hxxps://www[.]youtube[.]com/

Resubmissions

04/08/2026, 11:13

260804-nbes2sdl8w3

04/08/2026, 11:09

260804-m9bcvaycpb3

Analysis

max time kernel
900s
max time network
886s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 11:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.youtube.com/
Sample260804-m9bcvaycpb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1572	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303154044519272"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{A31E8AAD-2237-4F45-898E-2B097AA7849E}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 7 IoCs

pid	Process
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
4200	chrome.exe
4200	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe
Token: SeShutdownPrivilege	5936	chrome.exe
Token: SeCreatePagefilePrivilege	5936	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe
5936	chrome.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 5936 wrote to memory of 5604	5936	chrome.exe	88
PID 5936 wrote to memory of 5944	5936	chrome.exe	90
PID 5936 wrote to memory of 5944	5936	chrome.exe	90
PID 5936 wrote to memory of 1572	5936	chrome.exe	91
PID 5936 wrote to memory of 3220	5936	chrome.exe	92
PID 5936 wrote to memory of 3220	5936	chrome.exe	92
PID 5936 wrote to memory of 2972	5936	chrome.exe	94
PID 5936 wrote to memory of 2972	5936	chrome.exe	94
PID 5936 wrote to memory of 1548	5936	chrome.exe	95
PID 5936 wrote to memory of 1548	5936	chrome.exe	95
PID 5936 wrote to memory of 816	5936	chrome.exe	96
PID 5936 wrote to memory of 816	5936	chrome.exe	96
PID 5936 wrote to memory of 4972	5936	chrome.exe	97
PID 5936 wrote to memory of 4972	5936	chrome.exe	97
PID 5936 wrote to memory of 4764	5936	chrome.exe	98
PID 5936 wrote to memory of 4764	5936	chrome.exe	98
PID 5936 wrote to memory of 2964	5936	chrome.exe	99
PID 5936 wrote to memory of 2964	5936	chrome.exe	99
PID 5936 wrote to memory of 5204	5936	chrome.exe	100
PID 5936 wrote to memory of 3264	5936	chrome.exe	101
PID 5936 wrote to memory of 3884	5936	chrome.exe	104
PID 5936 wrote to memory of 3884	5936	chrome.exe	104
PID 5936 wrote to memory of 1676	5936	chrome.exe	103
PID 5936 wrote to memory of 1676	5936	chrome.exe	103
PID 5936 wrote to memory of 1516	5936	chrome.exe	106
PID 5936 wrote to memory of 1516	5936	chrome.exe	106
PID 5936 wrote to memory of 5748	5936	chrome.exe	108
PID 5936 wrote to memory of 5748	5936	chrome.exe	108
PID 5936 wrote to memory of 2928	5936	chrome.exe	109
PID 5936 wrote to memory of 2928	5936	chrome.exe	109
PID 5936 wrote to memory of 1688	5936	chrome.exe	110
PID 5936 wrote to memory of 1688	5936	chrome.exe	110
PID 5936 wrote to memory of 2672	5936	chrome.exe	111
PID 5936 wrote to memory of 2672	5936	chrome.exe	111
PID 5936 wrote to memory of 1912	5936	chrome.exe	112
PID 5936 wrote to memory of 1912	5936	chrome.exe	112
PID 5936 wrote to memory of 5384	5936	chrome.exe	114
PID 5936 wrote to memory of 2760	5936	chrome.exe	115
PID 5936 wrote to memory of 2768	5936	chrome.exe	116
PID 5936 wrote to memory of 4200	5936	chrome.exe	117
PID 5936 wrote to memory of 4168	5936	chrome.exe	118
PID 5936 wrote to memory of 4168	5936	chrome.exe	118

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.youtube.com/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ff8f3fcc728,0x7ff8f3fcc734,0x7ff8f3fcc740
  2⤵
  PID:5604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1612,i,8259141389847552580,16607472328609087419,262144 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:5944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1480,i,8316607539720760341,3579743697523766246,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2332,i,6657894038151429328,3585609091754003461,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:13
  2⤵
  PID:3220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,11882481284737870968,14732505118647610731,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3232,i,15033986917321766412,8928279117782249513,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4668,i,1495575009890622173,6764084834755671412,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3232,i,7624956789313914880,3653596467491496117,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4972,i,11644075512275384131,7094880053771111613,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:12
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3288,i,7943598926522739591,16305471627755328206,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=3944 /prefetch:14
  2⤵
  PID:2964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5328,i,17677182403566945083,16566478227834072067,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  - Modifies registry class
  PID:5204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6012,i,8769671047594406639,10444085925685130473,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:3264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6148,i,5560998904592975414,14908713188003547646,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6104,i,3025816192440470063,9586966474916501818,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6124,i,16369166602473415845,17817411754905382394,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5296,i,13063243312303249775,13391033056068253895,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6340,i,12350965399701190486,12300687103752019686,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5184,i,13552039740918629330,4890621809444469251,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3448,i,3889670697742354704,7169305740087046883,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3460,i,6344692101821194135,13469601988940649431,2097152 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5664,i,7751934066931526640,16500572718087404977,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
  2⤵
  PID:5384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6092,i,16366137138968653888,14529055441541911411,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:14
  2⤵
  PID:2760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3432,i,18361174521185067056,17700161027793850132,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:14
  2⤵
  PID:2768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5436,i,14052916240382679876,9510218534439580218,262144 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4536,i,7978696084159750107,8083466722828860028,524288 --field-trial-handle=1928,i,11173792923791837713,8035639732219059503,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:14
  2⤵
  PID:4168

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5048

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:4656

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2684

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 528B
SHA256 decc47b3279a4815fc659cdfc85acbe98b04ef8890f7e31d2d8095756e9fb70e
MD5 c2f07d8ed27f1e31414d96c7208a0fb5
SHA1 c0cf4280d600510da310e68c44f38575e9038cc1
SHA512 e02d55d0c98d298932a340c93851b6ce03f1dfe2ae2bde4f601d77d58d8ab6060e36b65349d59cfdd488520f865a156e6c717c164bf8575fc4ec9fe0ff727b20
TLSH
T198F0229390C4E948CF21D37431994F63EA170064073B7313134497F66CDF1F18691657
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 504B
SHA256 1b547f507dd917d4b42e3ba7db16a3a8c23e98d426025f8cfad288333e47598c
MD5 de24d9ac1483802251bfb3bc96d6b323
SHA1 d5a09a7e5948411bc844a784eeb4e80344a55968
SHA512 ed2734ca16350d25f863d56f39cd053ad4cfdb7c63a26157801a4e373a753341557ef05a4ffb7e63a42ed0e1d0ad5480d04b5f394bd1dcaf949556590aef9307
TLSH
T153F0DFD745C8E984DF55D27832E84F43F8370088076B7AA35744A7B92CEB3F18655653
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 362KB
SHA256 8ceaea46b790c05e5b04a08c061f41c4972de8a9461a66343c2631afa123cec4
MD5 762b6d1123f0c3c3718f2a9164536e6c
SHA1 fc2e2591a7f8dbcf24e183714234a95570656e8e
SHA512 67396ac4ddffbac114ebaa66e829cd183490a51fc1dd0bb0b128c36ad3348d0cc4b008885b024a38d2fcf5f3cc5036be96e8f3d019a887a553684ee9bf88a4ab
SSDEEP 3072:7NPAYGu5yDiGevDMFPku2lp2OGnfkuEbWnjitw585hixapKmIxh6rXc:kDpFxiKFxP
TLSH
T16A84F8346286A1E8A22A833B175B5C46CF355BC79B583066BCB2BD0C05F7B543F9473A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 349B
SHA256 3c8820b0fce24f7dc079f5c607a8d37b2ab08c39ec5a1efe86d7415eefb4897a
MD5 e5a58e4e25d0638e2ad9ab505f77c274
SHA1 2447c3b18f1c8c4dea5de17860a5ff8b62f5bca8
SHA512 722293865a9ec13d8b9086f3cc857dc55d6a8bb452e3b5e978a0f332089f075e8c80cf0cae6034d64ebc2d35812c22582d3ef19c9f88752685ab390750553361
TLSH
T191E0DF2C99C9C6AF21A880AB6530770E9EE6660CDACDECCA0F46F81070C980C94AC674
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

76a4fbb3-e5c7-4fe8-961a-fbcb509b2685.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\76a4fbb3-e5c7-4fe8-961a-fbcb509b2685.tmp
Size 5KB
SHA256 2b5cc3d4440bfca8336d54f94a04852004c02d15a919f8688d4a3e4c5bf4154e
MD5 ee437747ab36d3c7704bd2c086e12e6b
SHA1 1d9830681c64a9226643e6dfb3cec632eb110009
SHA512 eb36e39ca4e5a1fa52a65c2e0e313e737898da28e8e6a54065668108cf4384db95e2cf0f8040ecff953c39c8772e59142274263f82bec39233bd4daeb3f729cb
SSDEEP 96:DuxVufuRuX9ufD0gJ5dcuQuTuLugoubuPu9uP/uouaK:DIIyc9kD0gJ5dcla0k8wecl/K
TLSH
T13FB176F7C7D8863DD81156F4EB243E2BCE290E2883283C66D9D5BE0B63E5571D240A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 f21d84701a67c28abdc98009a1f652a58c3c0967d622203d7da9364e502eab75
MD5 3349790d1d8ed6068e7c8a010e38500b
SHA1 ffda2bd3224a81a2e72ffc21621107ac644f42a1
SHA512 a7a7ba1ec815b51701dec59a3216ef50d019125743e07416b212f2ffa58612000433cd7ba934e2599819316a8f1b742abf6ec3a1c4024e356224fa55aae9b30b
SSDEEP 96:DuZuQuUmuluRujxD0gJ5dcu+uTuLugOuHuPudu8uWnuPp:Dy3Hm+KKD0gJ5dcva06cwmFzno
TLSH
T179A157F7C3E4863DD81156F4EA187E2BDE690E2443283C76C9D5BE0B93E5572E240A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 a79875e7c4e7896ded3ef5f38f63a41da7d907b0987ba162b2a0c6d29a278b79
MD5 60543f882659af4673f222a5012acd27
SHA1 dca4c8729fda0eb3755d0dd6000fa1b4702fa27f
SHA512 7c4f9c6a9778ce7c3b5aed4cbac2f34e6acaabb186b76fb0eceb13adc35b8c30d151bce4db0783fffa9d524bfe9167e00a3d2a50fb4835377c8bd84d31f3fd81
SSDEEP 96:DuxVufuRuXJD0gJ5d11u/uQuTuLugou+uPeuPuTK:DIIycJD0gJ5dbula0kFdwoK
TLSH
T107A188F7C7D8863DD81156F4EB247E2BCE290E2883283C66C8D5BE0B53E5571D240A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 80ca6050c58af45abd1af5783b51858a6b64918d51797031c37145cfe682d04f
MD5 cbece73c7bd13679dd0e8b910fd2c018
SHA1 8a400b5042dfd886f992dcab9779dbaef6390b29
SHA512 df794a4b6d2d28c9b2c970f3d7cbe87281d431859944371079bc63704a6d07f73890aa4e4d1f21cc0b33cf5e3f17f485ddb7af849155387b5c7a1713f0ee5db2
SSDEEP 96:DuMVuZuQuUmulu1D0gJ5dcu+uTuLugOuHuPudIuEuPOuZ:DFy3Hm+CD0gJ5dcva06cwmI1pu
TLSH
T16AA168F7C3E4863DD81156F4EA187E2BDE690E2483283C76C9D5BE0B93E5572D240A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 c659e94a9833c713b5a1fdd436b651adf442d7281453b3e08ff78ecedd6c7f5a
MD5 ff2080c9671b35ddc3338bc09be8d5a3
SHA1 b39b603ef70154901762e1d613a1f5b0e7b102f7
SHA512 56f0bcf085c82815641e44e420be08e0360b5f2ae5015cc0b3f6f75f66f07367cc2c4faa9c641d540499402ac0cb36e141aa5f465ccee278cddc95b9cbaf8dfa
SSDEEP 96:DuxVufuRuX9uzu1D0gJ5dcuQuTuLugoubuPu9uPpIu9uZ:DIIyc90CD0gJ5dcla0k8weaIIu
TLSH
T149C188F7C7D8863DD81156F4EB243E2BCE290E2883283C66D9D5BE0B53E5571D244A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 778ca8f45389ba4c4c8b78c3c006ebb49d2ef028327cf1bcdd5f50747a52d19f
MD5 302ffb726fc8c8f5ebf455500b9353ef
SHA1 7ec75e63e138b9f2ef42e5b0cc3a4bbf3c74507a
SHA512 9de21b9d73fe3ec2353ef176bee9f7b6a6de62cff8bf20ca5f6b316908c5a644bfd9a903bb990e9a7782dab91d570c9e06ab5194ee520f243b5e387bc2c4bc38
SSDEEP 96:DuMVuZuQuUmulu1D0gJ5dcu+uTuLugOuHuPuWuEuPOuWK:DFy3Hm+CD0gJ5dcva06cwN1pzK
TLSH
T142A168F7C3E4863DD81156F4EA187E2BDE690E2483283C76C9D5BE0B93E5572D240A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 fbe36c1b9665fa9fcf51028b338db041281451938a689163d5fe889b71a083aa
MD5 730b1262ae94e7653279ba8b40c58470
SHA1 c6624fe680bf6ff2dc0db42abbeac24a33393dfc
SHA512 e8b74937a464e61a77734bd27f2384a8768c41d3499ff7652f64acb34a12444e63be8900be3f5676c2109878223c54ec716857e3ae98a29424e5248a955ca471
TLSH
T10B119EBB977FB52B107D98BB0D05BA156976A432469028F0EF9781BDB0C65F70B02817
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 4cc2aaa4b4c58950f4347b09c6a21eadf8643e94cb3e5c2dc8ba7afb61e0a3be
MD5 988ee62386dfd5cd35f8963a58077ded
SHA1 fe1137a5a3cf9eb00207d244c02e4eaf5c4d5bc6
SHA512 e5484fe8facae58f090f00aa446f55cacacd6f0139ae4d01bd048a5b9027660826734bef49f20af8417a0fc90822eafb4709af2ea6185904c5d6a9111466f7a8
SSDEEP 192:dRIBb4smiv7NvAPRp2DooH964Hsb+WNnvlhqn2eO2g4kwDI+VyIsnAUgR:dRI58uh6XgbwtS2h2RjI2R
TLSH
T11632A43EA964297B6DCED329F9217B57E7F6102261D02E94E7FC992C10E76CC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c58eeec1370366bafa29ac19099eee354051cd05fac9b85e904d3d385449c2c5
MD5 8f092220d96c477f1a7e2e7ac39247f4
SHA1 eadd65168c19dc7feb7558b2e7b70dd530e8a833
SHA512 287560f773ac2a1779e688c9a3a7988b9f7007c6b5b250da0ed763a90a4fafb323601e8d3495407a477cb9c997f3d4c88b62bb2640190d8b0211d2281969f0a0
SSDEEP 192:dRIBb4smiv7NvcPRpVDooH964Hsb+WNnvlhqn2XO2g4kwDI+VyIsnAUgE:dRI58uhGXXbwtS2+2RjI2E
TLSH
T17D42B53EA960697B6DCED329F9217B57E7F6102261902E94E7FC992C10E76CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 390b2d3da343041b4bb8f377de5389830979e5acb4b3a32e271d3fc5ca5a1343
MD5 f1d1ecef56c7515367970c4fb9982059
SHA1 f06f19e7b260ec45dd7c1a7473c6305622fd3c3a
SHA512 a5481cc24a9c749706ccf1c802022ff66c5e4d682f43b0c45ac900e833baffe27ddc9adb95fce5e8f155b66a2304931e49547d326b46f4ed7e1b489b5b41a529
SSDEEP 192:esz4K6mQ7KxkXqK4I40pUZNCgVLHrKHfFKslEZESXzKD/pQ+ErUkKN93jCxBRq2q:lzjxQ7KxkXqKf/pUZNCgVLH2HfgslzS4
TLSH
T13232E827A48E9A3F0FD8D51CD8136F4BADF5425262280D2496FBAD0803E97CA115A5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\92c85979-b462-45e2-8a21-de3e327d3d10\index-dir\the-real-index
Size 2KB
SHA256 77b16a6f336822cb5501b91204b1696eab6d415968489318070574e46edb99dc
MD5 6f893eccb6935b6fb1a91c0aec530cc4
SHA1 f543633365db6365ba07479524eaf5a9cb0ce757
SHA512 2faf9b65a5292cfcd046033ec92a91d34fc413b8015cbfd2c00ebebbcaa1ff890922b9d5ae204dcf861e33e20d73e07f4499e03f6aa87c904217a3704c5d68c7
TLSH
T12241868CCC80ABADEC7551BE2DD815F657752C28FC58C2624594B1B13403AB41B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591a83.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\92c85979-b462-45e2-8a21-de3e327d3d10\index-dir\the-real-index~RFe591a83.TMP
Size 48B
SHA256 628d514815dcd4ac509556fdccd8207316af58626de1b33df70db6ea93840f2b
MD5 8114439551bece3f6036a2bde21e13c2
SHA1 42996a413d96a7d6602993197c096bfcc03f8bef
SHA512 40c077f0a5aad46c18a594a67d72b9403da099370250ee132ba3dcb3769b46d21945c41874a83b7825684bd1fce83e1b76bca76a03b6de2f596d4badd810fb26
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 318576f5cf7e682389735538e06ae3d88779689a66e2a015b81c5f2a162936e6
MD5 5faec80d8cc58752207713e6caec0211
SHA1 3ba32cf1dd662c7c978219ee2919bde5326a47ac
SHA512 6ab1e59b4eaad4ed6bda6f78a9ea13118391ce0d82b019be8d2ab0dd562075ab5b2183c27c94cbf38b16f1c5e6072a48b48e0c43105fcb88c5685825f1b9cda9
TLSH
T191D023F550318E560A70DFC5503C150DC51FCD09D88DD8D8E748F0452078503D415669
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 4613c5366d92a41d74e9e45d3fa717ae2d5284df120dad4a9d8a9f3b975c2e09
MD5 d389a21fc4da951877d5a5e7317a4a04
SHA1 9d27f8cc110c8fe97ce1940cd51fd6404d960000
SHA512 3ba27f253c08f89d9c7e0e4d7442d4290b1c83b5bd5538c2b02aaee6fb314a88eaa8aa5cbe64219d7ac02cc201ad164f112a8182f63826dcc90577d5dbce247b
TLSH
T1A0C09BF658158AD74A30EFCC3038671DDA1FC14DC4C5ECF47554B04A2174953844596D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 501187544be0ac4bdb20c7693691da23b1e413523b1d7c76ffb856901345bcf4
MD5 cd4802a3f6d1f00a5a02255b5670a253
SHA1 c74e9cd09bad1b98d771513f880fb0d13ab832cc
SHA512 f0cb98f9f3606b3d18d267fc4cf59cca1b7f63f36d6b7534864a2ff9ba67696c1a2e85171eb0c3ff4d86c63ac587a6b45f523851caa9be5688e9313af16d409f
TLSH
T124C09BF61415CA9B4D34DFC8103C571DDA1FC14D84C1DCF47154B0452034953C44596D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58c33b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58c33b.TMP
Size 137B
SHA256 379e5c0008083293cf0119dbcc0062d622b8643c50afb4d4c11e4aa8c6e20b72
MD5 b2d6efac0f82f811871db662cb72dfa6
SHA1 b4bd40fc06aa42bc98a75d18a6d16178afe5f857
SHA512 584673d60a5883968544b0c57a3cc53929b3372507faded114b94ca2d3b865fa2ffd37b6e808104f300e9590f42fafc2288750e11a81d5600699406e67ca2476
TLSH
T148C09BF614155E974B30DEC55038534DDA2FCD4D88C1DCF47155B0453034953C44992D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5fed88214880461ab0fd90a681b3fde6b04e2ce6a6ea2b1c5d7410542e7fe95f
MD5 28f85c0c5474fbdadfe44f7ab09035b4
SHA1 9e73caa85b90622e119ddfcf3bad28977be8ad98
SHA512 fdd8b5434b1f1ed46e30c5f02442f135daba18338df751dce9c5b22b1d7bbe33eb57b93d7255cf57dde09fe9ad1e8625f329720be596a17dd88f5e5f909ec9ea
TLSH
T1ABB01205804B2901CC8045B02A44644C71017F318100620293F195EA9C830F13128101
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 5bfbd61da99a660937a6f9c8a14285b7165978b23df002af912216599fb6eba4
MD5 d204691d0123bf596bcc4bba69cdca06
SHA1 2b96a53b42bf6c2fdab61f49075d59bdc25e8308
SHA512 5bd4baaebfd0ee308d71616539737b39e5e39711ca9bc3c3df4d5833c3de1cfed125cde664c796d058e940e2646f95546660a05be14f753302f080592c5a2132
SSDEEP 96:gC0d+cAOIt5aDVmufj7jcbRDotok5MCDFDB6/dGyv95Sehbb2Jv4a:gC0LA/TE57cDUDnFdUweSehbKl
TLSH
T1EDA10871B4A85AF75CB9D684F4827E83CF68A157A9226E80D8DD1F0C10E70E81382A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 f07a3750a6d5739f1514ec9ccb002982b968a48b39cdbe14532c3a9ca00e00fa
MD5 14321f6881ef78b3e9bb87eed4a41a82
SHA1 f429f58fb2411bc72dd9e6e4ed21f3babc609da2
SHA512 8f899e87f70ba53f9880af7d6808aca77f422afc51bef6bc866c33644176604da0c9508b526f30e93c33da9f899004d2f6933e825718a7da334d6200686f9cc5
SSDEEP 96:gC0d+cAOIt5aDVmufj76cWfSl8h4otop5MpDFDB6O3Gyv9JtFiO0AuSwetDer0jZ:gC0LA/TE57odiU22FdI+tFGSwetDerUH
TLSH
T121C13A75B86C69B31DFAA654F5427E47CEA4A15BE9616ED08AEE0F1C00D70DC1343A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 e22ba3d09f054d9eaf80ced1cc86c5b3b5db7170730e3b844b38cd211554622a
MD5 ca01a3edafa1a7cda65872a6fa318f8b
SHA1 40909cdd5fbfe7584191b69a21a497779cc9e0f8
SHA512 0150e2175906a7e5ca336db9edb6aebc76326d23f1f15cc20397675df8c69ec6c7ba4ca07d2fe68db1098bea98c013da311069a3038fd36d25e167a0e80a9f8b
SSDEEP 96:CbJ0d+cAOIt5aDVmufj76cWfSl8h4otop5MpDFDB6O3Gyv9JtFiO0AuSwbSDer0d:Ct0LA/TE57odiU22FdI+tFGSwbSDerUH
TLSH
T1DBC13B71B8AD6DB35DFAE654F5427A47CEB4A05BE9616E908AEE0F1C00D70DC1343A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 a8d0c031f8789fed32f221e1538d964ef871be27ae7c0881a074387e0ce3b2cf
MD5 5e7c5d59d2b8c1af84baf0721ad1d61d
SHA1 58ff7a621356f0420944a0ad08e606ba5614aaca
SHA512 c45f7b66fe12a61f0dd1405fc7e83b28bc1563d7a8622cbfde76b93f9fa10322ffad62d63533af56b296cb4ea95ab5ee3ef3d66f1419e4fc965a9ea725e1b1ec
SSDEEP 96:CbJod+cAOIt5aDVmufj76cWfSl8h4otop5MpDFDB6O3Gyv9JZQDeXRNC39ISyVN3:CtoLA/TE57odiU22FdI+ZQDeXuCMJsN
TLSH
T1E1C107B5E46D6DBB4CBAA595F0433D838D68A15BA9143E58ADEE1F1C00D70DC1383927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 b1a3de85be840144c84578c2c170625bacc5adb0af97cd01ea0b11721d0366c4
MD5 a8075226bf787339b120f7589e755573
SHA1 6cce64d5dddfbb1d4e4ea0e3a26c495c31228dda
SHA512 9f470ec0ac78199294540b2be7a8b6ed5e8332e57776500e084304cd73918a2643c867325ef81b467d75263ff3bd9607ad48f5750c418d3cb95e0c8ed224f28d
SSDEEP 96:CbJ0d+cAOIt5aDVmufj76cWfSl8h4otop5MpDFDB6O3Gyv9JZQDeXRNC39ISyVN3:Ct0LA/TE57odiU22FdI+ZQDeXuCMJsN
TLSH
T1AAC108B5E46D6DBB0CFAA591F0033D838D68A15BA9247E54A9EE1F1C00974DC1383923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download