hxxp://youtube[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 05:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://youtube.com
Sample260803-ftjkyscd85

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3244	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302074123674434"	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{07698486-C867-4029-AF12-E4C69CDACD25}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2848	chrome.exe
2848	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe

Suspicious use of FindShellTrayWindow 54 IoCs

pid	Process
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 5088	2316	chrome.exe	85
PID 2316 wrote to memory of 2200	2316	chrome.exe	86
PID 2316 wrote to memory of 2200	2316	chrome.exe	86
PID 2316 wrote to memory of 3244	2316	chrome.exe	87
PID 2316 wrote to memory of 2824	2316	chrome.exe	88
PID 2316 wrote to memory of 2824	2316	chrome.exe	88
PID 2316 wrote to memory of 1900	2316	chrome.exe	90
PID 2316 wrote to memory of 4188	2316	chrome.exe	91
PID 2316 wrote to memory of 1900	2316	chrome.exe	90
PID 2316 wrote to memory of 4188	2316	chrome.exe	91
PID 2316 wrote to memory of 4796	2316	chrome.exe	92
PID 2316 wrote to memory of 4796	2316	chrome.exe	92
PID 2316 wrote to memory of 4504	2316	chrome.exe	93
PID 2316 wrote to memory of 4504	2316	chrome.exe	93
PID 2316 wrote to memory of 1524	2316	chrome.exe	94
PID 2316 wrote to memory of 1524	2316	chrome.exe	94
PID 2316 wrote to memory of 4556	2316	chrome.exe	97
PID 2316 wrote to memory of 4556	2316	chrome.exe	97
PID 2316 wrote to memory of 5008	2316	chrome.exe	98
PID 2316 wrote to memory of 5008	2316	chrome.exe	98
PID 2316 wrote to memory of 5076	2316	chrome.exe	99
PID 2316 wrote to memory of 1812	2316	chrome.exe	103
PID 2316 wrote to memory of 4892	2316	chrome.exe	105
PID 2316 wrote to memory of 4892	2316	chrome.exe	105
PID 2316 wrote to memory of 1984	2316	chrome.exe	106
PID 2316 wrote to memory of 1984	2316	chrome.exe	106
PID 2316 wrote to memory of 728	2316	chrome.exe	110
PID 2316 wrote to memory of 728	2316	chrome.exe	110
PID 2316 wrote to memory of 624	2316	chrome.exe	111
PID 2316 wrote to memory of 624	2316	chrome.exe	111
PID 2316 wrote to memory of 1860	2316	chrome.exe	112
PID 2316 wrote to memory of 1860	2316	chrome.exe	112
PID 2316 wrote to memory of 3344	2316	chrome.exe	113
PID 2316 wrote to memory of 3344	2316	chrome.exe	113
PID 2316 wrote to memory of 4836	2316	chrome.exe	115
PID 2316 wrote to memory of 3296	2316	chrome.exe	116
PID 2316 wrote to memory of 3680	2316	chrome.exe	117
PID 2316 wrote to memory of 116	2316	chrome.exe	119
PID 2316 wrote to memory of 116	2316	chrome.exe	119
PID 2316 wrote to memory of 3108	2316	chrome.exe	120
PID 2316 wrote to memory of 2004	2316	chrome.exe	122
PID 2316 wrote to memory of 2004	2316	chrome.exe	122
PID 2316 wrote to memory of 4504	2316	chrome.exe	123
PID 2316 wrote to memory of 4504	2316	chrome.exe	123
PID 2316 wrote to memory of 2848	2316	chrome.exe	124
PID 2316 wrote to memory of 1352	2316	chrome.exe	125
PID 2316 wrote to memory of 1352	2316	chrome.exe	125

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe5910c728,0x7ffe5910c734,0x7ffe5910c740
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,4043711726305355654,2211855899422593478,262144 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1568,i,13921620786054296587,7786354363551869730,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,12968107301971181492,13922548126606153401,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3096,i,14890976827759725275,6683954499863681699,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3116 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3124,i,6717683871046824417,14724838048096933887,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3948,i,4207284501265014700,17115782471537467680,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4488 /prefetch:2
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4748,i,17681213380804733790,2495669289603984830,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3040,i,11644176797066154252,2996361811422046976,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5012,i,5564475652209682182,16634125009290274770,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5240,i,13018002774837023222,4189365861915840347,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5380,i,17487030090424430320,5544654259179281185,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5608,i,10089837076298991823,8236052075189079903,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5732,i,10589107450375714776,2271378722448178017,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6312,i,8141274411970431583,6833132345204109118,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6332 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4800,i,1266322561702105850,12798648808090908565,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4940,i,9781708888596971000,5881065200800479915,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5640,i,4867882082377116862,7002490844100371365,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5496,i,5353809034600813315,13828119441868731227,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6268,i,6110034732063420549,17560854210542406650,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6292,i,11163625495859602785,10714127730512809861,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6188,i,10800806318431984821,10057665773547418856,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6464 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=4536,i,1932572741446154574,791125310238193850,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6748,i,18363000209039349494,340136503526051493,524288 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6824,i,1376085736571615964,10647309861716851987,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6752 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6740,i,184349280430443674,4992604650128758423,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7112,i,2039320207290117771,6309512435505239615,262144 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=972 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7136,i,14689740655507426823,5900524954391412938,2097152 --field-trial-handle=1980,i,10318387599006536110,5923112531419008912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=972 /prefetch:1
  2⤵
  PID:1352

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5104

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1056

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3040

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 58370c36c29a946e2efb02a22ab07ae7885db8d060622030acaf21f4acd0db6d
MD5 51ec03d972310b16ad517ed5b3cf14aa
SHA1 f51a3c27b039dac90f03165f3b99909d3cff6c60
SHA512 226c65c041b21b7d9930b56042803ca0fe35c1beb3ddc0b132754f147decb8681b41217b43a432e0bbc190ca5200e3c1209939ab773797667805354787fd8888
TLSH
T12BE06165C866EC3B14FD0B28A1505785D754135B2A40D95F7F3DD10C8FB17374585D1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000034

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
Size 24KB
SHA256 8e783413cfb2386ad1337dd491877d0b45968171389d00cd0c3d3b3f7a1926cf
MD5 aa2702be668045b42170cb0c54173c59
SHA1 a73da67443fa59addc0c06fe7ce0aca9678ea6ee
SHA512 1bad1c8323d13ab7f03d2bc27ed5497993d839bab69c83e80a64fbb4729210626cf103dc04b34c8b86b0836cac1ddc4954c369e8578d5f5fc6b6f62da7d58766
SSDEEP 768:ew+scohlJnkjMtYyqjSpMdkJN9Z0JUggtABtzpf:ew2ylJnkj7fu9XABBB
TLSH
T191B20A223177E2301EA90EDEBB961095FB35729C436481B03D5C035D63B1F66E2BDAE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000035

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035
Size 33KB
SHA256 f38dab0bf2077352f78f20bc9defb245c38b099ada6752aaa95a8a563fa1bcb1
MD5 9def80703b47065aabb7cedb65cdba6f
SHA1 e40db02a5025ece0435f29b24fc897f195cf7a7d
SHA512 8f49c8faf84911300954d82833566243389b4e49ec84549e93c21997fbca9f02644d29d56ffb7122521fe7fbebd3ff61bd122b6b8ce6ebcfe51e28a38b2dc845
SSDEEP 768:VsCEsDcCncEm79+apC494eTO3TUmxTnwA6+Ua5iWbqAPKabcdAPnbcAcNuZgftNH:WCEsDxncEi9+apC4CeTO3TUgTnera5TU
TLSH
T167F286256023E53B05A70FEB27EA0089FAA175896520A1507E1CCE0F738BF75F1E5EB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 677KB
SHA256 82b321d80d01dd15060b3d604348ea357f4285a5d0dfdca6b63c72aaf053731b
MD5 85d2a6885a037664e0896537f78d8023
SHA1 74d06ed90c149db64070546011a1fcd026b55186
SHA512 59c140438133498ed74de8902410d1238cc3f65318096609d9703806ee741fc1d7cdf8881575a2a668a7a9f26e2ad3499d7f964db4b9f8e9dd6edbf9ad3636c3
SSDEEP 12288:ISYp2q4dX27tJPcxsD/PhG9DlhjmKa1u8fWMI:IR7tJPcxsbPhG9DlhjmKa1u8fRI
TLSH
T197E4A35B226785338B5F2EFB5BE90044BE38718C626081607B4CC2593BE5F65F1E2EB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 968a03cf93311a5b2b2cbe024a3277e85f2a05dac159348ffc8d0ceb0a8b900e
MD5 7281e8189879a70b157d81a1a0aaa88c
SHA1 48788e50955178364cc547a01cc50a240010879e
SHA512 1b97dd2c18a527767d218730be43f93b9b2a2ef4885abdd0773dfa7abb48b03bce9ac0d20d468bb1ee60ee98cd6461d4898e15b9b030db4546e0c5e4475b31c8
TLSH
T1C3512F38D093DFBEDF940D3781E2A92D79329D6491CF1FCAC09D3AB45106B680E01627
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b1344806ac56722e8b67e5d2d1204de6a91f83a5574abf09b6ade803638ccef6
MD5 429d073010a38512922b2e3ae2d9b350
SHA1 bf95914c778af5a2dac7becf065625f889a2759c
SHA512 6d953affb465686ea9bb7ad3e734d1c37aa6671d3d911d067609c64b43ac556b148d02c3ceba0e1b186f4f85dafcde256c3b673067e40576965466abae36306b
TLSH
T1ED51FD38D093DFBEDF90093381E2A96DB932996481DF5FCAC09D3AB45106BA44E41627
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 9d88727f4c9f622b1ac08faa4dbc0ee31772de2fb3da9a5b23fe9182a14ee08d
MD5 f0f20f9101c50430b688011092cc09ed
SHA1 615352f1511ee105edeeea702da15b1e434c61d2
SHA512 5928db787601b10071f0536ee2ac30d254e5e56f5dd907eb33003f9105d371146e5e65ed77ea719091f1db140256a42f13c527b04ad63b4d71fcb564e0619348
SSDEEP 192:DfWVrTaT8GMlpgaIxNhYD/kmLhWav4JRYloYNPx1SaPcfPrbIXImI2dHcB9i:DfWVrTaT8GMlpgaIxNhYD/kmLhWav4Jm
TLSH
T157228DF7C3E8C62DD91156F4DB157E2FCE2A0A24432C3C66C9D4AE4BA3E2472D25464E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 81dd6100d732cb042242d3e4523605f1d23381fd96d32a1d2f52076bc283e1ac
MD5 aa7ae4ebdf7b5d8b466708216c010352
SHA1 be09609180df68d670584bd921ea40d40a0ab6b7
SHA512 66882bc3bb70e5ebd7bc809b113f15f7ab579d85c85f19ab32e8e714fcc2114fce90399613f19172b781a4d9f7e3d8624e398e6f50b8c6840c37140882d71687
TLSH
T1174146F3C7EC896D890196F8AA192E1FCE790E14536C3C5788E4AE1B53E2871D25158E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4c9b4ee32c083b2992f7395d0d2acaeec284e1b16290ca3ea98279def1a3bf23
MD5 efd296045f6a1caaeead48a82013012b
SHA1 fa450cae0222c69932c4532648f7ba5172e585bb
SHA512 a1d1bc4b531f95662219747d74bb454ab636eda2feebc5b1f0a03af7b532ea0f0b79de9873cd58a6ca19d8db041631f2869822dac1a4c9f40487c295f51669b3
TLSH
T12A4146F3C7EC896D890196F8AB192E1FCE790E14536C3C5788E4AE1B53E2871D25158E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 6df4c55850d06f50a40429a6fbb9c8edc054dc1a8f86f91d87a3e390fc020b90
MD5 d1c96e7d0462db2b5876bcc85e399f9b
SHA1 bc5208e4f8260b2789336ed5cf7a2934b9b320ef
SHA512 8b41daf1944f0b9d2297b304c34fe64919c66f7d76fcda573e6fc94beb537403c443e2085e6db185b5bf635144e824e4792bb03ca7d562b12e9496dd834d4bb5
SSDEEP 192:PRucBzhG5Myoo5K/Hv7apQPRpidHE7kzYxY9+Hsb+WN5sGsKXCRc/4kZUcj2Xk5p:PRumzhYMyb5aPGMXs8wX8Cn2U5DaHhE
TLSH
T18162D62AEA546E7B9DDAD229FD61B72BD3F2202124D01E90EBFCCA2C15D76CC2117113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 dd6ec5c5da160904b7da2ef6cb13172ff07a9e044942418469c48422b4429b7b
MD5 8317538ca8560655491b06a0bd7c696d
SHA1 497076de9bc4187dd3457468911d5d62af91441b
SHA512 53e7fa4d30af37a13c1b0777e3504ca4c71a35408498e712c9563b28375c55a15124f9573567f91bcb3650be791468ef83bd7fd79f204191c6cd028df8bad575
SSDEEP 192:PRucBzRG5Myoo5K/Hv7apQPRpidHE7kzPxY9+Hsb+WN5sGsKX1iM4kZUcj2Yk5b9:PRumzRYMyb5aPGMXb8wXImn2B5DaHhE
TLSH
T11E62D62AEA542E7B9DDAD229F961B72BD3F6202164D01E90EBFCCA2C15D77CC2117113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a472459f1bcbae723172a717a8b1f949607bea9efe28efe9da2c8f56e32f749e
MD5 6386d55b11c02bf054e565afceeb5030
SHA1 07ef85d6cd9b973ccb5d98f40ffebacbe7d19c7a
SHA512 8c6c071640e023740a8d4b47b45ef396fe3a9cee5da1e1ca7af38d3eb081a75b0c405af81c4d6711bf2d0646a2f750f5896eea22135ae7bfe8e4a354cad788b1
SSDEEP 192:PRucBzRG5Myoo5KDHv7apAPRp2dHE7kFxY9+Hsb+WNwGsK44kZUcj24k5b/a5w0h:PRumzRYMyb5GPGUXT8wJqn2h5Dabee
TLSH
T13A52D52AEA54697B5DDBC229FE61B32BD7F6102124D02E94EAFCCA2C15D76CC3127017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 1fd653f04e842dbad7c4db912853600b6cd3384ce96ff5ca57d5c8b6f0d9ab46
MD5 14cd944afb9a7b68ddafd5237893c617
SHA1 64b21ad33724793afdc0aa41b4c6b707a108cd15
SHA512 f699910c632d7e811d9351471a3e85c8f56a0d5a9308028782552aa4a7aa78876579ec71e99b36714adf3590a7fa1765d35b7fff29d644c1054cc2933b12c37a
SSDEEP 192:PRucBzK8SpG5Myoo5K/Hv7apQPRpidHE7kzYxY9+Hsb+WN5sGsKXjoe4kZUcj2CG:PRumzKzYMyb5aPGMXs8wXcwn2L5DaHhE
TLSH
T17A72D72AA5186A779DDBD229FA61BB37D3F6102225D01D94EBFCCA2C04E76DC7213113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 52ae93a36c9bb1f926a85a7442f90bd2369d92646a94ba274683a08fd1e415a8
MD5 dec67e590cbbe56a5046890a633c7e4a
SHA1 f7727ea6076adfa163250e00cbbe3fd7a774c7ff
SHA512 ae65dab418aaaed83a04f5feafac4974f9d41e7700bd619003de179cb80a0b7efba762fb809f943fc0527c45fba0e6080d82bad632af09468dd1ed24e9682e06
SSDEEP 192:PRWRG5Myoo5KdVv7apAPRp2dHOk7Y9+Hsb+WNwGsKicj2Yk5b/a5w0xGVyIsnAUp:PRWRYMyb5qlGUX78wJx2B5Dabee
TLSH
T13D52C62AEA54697B9DDBC229FE61B727D7F6102120D02E94EAFCCA2C15D76CC2127017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0085b9e4-5396-423f-9fd1-37ef38607af4\index-dir\the-real-index
Size 2KB
SHA256 d80dd0c3f0b5f54637ee0b656d1ba1622912db9dd4d8af4a48d5735e629dfafb
MD5 45506b09fe82741adc406818207dbf2e
SHA1 ec34d4fc0139f08cbf6197cb91f3553e2306e91a
SHA512 1fb430b1fa2e256152a7c1d15c1799473bbe9996a12cc0075603d99e25d4ef3c113e9a543cf98a163bdbea918035acf72ef0291dd4ab79a415e3ac2eab28584c
TLSH
T14741744CCC90ABADECB451BA299415F647752D39FC58C25241A4B2B13403AA41B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587589.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0085b9e4-5396-423f-9fd1-37ef38607af4\index-dir\the-real-index~RFe587589.TMP
Size 48B
SHA256 5b96b6e8464b4571a6e5d7c0565d522166aef26fa341db9072632c87006e4ce7
MD5 5e31101aa83a733d2127525c8eb9bd36
SHA1 d521f0ede30a606dd29223401832fd0954a24c3b
SHA512 72dbdd168508cba447ee507492ab800201ca82b4cb0bea65958ac728b7f4ffa839d8645ae8ca16929134a31b0421c4dafa5526a1de20709e236cf234e963cab1
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 6a6b434ec31fa950b1e16c044af44adcc709699044b572614a17683302867995
MD5 6b04f7ee981aaf2d61b789a6689eb3ad
SHA1 f22e5a1e213d56403c2213633afc0d36b5ef4810
SHA512 f04891dbed4d593cc942fa313a631585e62eb2c36698084b4dd36a34ccb5d428ebd0299d0b860b9fd661ef51abccb2125ce71cf518897f85aea88090aec54abd
TLSH
T1BBD0A9C7857188571A39AA862828114DA26ADA458C88CCA48414B64A34B8922C0429BA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 cc14bfefdaa8337d14a7712187e7bd8d642f9069e2dedec52ef7d2c404e7ceaf
MD5 c8c107d820489c6e9a13bd402f46fc50
SHA1 f758706077fdfde7d373849fe9679cc821ec0c6b
SHA512 29a0c5fea010a70549f22b248384ae34bf947d227a6ca5c3bc12a703f04fa8ecb6ae8e44ebe78d80f19e3cb9e82055ed5f3c69e0163b4cc2a9ddee86778c1ece
TLSH
T15BC04CD7482085970678AB893868661DD31B824888D8CCA45414550A22689228401529
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 d9a75d61cfebe2d30fa72c98e6231a5e8ffaa8c43d8208cf2e43290cad28c90b
MD5 e1ec82063285ccef3c38038354cf0a1d
SHA1 e50d392c46a739d677709cf5c98219a8a8b3194c
SHA512 afaf07688cc8d8a0c15ca34184e2304e9d659d4185b2d2b69e5133f32d2d38ce9aa2c8da4b263656d426c989a353eb43cebf591b4002df34918bd495817da42b
TLSH
T10AC09BD74460C55B067CAFC62878631DD31BC3488CD4CCF45014554A307CD238402579
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58650e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58650e.TMP
Size 137B
SHA256 fcac389d9e4ed887ca9e562736ee2cfe11071fa9bce36ac2973cad04c46e6383
MD5 3eb44513f582306eb118382c29222781
SHA1 ccb6b0edcf3e6f081efc1cb0678f7f149991b1c9
SHA512 2beaf6ce678bc3ad505792af86a5750f400c5583f3ce90b6f717e41fc3e6815bcf8c80324a3bb62782f7fabd7462e965fc044b230fb1a3fd35992794dc8440d7
TLSH
T1B5C09BD70530856B07786BC63878635DD35BCE498CC4CCF45119740A307CD23C405539
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2293c3695dbcf67876b6632f16d28be54df1e55e8d5319e277c3a38e23d3ca66
MD5 7b1d0ec6cbe42f85c8bb6db8a1de7f0e
SHA1 3ce6b912974bed153a2c6a15b7fe9db387feed2e
SHA512 e88aacb654b5a43c5e5a61da61bc0bf583d104f26e199690933e91e4853cf8cfe0ca0361f569bd34598836d8a32e7626bddf95737788dfa2be1b5bae91b713ef
TLSH
T131B0124080415311C04202B01176148C71145F10B70E170283E4B922C8252659518050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c38a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c38a.TMP
Size 96B
SHA256 1c8486bfe9c42dfb2ff29395b3dd90de72e4343012334849be16609baa9de796
MD5 3ae05085f1365c65332573cb0e7be9aa
SHA1 14fb7b8b2c8b5facedbff4afdcaba8baaf229db2
SHA512 6f846a014f6094a9885c0cc103c685b4fbfc004c454ad86f4e5286f450499e10e9bea91b6ceff649cdaa1fbe1b934f5494b445b211288678e9fa432cd5ad2172
TLSH
T154B02200C0022222C2C303B02A8082CC3020EF20C2032202C2E02AB2CC223380822220
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 c400c050ad6f977bac609d0322df80ac9e6ca4b8b4f49e5ba95156517f804471
MD5 765f74512cfcc1c18de7e1776a92e8c4
SHA1 95b73cf7041be2b2358a143a8eac68b0195a5287
SHA512 29fcc3a90d953e4aa64ecd73de42be385f82074633694745a9b41f383d57f9cd0e799f348107ec43bd10207125f251fd8bb7a82c6ca47d6d325233d7ce86f779
TLSH
T13FB0222002A00A33ECA8CBB023C008A033BC8CB02B8AC003C0FC0830C88E282A330B80
MD5 SHA1 SHA512 TLSH

Submit Download

32.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\32.png
Size 1KB
SHA256 bf77e0c65df7ce83532308d1acbf333098e1f4089672b67a9514a56144b1f1d8
MD5 ec856287ecbd2b1742659ffb05190088
SHA1 9c1ddd95b78d8ab154c85c57b5f89e7d7c39c7d5
SHA512 791f2f64ae67bb5798b249f55a966769c2cfccc21388cc17f6a41254649fc7f4c7c61a23fa3ad4920f2fef3e2acffd0ced7f1bb407736a0f1f2cf9c18bef8b4a
TLSH
T1641160C3EAC399B0E9FA232F6BB101B42402E429A7540908D878EC359A24A19A2DC2D1
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2316_211510623\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2316_211510623\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2316_211510623\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2316_269920915\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7de225592ca715106d2ddec64721054c6b8c2bc21fd199ade97e6822ddf78e82
MD5 bbdeebb412e5a1d1d5dad38b106a00c8
SHA1 e77d823d60868be09d63ddc538e987c5ac89cf5f
SHA512 e0111e46767d0e7a5717dd421748c6bc9a469fff36302d710192605b14015eb50ebfd29e3046c3ba89be1588237742ff4d6e9999650e3bee5a797b0435d0b21a
SSDEEP 1536:ARdyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:cDqfd7NtZL8cHQRZEQ6Sps3
TLSH
T145C30237EBC61F339E83CB64B5130FD797B644A99034D301AAAD3BEB688359564424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1d2578ee2ed7b30d37b88355009469f5b0aa2a7750d82b7544945d1abe4abe67
MD5 9a5ecf841d192c91e784e8ac9fe98b56
SHA1 64c4210c3e21c0b196c0c36e05c11e6ad013012b
SHA512 ab4fad1e52cc87cda9191b202e606f12bc5292ef69ba6653e2e1306023fe6230b93b6441d873ac901a5be2e87e3a1bcc4e5c4d925ec8a2e077e60c62f032eb8a
SSDEEP 1536:AL41yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:+47qfd7NtZL8cHQRZEQ6Sps3
TLSH
T166C30237EBC21E339DD2DF60B5130E9693F644AA9034D301EE6D3BBB6883591A44289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7149b50f47760288467d20f9ad9855b0275e476c22bbf19f23c276a72e9789f0
MD5 902bde03c86334f5437fed31aa07ab71
SHA1 0be832bf0220c2563157a8147ef4d2705546c923
SHA512 1345643f2a02bbe61b1b5e2158c3e9f7a5fbc0b452f47ba2a9a3952081bf0317ddb52c7e37ccbbb7b407bb6aee572da49136cbf608d8e1011a240abb57b8622f
SSDEEP 1536:AO41yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:747qfd7NtZL8cHQRZEQ6Sps3
TLSH
T192C30237EBC21E339DD2DF60B5130E9693F644AA9034D301EE6D3BBB6883591A44289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 8f824b3b38892d83efa94747027be4e70a9adf01c38ac2f31a017e42641d486f
MD5 a0367ff6bdf814b9dfe0da874d602f94
SHA1 18cd0f672df9d7a19cbe0933faace2dc1069a66e
SHA512 8969cb9b9515b86ca70b1099bc54ab0dcbe2aa5249323dad5bc64a661685fa272ee9556ffe56b99a26284ff72f956a17e697e0af273beda9292432e9cf390fe5
SSDEEP 1536:AZ41yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:647qfd7NtZL8cHQRZEQ6Sps3
TLSH
T1F7C30237EBC21E339DD3DF64B5130E9693F644A99034D301EEAD3BBB6883595A44289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 107b94261e2ccff5e2fa7e7b79b38d43ef87fc7b122a437f1c21efde7b2f53e3
MD5 3fc193c018131d2afb8f633166d4e557
SHA1 95d5c3658ee4dd5fb570602da1710df33b1cb2ac
SHA512 327b75f99d44b6bd417863efd0c5e459dac3fecb8acc6588980a87d3e4e2bfd973a1dd2c5f539bfd11b25af903b08ae39b10eca51f74c89d5b6d74ffdd5d2982
SSDEEP 1536:byLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:mqfd7NtZL8cHQRZEQ6Sps3
TLSH
T135C30237EBC21F379D92CF64B9130FD6A7B644A99030D301AAAD37EB7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a53bf4d60a7f71744dad4886a4cd9675f2401504d960da5b09fc87c98381d14e
MD5 f944a484cd6d9d17920cb228f460f69b
SHA1 3cbb124a6da74705e61793417eeb3e119ad92ea6
SHA512 7b9b931e772d4bf3a2cd0702dbcdac1f815f6d9860a8174904502890eea6569ba79ac223e4e6d43c6f7950253e75b9c71db5f2267bb8085a831edd29137e15bb
SSDEEP 1536:dRdyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:rDqfd7NtZL8cHQRZEQ6Sps3
TLSH
T156C30237EBC61F339E83CB64B5130FD797B644A99034D301EAAD3BEB688359164424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 ba1b31696c6121d2b441f574aee923d55800edcdb4b573475dacc6d21bf67f0e
MD5 c9efa5c08eb193dff2c6b60e82c0e63a
SHA1 a4462b533ed11d85da1882a6cb4d9192a302dcff
SHA512 2fda4013867c5640f1a53691a76f5341c7d7330bc485826081e8a74e005a317653ec04f1ccfaf88d2e2b802b10de095fa49273bb2b8678450d61710e15737a38
SSDEEP 1536:AZ41yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:+47qfd7NtZL8cHQRZEQ6Sps3
TLSH
T16EC30237EBC21E339DD3DF64B5130E9693F644A99034D301EEAD3BBB6883595A44289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download