hxxp://youareanidiot[.]org

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/07/2026, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://youareanidiot.org
Sample260723-e5gp3adq5v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4960	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292546868198488"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
4692	chrome.exe
4692	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe
Token: SeShutdownPrivilege	3616	chrome.exe
Token: SeCreatePagefilePrivilege	3616	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe
3616	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 3616 wrote to memory of 5160	3616	chrome.exe	80
PID 3616 wrote to memory of 4960	3616	chrome.exe	81
PID 3616 wrote to memory of 2556	3616	chrome.exe	82
PID 3616 wrote to memory of 2556	3616	chrome.exe	82
PID 3616 wrote to memory of 1108	3616	chrome.exe	84
PID 3616 wrote to memory of 1108	3616	chrome.exe	84
PID 3616 wrote to memory of 768	3616	chrome.exe	85
PID 3616 wrote to memory of 5312	3616	chrome.exe	86
PID 3616 wrote to memory of 768	3616	chrome.exe	85
PID 3616 wrote to memory of 5312	3616	chrome.exe	86
PID 3616 wrote to memory of 1240	3616	chrome.exe	87
PID 3616 wrote to memory of 1240	3616	chrome.exe	87
PID 3616 wrote to memory of 1880	3616	chrome.exe	89
PID 3616 wrote to memory of 1880	3616	chrome.exe	89
PID 3616 wrote to memory of 5712	3616	chrome.exe	90
PID 3616 wrote to memory of 5308	3616	chrome.exe	92
PID 3616 wrote to memory of 5804	3616	chrome.exe	93
PID 3616 wrote to memory of 2324	3616	chrome.exe	94
PID 3616 wrote to memory of 4692	3616	chrome.exe	95

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youareanidiot.org
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbea70c728,0x7ffbea70c734,0x7ffbea70c740
  2⤵
  PID:5160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,7415311003287899351,12903537359781039062,524288 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2108 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1624,i,15123626246828359180,7081210866850057194,262144 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:2556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,102478420045340099,12452770414738650144,524288 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2388 /prefetch:13
  2⤵
  PID:1108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3180,i,8875833723031696304,17883283900467508806,2097152 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3196,i,11291736692054549591,9748339817839685976,2097152 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4348,i,13982334559261698137,10077907673803554423,2097152 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4356 /prefetch:9
  2⤵
  PID:1240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4744,i,5646696075374288293,3579576886302560998,2097152 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,16764642322589828794,2068477283318955395,524288 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:5712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5460,i,4875291076606816471,18160364858538998639,524288 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5800 /prefetch:14
  2⤵
  PID:5308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5792,i,10121220664037006693,3686340237264604660,524288 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:5804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5784,i,16911502062091457535,12549505086278333688,524288 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:2324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5524,i,265640690437082175,2951366992493087726,262144 --field-trial-handle=2080,i,16930190142898206375,12948573038019546746,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4356 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4692

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1624

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2dc91dfede1f6a2d616163cf4e824db6832d8f31af3f4c0fb22f0437d7cd561c
MD5 db4b490deded1b9cf0987cceee987a30
SHA1 cc8175cc671a59beb5fb0beb382950d22ed1f88f
SHA512 c8ba51f3231022ce40f625e78d63da5f94c7e0e71e108d1522591c48ddfac47c79015e81fe9e3e13d8ab474f7fa965d7788b37a25ab0c13ede6af19d155a1dff
TLSH
T1BBE02BAAC861EC270DFD1B2C61555749E76003577F809D4B3B3C820D8FB163E868581C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 3fc05d03181b7211b20ea47a4c8a82f00243e313194215714c36bf127b7fa08d
MD5 aab7bd300efcd08b7bb733c18b40770f
SHA1 00afe2da3832f7840de6e29fdd7cced2ae3e5a34
SHA512 2e489fb0fad29770576ef026eeba262897fe797a9edd40cb86ffd6a95a35c253f7a7e06ea44cd88fc078acb0b517da8b8421e3e703c93407d2c088f7efa975dc
TLSH
T11BB0121043C40843C750437414A208A0301249B402010217A580127040156F7424A080
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f3cb46f3073ba1890fd70ffe73cdb491632892d4dcf519beea5a2e7a553d0dd2
MD5 958f6724dde690902a3850291b231f93
SHA1 f56bdd65f42efda682e53fe628da30ee7704c0bc
SHA512 54a53f4221e169df2993fc0539985747d3a3233764e619e70d3e6dbfcb2c0a5f76e108a9db9ee7890033e1e70d75be6e5b223324f2ce66b054b1a74fcb29b165
TLSH
T14C417AF793B4867D8A1196F4DA156F1FCE6D0524031D38A689E4AE1B83F28B2E14078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5f89e2c46d81107afc2cc7d28f4e1210d9da4e279778919a72c012bd4d09de6d
MD5 eb38895a57c1f9af0fcd290eb8222d25
SHA1 9f71291aa25cc4ac4ce30d54d9e304f65601438c
SHA512 14c6b6146d5b6747f42f93627ae0c6c1381a8f077c8e6fbabda5abbe35c5f2c1d18caf2574ac6bc048d749112fc1771c52db1804376b3bf2d513b3dad97b58e3
SSDEEP 192:sRzdhVvy64342v7HpAPRp2fhS9DHsb+WNnFg191xPe46h2y3aIdpVyIsnAUge:sRzL1bCjUXf5wuDe92iaOe
TLSH
T10042D82EB9102A3B5CCAC629FA657757EBF4103161D42EC8E6FCCA2C14E75DC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 532bca0a3f6524c9ff513674140958d70a51775d4953c699da60c2af40586133
MD5 cdea564cefe102fc5e3f5e3b6d21753c
SHA1 18ee6a6445228f4b83768071391bd2054d92cf41
SHA512 6bcae0c39676cf3d9a11f83dc26517ad8af1649743218ec58e3805d0644648247e4301d1ac7b72418f82dbdee76587f61e22961e907052a27c05ce00f090d1a4
SSDEEP 192:sRzeVvy6434Vv7HpAPRp2fhS9DHsb+WNnFg1NL2Nh2y3aIdpVyIsnAUge:sRze1bljUXf5wu72n2iaOe
TLSH
T13742D82EB9106A3B5CCAC629FA657757EBF4103261D42EC8E6FCCA2C14E75DC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d2a6ca2df8cc52b626062c775172f69f7d4591d2382a7598fedde271c087d046
MD5 090a16e9aafec74bcee431b8be7bdfd7
SHA1 2d6d2889b6540e13b78ba1149606670fb0a786bf
SHA512 bb545d112b78c67e49b860f68be3cbf7798efd1e87bd587b463dafe877c01870476d7a6672e4aa7123a70de356066c6ad5d85f25cc9f968c11e0d3de0f9c2877
SSDEEP 192:sRzdhVvy6434Iv7HpAPRp2fhS9DHsb+WNnFg191xPe4jh2y3aITpVyIsnAUgE:sRzL1bUjUXf5wuDeE2iaoE
TLSH
T19C52E82EB9102A3BACCAC629FA657757E7F4102261D02EC8E6FCCA2C14F75DC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 3fceec2368f93ddd3be7eaa1465a3011c325ff47801261d2e3bc86a459460fa8
MD5 a9125c26694a66613be5174b13bd716c
SHA1 d0abfcc6f0e0b8d2779b7f996521b8ebdf6cd039
SHA512 5811381d70a31e2f21b2051a0c5593e8505bc21c15a15c6e78f2f2a296602ffd19c6ce03bfc0a32c575a8048dba5ba42472a9bf5d2aadd73dfc95e4c5fe7a5ed
SSDEEP 384:97jJY7KxkXqKf/pUZNCgVLH2Hfgsl6y7pLuLcSjvKXODJ4+ErU3rQHGjLsHHG:93JY7KxkXqKf/pUZNCgVLH2HfgsYy7p8
TLSH
T13E720967AC4C9E370F94C5CCD816BF4FADB5024B65E9C86483FA582903D5ADB110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 af29d57e1a43411007420436bb896b949de93aff10308936d185cff93c9ab4ce
MD5 3e270b7648e61403599d0325ffa602c7
SHA1 74d04c7b5b1ea8618ef19e7d52bf2478933dd6ec
SHA512 e0ec7607980c562757b344bf925845f9ba581e3f62d1c9d0aa65702d310998687a5e05ff15b12b721952c18bb21492b2065e581784c9c3f3bf4b4f4e137efec0
TLSH
T101B012C0C0115501C01616F4754214887518AF20960A170147E06932D8371908015060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588855.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588855.TMP
Size 96B
SHA256 16f37e50078679d007d41d2404a2cc8a878b920fbf8b203e4a14708e17662896
MD5 9fea6d580b8d29f3302f41219ea24054
SHA1 5346bf716fd135d7a9841ae25dda8ff5d20e1d35
SHA512 47cb118223f6eba128eb46ccb08520d8ec56aa6f007e6544370c71fdde1a47871916275874a89ab4e8ba8353ec252904fcb0cf9ca41537e774b7ad5645d219eb
TLSH
T1F6B002E6C1126333E05217F02B96EAF971B1DF35C7031316D6E11B7ADC296604529574
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 191cc5721b5fe639b2bd67e0ab8bbde7ce35a906a4ed2a58d6838b3523a446dd
MD5 644707e96ed003adc26dbf76ead2def5
SHA1 01990cb9c5787b6437e13ee81dac92f3bd1e6908
SHA512 51d75d1c3b7c53a5e34cd07da3dcd7c28dd25b406e0d650810ca7c7a3311321086f6c37ffccd345856053d7ca66abe8144e9d9eaeb7b7c356ec401706e9503dc
SSDEEP 3072:cGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:vm7Rkm1tYpBeh2BAo+
TLSH
T168C3122B5D75A9365CF5BB0EB04E0B1F2EF149A7D920DE92C8D45F0423E67CC0A05A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e4817df1beb41dffb0ea9afb8f3d3ccea0f4f2923293952ee937c88c1d658af9
MD5 7e13224cd16ffafef842ff4cbe78bf78
SHA1 a2e85676d043e48e04b05812cf92e42fbf783ca2
SHA512 ed6697e4dabbb0ef453ef6a8583a38b8f4ed189b9fd77ccb7cd2b505cd430a73708c3d36436c9709fe06df56910ff675684b8599ed970cd1493f5a426eecaa28
SSDEEP 3072:cGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:vm7Rkm1tYpBeh2BAo+
TLSH
T1C9C3122B5D75A93658B9BB0EB04E0B1F1EF149A7D930DE92C8D45F0423FA7CC0A45938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 434bd41c16aff987543890a11e53592926fa80afa8e005cbcd124eab6139fa5e
MD5 83f7c4d78d9313ba90ae07b2c9fa6dea
SHA1 ee3c275d501dafa1f832c398548c004a111de86e
SHA512 f7f650d015e849e32d5809d0169f62fe43052b077f50a6d3d71bbbfb081f8c1d1207a1947caa1968e13475a05bc79bc1c5a99ee986dd40b7c69b591fb59f95eb
SSDEEP 3072:rGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:ym7Rkm1tYpBeh2BAo+
TLSH
T12FC3122B5D75A93658B9BB0EB04E0B1F2EF149A7D930DE92C8D45F0423FA7CC1A45938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1dfc5a3278eee27f47e4d90f63fab85f0732ca162fa834d5520cdfd0e414f5a8
MD5 2ebc5543260851df58fbcb4eefc4b94c
SHA1 42cfef83f44178732add2b60f0436c967b4218bd
SHA512 552d6eafb62d0f1343457cbe90bf362500acdc06376380a296ad2d6d5233a49bc2342b2be14b84c7ac106b8307e37661a4becf8e0de0afd3b9d1b5ccb1122060
SSDEEP 3072:7uGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:7pm7Rkm1tYpBeh2BAo+
TLSH
T1A5C3123B5D75A93A5DF9BB0EB04E0A1F1EF149A7D920DE92C8D85F0423E66CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e7faf99e176a75fefa318069930fe7acdae3f2bd722fbddb281a936922267ac7
MD5 b044efc4aaf26c011f4ca811024ab51f
SHA1 d1044df5c198a84b205c9a586ae434c26678cfe8
SHA512 a723a27aa9025a1474aee53f02cb553d8b6b9dc4e569585f8253060eac7cb7981336fdafc3af5b9cd53bedfdd21c166b383e77457fa04e77ad22330f3c68766c
SSDEEP 3072:elGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:esm7Rkm1tYpBeh2BAo+
TLSH
T136C3123B5D75A93A5DF9BB0EB04E0A1F1EF149A7D920DE92C8D85F0423E66CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 55a559d29e6c9cc2284ea619dab865f0c7f7574b17a03b9a2e543f767f6c7c43
MD5 cfde85619bf0dbf51d40923367eaa16d
SHA1 61596bd4be03224a1247c019f32471b00b0af1b2
SHA512 7a14447783c4c4434d1b462dddb9b7a049796eb403625f683d15ceba0044ac3f97b01af62db1a1e8344691acbe24fe3b1e0c1089015d612fa68314471331ccb5
SSDEEP 3072:vGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:+m7Rkm1tYpBeh2BAo+
TLSH
T1C0C3122B5D71A93658B9B74EB08E0B1F2EF14DA6D930DE82C8D85B0477F67CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download