hxxp://www[.]youtube[.]com/@LARPC1

Resubmissions

05/06/2026, 16:27

260605-tya19sct8m4

05/06/2026, 16:24

260605-twhy4act5j4

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/06/2026, 16:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.youtube.com/@LARPC1
Sample260605-twhy4act5j

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1828	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134251502870286544"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4776	chrome.exe
4776	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 1728	4228	chrome.exe	86
PID 4228 wrote to memory of 4328	4228	chrome.exe	87
PID 4228 wrote to memory of 1828	4228	chrome.exe	88
PID 4228 wrote to memory of 4328	4228	chrome.exe	87
PID 4228 wrote to memory of 4276	4228	chrome.exe	89
PID 4228 wrote to memory of 4276	4228	chrome.exe	89
PID 4228 wrote to memory of 5004	4228	chrome.exe	90
PID 4228 wrote to memory of 4764	4228	chrome.exe	91
PID 4228 wrote to memory of 5004	4228	chrome.exe	90
PID 4228 wrote to memory of 4764	4228	chrome.exe	91
PID 4228 wrote to memory of 3764	4228	chrome.exe	92
PID 4228 wrote to memory of 3764	4228	chrome.exe	92
PID 4228 wrote to memory of 3704	4228	chrome.exe	97
PID 4228 wrote to memory of 3704	4228	chrome.exe	97
PID 4228 wrote to memory of 2488	4228	chrome.exe	100
PID 4228 wrote to memory of 4420	4228	chrome.exe	111
PID 4228 wrote to memory of 5092	4228	chrome.exe	112
PID 4228 wrote to memory of 4532	4228	chrome.exe	113
PID 4228 wrote to memory of 4776	4228	chrome.exe	122

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.youtube.com/@LARPC1
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffbf9e2c728,0x7ffbf9e2c734,0x7ffbf9e2c740
  2⤵
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,15505593682349245136,15132183826628121937,262144 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2068,i,16792305476128619914,15618080393576509164,524288 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2092 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2216,i,9945915685541725936,10613567232840185294,524288 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3084,i,3373629289484961355,397716646734258505,2097152 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3096,i,3384047294925142880,16192525343746925901,2097152 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4256,i,1058147210698097053,131998538087736319,2097152 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:3764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,17415842388695104379,10821248025554947008,2097152 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5316,i,7515252893866454012,8636828235141767770,524288 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5344,i,12222258085062823956,18046867176934115356,524288 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5676 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,1924655869462696431,14565004815504615801,524288 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:5092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,245718993021990744,1175217350094339558,524288 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1076,i,3191822514626657384,4793235077435718700,262144 --field-trial-handle=1996,i,16712193458218699130,6904599561012481010,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4776

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4908

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 c69337cfa0d6db0c9e0bd59e7d5f5809e0b88e4f0f6fdfd21ec63ca1bb373743
MD5 eb4a47baa81c87f1a0bc9a1f594b89eb
SHA1 162fe280fe07560c6cf706e5dc13f76492c2a1b2
SHA512 c62af694519d48a587c72f3c2625b343a151f0bfb5362f9c517dd29c94cd45117a487730226da0ac8b5c94089b43b87dde4e0fbc6b8922f68fa07acbf8e1bdfd
TLSH
T1A0F0F4AACC21AC7718FD0B5860544B8AE751135B2B81995F3B3DA20C8FB0A3B458A86C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 329915563c102f693e3f984f08c9dff98d02c617fe30149eb924e38f442ae16d
MD5 3f7177a8e2ea3344e8ba9c95cc9ce0ce
SHA1 9bafa18f8ec4dece1540a414256d2335d50bfd43
SHA512 99632bdfe581dc2beeb2024041f10df86449dbd0704cf6c921fe6db7a69252d261903433a95fcbb967c5a73b9954a85f0a321aa72572ca584a727644a19b8b36
TLSH
T183D0A90022A11092DFEB43F3A202A7A3032014FC0E806B0350EAC0B884062D9210BA52
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 0dfea7f9bba879dbaafc9bb2f0f84a91dc18f8f0318832576a155de589f3ac74
MD5 91addb55799be1d75a0fd0399090c534
SHA1 8bd549dd0fb0b3c6f61a4cb2ddfc82e43aa00bca
SHA512 93bd288fe3eca1625b7d9e91b26f19a8c02805517ab554e2e295633b5584626c9f72cbe51b1ff5decff479a0ad2566aa2a24ce107ff11743899d04a77a8cc308
SSDEEP 48:YALlOBWghSqOBWqYsARsafoKsDXLspfs4oslKsgWgmzsyWOBPNsxW4sHWOB/zsUg:DuxzurgBEc9VhquPn2uluzuEususECu6
TLSH
T1EBA17BB3C7D8C63DC92156F4A7242E2FDE290E24436C3D66C9D5AF0B63E6972D24054E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 b30a90616b5168c17c7b834853686d55c3437e84f301acf39c32361ad88d8c99
MD5 528955cc34a97dd540f4a4049bf03b93
SHA1 da6fc2dd0e483a4aa25771eb86a87007497bede7
SHA512 e52e24123189b91ead88b46b7eb2aa5c4c36ae72ce84fe3b078df435b37ecf48bc90424df916e2ef6fa24a853b8f44cad4c83b44e196a91228d5ff0169a34514
SSDEEP 96:DuxzurgBEc9VhquPn2uluzuEunuRdewur6usXuu:DIzBBEc9Vhq02s476Mdewy6nV
TLSH
T1A1B17BB3C7D8C63DC91156F4AB282E2BDE290E24436C3D66C9D5AF0B63E6971E34054E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7a5b36d9832f4dfc96b91de5e31af5893a613098493be12ed703463e96acf397
MD5 cf885eb211c3bd3849f12d7a60876895
SHA1 10d9c7fe4476e04a7762fdc16989bb163f3176da
SHA512 c7342147552779c9eb23cc5e67e409b6c6d60160541c5d3bf4c4205173db23d919f14d796ff63264f1efde9139cc3f563e262938ca500fe406734b4fe82791d9
SSDEEP 192:KRRxWk8MrvULBqv7spAPRp229x059wHsb+WNnzE4qJ2MWeO2ccw+VyIsnAUge:KRRxmMSmYUX/sKwoH2f2cN2e
TLSH
T1DA42D62EF954697B5CDBC229F922775BE7F1002121942D84EBFCCA2C04EBACD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 956fec0198091f74cba6e47aa2ea9019dd2aa92cf2db142fc137d42db08429d1
MD5 c01990c69eff2323274ba0e1d35e3547
SHA1 9ccb48b5dd469fd453556363069e654e4cd46d48
SHA512 d0d347a56ccbb3d49b2ab12fe9a87d7a08a0968893184d8657152668d91dcd79f39f1bd9934c2dd5cf31b71c5722aadc32ee106b4d94d9da580c5f39eb50689b
SSDEEP 192:KRRxWk8MrvULB6v7spAPRp229x059wHsb+WNnzE4qJ2DWeO2ccR+VyIsnAUgE:KRRxmMSWYUX/sKwoH2G2c02E
TLSH
T1D942D72EF955697B6CDAD219F922775BE7F1002121C42D84E7FCCA2C04EBACD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c0ad2e757574abf5b7c39c74afaef49efb6f72beb3ee50989ba5204a458f66d3
MD5 69e53e0c4d95d2fefe0d3c913f11dc74
SHA1 299ead5e56f9605607a3b78e5f545a969eca25be
SHA512 f30a295d851842340c0bd8c0874a99b8e1c2c92f524f5361c1db88f79db4e3ce5c871d1b79579da4bdf2186f6b853bb2babfef6b30946c91ebc3d3eba4fa064f
TLSH
T1A3B0120090016242C08202F01186249871949F709A0E270743E0A972C8259B18429050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5843ab.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5843ab.TMP
Size 96B
SHA256 7bfad6258d99587081e9a028feb45deeeb59f4eec0cf60a2fbb80e371c5077e2
MD5 15d289e1f2d2f2cd267180ce2a913672
SHA1 265914291672062e8b0d501888962753bcb8827a
SHA512 67ee4ee1d298c3169b928f6aa4ab447b30114f28f0fb0c1592f53dbed473620d35702309cc312dde8978b4f016aff6255dabc9ab3bf87879b643fdcb06efa5cf
TLSH
T1A0B02200C0032202C20303F828E280C83028CF28CA030322A2E00A3ECC203300220020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d9fc8c9b8275c7f8f883f27917298b5380ed95648ef50c766aa2137f7cbb0f1f
MD5 13aa49768c34f23655b4df57aad3ab9a
SHA1 3174ec8e888477882daeb258a868deeeda26bcc4
SHA512 bfda6f8b5b6be982c839d25640376724eb5819b1cebe218e926582afcbc7ac06828b00ce5f4eb02b5a77aaf36fea275ef45f8d3c182ad160618cf6538faa8aab
SSDEEP 3072:SGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:lm7Rkm1tYpBeh2BAoK
TLSH
T18BC3123B5D65E87759B9BB4EB08E0B1F1EF149A6C920DE92C8D85F0433E97CD0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 d92c92d738aca39bd86e72a4b2026f6bc2953e45c9001710bc3258a8bc40e6e4
MD5 e670b59f81a880c3124e9a9488456db1
SHA1 10ddf3814aa37d28dff353d1faee132e6e29c99d
SHA512 fbe8bf78d1e4f9cf87634917db6e1e2ee0396c6005e11556743e43e5ddddf5a1b24c12737fb303729fc6590eb455c6c84e3f5e517feab1ad72a70c808dc0b24c
SSDEEP 3072:2Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Bm7Rkm1tYpBeh2BAoK
TLSH
T191C3123B5D65E97B9979B70EB08E0B1F1EF149A2C920DE92C8D86B0437E97CD0A04D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 267bd183cc3ff27425331f2a104a6fb96bda89b4200d57678fff9dc6029eb281
MD5 e6242a57bd9ce9a486bf563e340997a9
SHA1 932a6222bce982722b8e34e2929f0f454d76acf1
SHA512 d8db428aa3dd760c903fd0a1380a076d219c5a1bce8f3d2a2179d9770631d3b1ed0a29391c6b95b405a3081ebba4dac9829f51f858868c8a84a26a5e51183531
SSDEEP 3072:nGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Gm7Rkm1tYpBeh2BAoK
TLSH
T1B5C3123B5D65E83759B9BB4EB08E0B1F1EF149A6C924DE52C8D85F0433E97CD0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc52edb6-e89b-4903-a6cf-5b520bbc01f5.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\fc52edb6-e89b-4903-a6cf-5b520bbc01f5.tmp
Size 116KB
SHA256 99ec753d567ed15d986121e8761b0382c99f3ec08fa10e7658eb00d3616c5e3f
MD5 4be078553037a7e7bd2c0de7c8123d32
SHA1 bba5d3fb35cdd5bec85f3f2d7d28916bdeec403b
SHA512 6eb42700dc430f7defa74b00b742ea9fb788f2ed37a9e24c74628c124c9ab6e0c19ecbcec1242da7ae268ec6185b6a91378589bcdc5e5d3b4c04fe7572dc5917
SSDEEP 3072:iNGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:/m7Rkm1tYpBeh2BAoK
TLSH
T1E5C3123B5D75A83759B9BB0EB08E1B1F1EF249A2C930DD56C8D85A0433E97CD1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download