092e5ed91f8520504b27c03bffe7f7391c4ee0f1b4ff27d70dc7851ab148faf07b04e7f0525593fa3e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\acf7aca2-e278-4d46-b13e-d7577375bf50\index-dir\the-real-index

Filesize
312B

MD5
5c58058f8d2d6fd91033d316a5920626

SHA1
7de54b911c8c37fad032129e68e29f7fa66839e7

SHA256
865404fd89dc2fdb61861cc2d3f6de189d2fbe757772fcfcb594b35fbe029b9f

SHA512
cc0e5bf5b1e4a52608d5829f3b93a26d521dc3821832a10689b2a17fd871f3d9eac7ab36ca952af530ebba6d975b114cdd6775d2d6b0483641aa21381615ed00

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\acf7aca2-e278-4d46-b13e-d7577375bf50\index-dir\the-real-index

Filesize
624B

MD5
a3e37527df3a93203217fc09e86301e9

SHA1
d9558221896e4adb6f38ec0df0fad902a49798b4

SHA256
3ae4a3dc91aa47936b0fb30a7f15d8c883b79fa77184579864f0c90c842bacf2

SHA512
85a98d1abdf0aac37a0b2157bde4a20a95fb8d93c116acaa0fd7760ceba732940d3e4756811da43dcc4d656040d22ec161d1fb30862f4eb8f2c6e4ddcd5c32ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\acf7aca2-e278-4d46-b13e-d7577375bf50\index-dir\the-real-index~RFe58d731.TMP

Filesize
48B

MD5
be8282e129f4f97000ab67ad33fc4ded

SHA1
17b7ba76f0ca187e06811303bf5fff97bfc041aa

SHA256
5bb6a534122dc24b87f5518d6b93ca0053cb39e1789e7ddb926a60ae38ff2e2c

SHA512
caa177da515bb6014afc68e5e673ab37945964d26188866274edd4343f71c5cde521e5433cc77527be1f3727bc2dc7010b1f7753d0bad92632314dee11fef8fa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
112B

MD5
9fd38435c8e247d509e0aa9e0c96d7ab

SHA1
1f2c045eafddff5115f0d03945f614b8f6ec8cde

SHA256
e449347152bb458b4f70ca609dfef7f400c5ace54f36bbf521ca56bfa5e1c1b4

SHA512
d5f00a1d0439df0919422b3fe0ea363f3bd674699b94ab278e1a549da65d7c21d6f1c88feeb7a1765d3414f8c21279065eb19a47a96ac9ae48ed8e2c555b8aec

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
185B

MD5
d513b84eb1aeddf45f1806c3d97a59a3

SHA1
b4de445e8642e0b9b09de6fef647e60f14b59fb0

SHA256
6e45324143f8bbaf28be55cc24c9755daf30e15aace667667e9cefdfbb888aee

SHA512
4be6eee959b5dfdca1ba3100ef6592b7ab12c15926b87a4053f9b04a79596686bdb754a200fdce59e488b032c448115e3ea5779441d650d2f031cb11dbb2f701

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
181B

MD5
119f26b4e2fb81ed428432d5238669f7

SHA1
75cd0f1e7faf73cb4f711350586123a558a9b5bb

SHA256
d934c145af69e997e387acedabb93fe21c3375a756329b07594ec6a3c206967e

SHA512
a8bc91f8a52e58e267359509303b6b0b6e798a520a3d94bab40161ba67c1b104d09c96700bc5e6be07c03a19b27b600f208e16b29c76263d40b800a92e78c616

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
181B

MD5
9958e6a72638888d36bc14df45e0bfbb

SHA1
57ed6eb57aa81dadc21256de1360adb727b3eae6

SHA256
e81a23583fd4f54222ec606e94f0dab372d1c2ed513067587985fa88dedc661b

SHA512
5f5f212a51204caa9c19c0ee7ab7e4086480677598dc3a74a5fbe02526baa1eabb159ba8fd6982bec48986ada471f4b030dcfbed193aeaa05435f6bd971e8a03

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
176B

MD5
50e01f6d0dfa97684544a39d61fa3b8b

SHA1
178248d266e24433fb6ff59a0dc1b3191c9457ac

SHA256
2f4002f4bdeea1edf8ac8767967b5866b8e56e5d6dbd8a052f4cc93a6569cf59

SHA512
02bc540664088d08ba23321b57847438e9965501261a593eac2d968657fe714d7251dc04889391023329eeedb249787b34946756a8251df6d99577c8704090b3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58406f.TMP

Filesize
119B

MD5
82ce3c4948508346245a3b434a55d49d

SHA1
6c03ebe026624092838ce072cedea60d7ce6ba6b

SHA256
c0299584627e8850176b60ce07b0e12d129a6194c80a4414327c1c70c01fc381

SHA512
1fc8ba5de999032523d2359bb51a9d5ca0376aed83c1009caf6ff8a391f552965b95c6e6b8dde08cd19d0d22fff648a1991c8c01646a8eb0594b787f92269d24

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
0a69862d250ef7e809fe45740d28283e

SHA1
acdce89d393c81cee3938e4ee700c339eb15a088

SHA256
189ee4b6ea1ee239f456a97b4a97bd9ead267298691118fe893474ad7dc0bfa2

SHA512
e1f997c5982ca2c11e5a7e320fd570d73b0d757443d241bb0d2a226c645335a4d46562e1a0eea57f713b160de51d3625ad5353331ba8685174abebf86c83f3d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c59d.TMP

Filesize
48B

MD5
f6bcdac2033b25b2047bb5386ba480ba

SHA1
52fbed415e67ae2224dbc613fb1e3364ffa7601f

SHA256
c72a451eed0a35bf58a6d5a68c0ab0945970b4649abda7d5917bc6571e19e92f

SHA512
a7fabe9396a2fd66a420d098afafa2b982776ebc067b15d1ca8f138a80e411aff69144a926cb44e2c491b245b93ecd53240c99f969d3767d2e6b6d03af332389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5036_343398134\Shortcuts Menu Icons\Monochrome\0\512.png

Filesize
2KB

MD5
12a429f9782bcff446dc1089b68d44ee

SHA1
e41e5a1a4f2950a7f2da8be77ca26a66da7093b9

SHA256
e1d7407b07c40b5436d78db1077a16fbf75d49e32f3cbd01187b5eaaa10f1e37

SHA512
1da99c5278a589972a1d711d694890f4fd4ec4e56f83781ab9dee91ba99530a7f90d969588fa24dce24b094a28bdecbea80328cee862031a8b289f3e4f38ce7a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5036_343398134\Shortcuts Menu Icons\Monochrome\1\512.png

Filesize
10KB

MD5
7f57c509f12aaae2c269646db7fde6e8

SHA1
969d8c0e3d9140f843f36ccf2974b112ad7afc07

SHA256
1d5c9f67fe93f9fcc1a1b61ebc35bda8f98f1261e5005ae37af71f42aab1d90f

SHA512
3503a0f4939bed9e1fd5e086b17d6de1063220dffdab2d2373aa9582a2454a9d8f18c1be74442f4e597bdba796d2d69220bd9e6be632a15367225b804187ea18

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5036_436415831\Icons Monochrome\16.png

Filesize
216B

MD5
a4fd4f5953721f7f3a5b4bfd58922efe

SHA1
f3abed41d764efbd26bacf84c42bd8098a14c5cb

SHA256
c659d57841bb33d63f7b1334200548f207340d95e8e2ae25aac7a798a08071a3

SHA512
7fcc1ca4d6d97335e76faa65b7cfb381fb722210041bdcd3b31b0f94e15dc226eec4639547af86ae71f311f52a956dc83294c2d23f345e63b5e45e25956b2691

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
109KB

MD5
da95cbb9b4a12b0dc8bda76915484401

SHA1
5582c42fa495e2f6431bba1e69496aff4d518cd7

SHA256
95ea1323c356d48fd442e32af1605612b30c073a0b158788a7b8e46b72c80c02

SHA512
2286ec2614b1825521128aa56e4dd29d6496d56d859cd656b0291717f7084f3ff9406aa41c07b7c35663de0783c64e5b923cb651e360cda664797b3de407ddc3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
109KB

MD5
444f1c7ff7f6ec257664cf541ba7d263

SHA1
6355927f804ccbbba2659de30f0ccdfa7e0a79ab

SHA256
3ec909d58d278734e92ec29cfbc12e4347ead8580d923a582d084f1a61a54369

SHA512
0706611526b34e3eeeffa06627be6770c1ae4c0bd908d7b081a0c5fe324030e0e90c74fd3219405f57ec962a067861abfe133e6e6bc158a283d7ef9381c88a96

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\Downloads\LOIC-1.0.8-binary.zip.crdownload

Filesize
100KB

MD5
c615da1584cf050cf81a08d40309d735

SHA1
ff00f68b03f7bbc785284abd95a54d5b98f7db9b

SHA256
b6d6e0d1dce867836a684a0af278e46ed4a50be49a784ab7bfcb3ed59841c9d0

SHA512
127429a243595b572a3bc9153243f39e4bdb088b72ca5b9d3962fb36c031bd42ae7a8a326aaae76e11bb33df56925e3591a4c07a7cbe2459b336a1074b8e9113

Download Submit
memory/4944-682-0x0000000001140000-0x0000000001150000-memory.dmp

Filesize
64KB

Download
memory/4944-660-0x0000000001140000-0x0000000001150000-memory.dmp

Filesize
64KB

Download
memory/4944-600-0x0000000000960000-0x0000000000988000-memory.dmp

Filesize
160KB

Download
memory/4944-680-0x0000000001140000-0x0000000001150000-memory.dmp

Filesize
64KB

Download
memory/4944-601-0x00007FFCFDF10000-0x00007FFCFE9D1000-memory.dmp

Filesize
10.8MB

Download
memory/4944-664-0x00007FFCFDF10000-0x00007FFCFE9D1000-memory.dmp

Filesize
10.8MB

Download
memory/4944-706-0x0000000001140000-0x0000000001150000-memory.dmp

Filesize
64KB

Download
memory/4944-684-0x0000000001140000-0x0000000001150000-memory.dmp

Filesize
64KB

Download
memory/4944-698-0x0000000001140000-0x0000000001150000-memory.dmp

Filesize
64KB

Download
memory/4944-686-0x0000000001140000-0x0000000001150000-memory.dmp

Filesize
64KB

Download
memory/7052-692-0x000000001AD40000-0x000000001AD50000-memory.dmp

Filesize
64KB

Download
memory/7052-666-0x00007FFCFDF10000-0x00007FFCFE9D1000-memory.dmp

Filesize
10.8MB

Download
memory/7052-691-0x000000001AD40000-0x000000001AD50000-memory.dmp

Filesize
64KB

Download
memory/7052-697-0x00007FFCFDF10000-0x00007FFCFE9D1000-memory.dmp

Filesize
10.8MB

Download
memory/7052-685-0x000000001AD40000-0x000000001AD50000-memory.dmp

Filesize
64KB

Download
memory/7052-683-0x000000001AD40000-0x000000001AD50000-memory.dmp

Filesize
64KB

Download
memory/7052-659-0x000000001AD40000-0x000000001AD50000-memory.dmp

Filesize
64KB

Download
memory/7052-619-0x000000001AD40000-0x000000001AD50000-memory.dmp

Filesize
64KB

Download
memory/7052-618-0x00007FFCFDF10000-0x00007FFCFE9D1000-memory.dmp

Filesize
10.8MB

Download
memory/7052-681-0x000000001AD40000-0x000000001AD50000-memory.dmp

Filesize
64KB

Download
memory/7052-665-0x000000001AD40000-0x000000001AD50000-memory.dmp

Filesize
64KB

Download