hxxp://youtube5[.]com

Analysis

user interaction
yes
max time kernel
72s
max time network
70s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/07/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://youtube5.com
Sample260717-vbtersbx2v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3720	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134287806057322580"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe
Token: SeShutdownPrivilege	1500	chrome.exe
Token: SeCreatePagefilePrivilege	1500	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe
1500	chrome.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 1500 wrote to memory of 3232	1500	chrome.exe	79
PID 1500 wrote to memory of 5008	1500	chrome.exe	80
PID 1500 wrote to memory of 5008	1500	chrome.exe	80
PID 1500 wrote to memory of 3720	1500	chrome.exe	81
PID 1500 wrote to memory of 4876	1500	chrome.exe	82
PID 1500 wrote to memory of 4876	1500	chrome.exe	82
PID 1500 wrote to memory of 2140	1500	chrome.exe	83
PID 1500 wrote to memory of 2140	1500	chrome.exe	83
PID 1500 wrote to memory of 3904	1500	chrome.exe	84
PID 1500 wrote to memory of 3904	1500	chrome.exe	84
PID 1500 wrote to memory of 2324	1500	chrome.exe	86
PID 1500 wrote to memory of 2324	1500	chrome.exe	86
PID 1500 wrote to memory of 572	1500	chrome.exe	88
PID 1500 wrote to memory of 572	1500	chrome.exe	88
PID 1500 wrote to memory of 2360	1500	chrome.exe	89
PID 1500 wrote to memory of 2360	1500	chrome.exe	89
PID 1500 wrote to memory of 4652	1500	chrome.exe	90
PID 1500 wrote to memory of 4652	1500	chrome.exe	90
PID 1500 wrote to memory of 3224	1500	chrome.exe	91
PID 1500 wrote to memory of 3220	1500	chrome.exe	92
PID 1500 wrote to memory of 2932	1500	chrome.exe	93
PID 1500 wrote to memory of 1380	1500	chrome.exe	94
PID 1500 wrote to memory of 1628	1500	chrome.exe	96
PID 1500 wrote to memory of 1628	1500	chrome.exe	96
PID 1500 wrote to memory of 1372	1500	chrome.exe	97
PID 1500 wrote to memory of 1372	1500	chrome.exe	97

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube5.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcff47c728,0x7ffcff47c734,0x7ffcff47c740
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,11122164594734190221,9513175301613994731,262144 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1500,i,6582678851324090941,17893416973109761944,524288 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2252 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,4147818349591443435,9422183889547630342,524288 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2548 /prefetch:13
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3188,i,12689097724371249150,6267988541123979061,2097152 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3204,i,11313299239793393933,12618357440123498389,2097152 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4336,i,17218011002883398293,16322836120169160695,2097152 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4344 /prefetch:9
  2⤵
  PID:2324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4392,i,14981611914608897812,7476072118042296350,2097152 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5176,i,12371532923215684062,11412925787430700744,2097152 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4776,i,7972617711933163988,6221106231645090511,2097152 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5440,i,12338760263781312554,8105481694341613736,524288 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=212 /prefetch:14
  2⤵
  PID:3224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5444,i,5902602930045293198,9852056029576260232,524288 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3240 /prefetch:14
  2⤵
  PID:3220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5456,i,8622087330192526537,14527082624757493023,524288 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5836,i,18218775768399462367,16514940170693100302,524288 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:1380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4812,i,2727505034856232512,8062927896471219078,2097152 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=748 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5352,i,4642082034497875938,16884521464838029036,2097152 --field-trial-handle=1968,i,9529678358684585323,4570353491109236132,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:1372

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4912

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f181a1e27383dc1110ce31c3c2c959d9872afd98519137835f17e5a18f336609
MD5 b35a829b35280a4851b1d6d2295c6544
SHA1 82ff46af93174abeee907b6781305c00ac69de7d
SHA512 20c8b8a35f1d67d03285eb4b94bcef0c7e375f3b0ba87c04f4b3f38f44e16e05b9f15adbbc805988496c6a57a89e1061715e38b3c2c23bc56bc41ef35fba8c60
TLSH
T172E02BABCD219C2709FD4F5860104A82EB41171B3782495F363D471C8FF46374696D1C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 54cab5b99fd2e0e6c49b626e4c42c748d458c9f2ea90c428515e80d733c2f6d7
MD5 21fb989947de9a2339e5e06eafb28463
SHA1 caf24aa8af48c79daf09ab160fb2a96a2a7defd6
SHA512 a5481f426d7b8d814de0486f87e43f7d0ba3913a85a9ee22f5ddcfa2fac7b2b34e86364a093e71261e7f6e5228257cd0a6529cc03606813394f5221fdb8e99ba
TLSH
T125418CF793B4897D861196F8AB156F1FCE690924132C3866C8D4AE1B53F2971E14074F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c8740002e0e4404628b922649a8b88c92a17788419cb149ba33103d6ba360141
MD5 eabc2294089127853de449ea2584b66d
SHA1 798b541e35d802a68058187fdb64a0bef75f10f9
SHA512 3efe30c9258da948f08f5b976c8d173dab7777a3002fed28c98af471bfe612462e333e24fa36594f85f9b1ffbec284729d6cd02149af272aca87685e723c1941
SSDEEP 192:nRJk4EHVyyOOQv7lpupAPRp2Z/9fHsb+WNn1hFMS20fe2208JLAo2VyIsnAUge:nRJkrQOMZgUX0RwrP2O208Jke
TLSH
T17342B62EEA1469775CDBD329F922BB57E7F1002525942E40EBFC8A2C18E76CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4248ce796020f28caf87da9cf356d21a2b4174759bbf90bcf0d4c1834f24c6f0
MD5 0110fe098302b289ea21c66a144de48f
SHA1 b0df2458b6bd5f9495d557c963df6963f737f558
SHA512 5838b9635256dd3be85123e7b57af3092560719a45f05a7b19e498098224c25f2a8a51fddd59a1044a27e123d8fb6548be1677c721bdcf406494ef7749311ac5
SSDEEP 192:nRJk4EHVyyOmgv7lpuwAPRp29b/9fHsb+WNRnL1hDy4qMS2ufe2208JLAogVyIsv:nRJkrQm8ZgBXuRwRnNw2E208JiE
TLSH
T17E52B62EE9146A775CDBD329F922B757E3F1102526D42E40EBFC8A2C19E76CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3ce4385a9d8277abab2fc4b6f3cea30c50ea88af00678358c0f9cba89bd7acf0
MD5 4812efdad05827e0e3067c8b79a4f757
SHA1 b1d615fc0a195b837e3ac0042fbd5b2e6b692cd7
SHA512 690a7d971c096d6bb61cf707864e27f172628e097fcb70d66da6d85c58da31f87dc8aba5ad74baa405aad73afb6c08426af41f45b707e88c297eb4d9bb233601
SSDEEP 192:nRJk4EHVyyOOQv7lpuwAPRp29b/9fHsb+WNRnL1hDaISMS2+fe2208JLAo2VyIsR:nRJkrQOMZgBXuRwRnF420208Jke
TLSH
T16352B52EEA146A775CDBD329F922B757E3F1102526D42E40EBFC8A2C18D76CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b753c581fbe4a7932e05f2d99e769b7091a11bce5c4f0f39ea3fee440531a029
MD5 2c6b00cec04558822f5597f03882326e
SHA1 6b47111faced08c3c4afaf75cfc7891a2f10a836
SHA512 1c80597df31d390b1f059664de33df33b4efd64aedbc1d7c5f43ab5defd7837c09e0005aefce76cccca5199570c197eeff45632cea6e4831cc35807f7e9c069d
SSDEEP 192:nRJk4EHVyyOIPv7lpuwDPRpj9b/9fH9qb+WNRnL1hDy4qMS2mfe2208JLAo88yI4:nRJkrQIHZgcXpRgRnNw2M208J5E
TLSH
T1D852B62FE91469775CDBD329F922BB57E3F5102526902E40EBFC8A2C19E76CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8e086bf41f299f6e0f885a2ad2488320a3d42830f96f5493015e9c5de44c02cc
MD5 822e9c5efe9423a5c39b4174d66766b6
SHA1 26318bc3941f9435791460ed12f374b2bccc810d
SHA512 0a9ceef202163cbc2ee2926e4eb45ac28744ecd8a0ab47c97d8bf847c93e7f866ac0f2e2c99ff20b6177c5cb94597300c81fc3892ff102d08b44306ccf3d10b2
SSDEEP 192:nRJk4EHVyyOmMv7lpuwAPRp29b/9fHsb+WNRnL1hDy4qMS2ufe2208JLAog8yIsv:nRJkrQmYZgBXuRwRnNw2E208JlE
TLSH
T1F052C62EE91469775CDBD329F922B757E3F1102526D42E40EBFC8A2C19E76CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 79ea521d9f3df87d24eec0f3607ae01ff8cf6eaeb5c7802f7c4721f58b8ddead
MD5 5d35f09b8c86835fb4877dcd0cc40e4a
SHA1 71d399e3fd153dc456fddb8f9cf7b1d428dcd2c7
SHA512 68050d4d5a4a4f94c2a29dfff1edf5350066ef5a2e47ef11dcbd09970c2009d28d7804e59c25d64e43ef8e1367105d32e929bef6a7a0e31d18837b193891b321
SSDEEP 384:WQjb+7KxkXqKf/pUZNCgVLH2Hfgsl5g7pLuLcSjQRXODaB+ErU39rHGQ3uKHaaK7:WUb+7KxkXqKf/pUZNCgVLH2HfgsLg7pn
TLSH
T1BF72F967BC4C9A370F94C6CDD8267A4FADB5024B65DD886483FA982903D4BCF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 aecc4c6857691ecadb5aefd9b2c3b2660858f4c665de2b7a8431f2d027cedd06
MD5 4e27fa1f9fef57913a12141a6045e3b8
SHA1 0949bd5f7c1f87b10fe8e512b4dee9e877176b94
SHA512 dd53ecf4f8c2477130328f569500da9e104854a509d291888e9fac040505a164e772f6734672d7189af8d0e8c625e2fa0bd49ccff8ea7324ad2c5d718bcc68fc
TLSH
T1C9B0121180015252C48707F41157288871945F10A60E170143E06933DA25261801C050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586fcc.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586fcc.TMP
Size 96B
SHA256 ced9cb52806aa0f9a69d11f3baa78561b6b72515be609b1bf6e01d35387194d2
MD5 8f18a70da898e69ab56a1b43c13e4f7e
SHA1 d8694f3a3999985ebf2e06e5d86190c3c9c2fe32
SHA512 1150880dd938d808298afde0787a3c39c7f4cf66203d7078dd05de60509bc6ef91fb08ad6cff896e0ad411332b44d53519d9d3928b331c6bbd377515eff9eb03
TLSH
T180B00269D2036252D04313B8759596DC71B4DF25C7031322A2E01E67DC366799535260
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 5f23da05dde247b0a6782273a086f9c6ec4eb09b852d8f9c531f851a6ce8d3da
MD5 40b93075419d3791855564324f5a8f09
SHA1 0d31afa2f06211a0015dca35ac7f07311c2d3390
SHA512 dd6df8a547d35438b3042e1b9483c30d416118f246110e8a3de37076819399757d981c8036529a71cd677426a1314ea50ddb7e9cbe7e8cb9832ec145ef3f6536
SSDEEP 1536:n5ueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6mq:wDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1C9B30212CAAACE9BE4A45C79E4C413F3BEBD5F9523F1B9424166E4023DDE7041395770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f5d54146bbd8cf7c6b058402119dd0279f2202d9b91d9fee526def8828a2ddca
MD5 9a2befa9d3a0c5e65df762eef79d4fb9
SHA1 077aecf75e553209c327c743eb2a95430a9f3f51
SHA512 ab7812667646600d50ebbd04dbb85c48e9e9e24d3eed97ca403a52ae2f148f931fd169a1dd2cd9f8b709e8f5ced1ee0846ae9faa58fc61b58525d7532e752223
SSDEEP 1536:eLLueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:wKDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1D1C30212CEAACEABE4A49C79E0C413F3BEAD5F9523F1BA524176A5023DCE7041391730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5aee3ef854c40bd35891df1a4c6b6f27b59046b20024e0710fdd1d099e2b5a7e
MD5 14b193a6b773b2023042b63328ea6dcc
SHA1 60462d476e4a61fb48f9f8e95dcacc834e7852df
SHA512 0fa7efd7d0de6a8d2aa948fc72d1f2110bc9a1d3300b85932d8d86bd3d6956db7c2585639e61e68c2ca58fe5c2061eb774826872a092fb9baf6bd38a2512df84
SSDEEP 1536:e+dueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:zcDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1A0C31212CEAACE9BD4E4AC79E0C517F3AEAD4F9527F1BA124176A4423DCE7441391730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 dcfe8f1be59989c0aa1116b56a56df980a61d5ba2111c64326fda04d43dfee59
MD5 f1e568a4898f7582eb59369e1fb0def6
SHA1 ed5dd9345f8c5f090ff71347168f6b877c94dbbe
SHA512 ef2ab54ff696c9d3807ee2421935f46f9a2821a14c949de4ebb733caf2419f2ab41b04a9375df6c29a8ed3ab788e53160843b890b38dba0a1f7bee3f34982b94
SSDEEP 1536:jLLueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:XKDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1AFC30212CEAACEABE4A49C79E0C413F3AEBD5F9527F1BA524166A5423DCE7041391730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download