hxxps://youareanidiot[.]cc/

Analysis

user interaction
yes
max time kernel
169s
max time network
170s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 19:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://youareanidiot.cc/
Sample260910-xzc4ssxtgx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4040	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335414432732604"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
2396	chrome.exe
2396	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe
Token: SeShutdownPrivilege	4676	chrome.exe
Token: SeCreatePagefilePrivilege	4676	chrome.exe

Suspicious use of FindShellTrayWindow 46 IoCs

pid	Process
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe
4676	chrome.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 4676 wrote to memory of 1500	4676	chrome.exe	85
PID 4676 wrote to memory of 4040	4676	chrome.exe	86
PID 4676 wrote to memory of 2296	4676	chrome.exe	87
PID 4676 wrote to memory of 2296	4676	chrome.exe	87
PID 4676 wrote to memory of 2088	4676	chrome.exe	89
PID 4676 wrote to memory of 2088	4676	chrome.exe	89
PID 4676 wrote to memory of 564	4676	chrome.exe	90
PID 4676 wrote to memory of 4140	4676	chrome.exe	91
PID 4676 wrote to memory of 564	4676	chrome.exe	90
PID 4676 wrote to memory of 4140	4676	chrome.exe	91
PID 4676 wrote to memory of 2992	4676	chrome.exe	92
PID 4676 wrote to memory of 2992	4676	chrome.exe	92
PID 4676 wrote to memory of 3168	4676	chrome.exe	93
PID 4676 wrote to memory of 2228	4676	chrome.exe	96
PID 4676 wrote to memory of 2228	4676	chrome.exe	96
PID 4676 wrote to memory of 4896	4676	chrome.exe	97
PID 4676 wrote to memory of 4896	4676	chrome.exe	97
PID 4676 wrote to memory of 1928	4676	chrome.exe	100
PID 4676 wrote to memory of 1928	4676	chrome.exe	100
PID 4676 wrote to memory of 2612	4676	chrome.exe	102
PID 4676 wrote to memory of 4748	4676	chrome.exe	103
PID 4676 wrote to memory of 4036	4676	chrome.exe	104
PID 4676 wrote to memory of 2396	4676	chrome.exe	112
PID 4676 wrote to memory of 3292	4676	chrome.exe	113
PID 4676 wrote to memory of 3292	4676	chrome.exe	113
PID 4676 wrote to memory of 4880	4676	chrome.exe	114
PID 4676 wrote to memory of 4880	4676	chrome.exe	114
PID 4676 wrote to memory of 4544	4676	chrome.exe	115
PID 4676 wrote to memory of 4544	4676	chrome.exe	115
PID 4676 wrote to memory of 4452	4676	chrome.exe	116
PID 4676 wrote to memory of 4452	4676	chrome.exe	116

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://youareanidiot.cc/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa710ec728,0x7ffa710ec734,0x7ffa710ec740
  2⤵
  PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,17934878151205038021,14327558359182563259,524288 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2104 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,71007568812776869,9373246807066052640,262144 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:2296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,2393306700917876583,1188197673289862684,524288 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2416 /prefetch:8
  2⤵
  PID:2088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,6749687298928095018,9928646916108260865,2097152 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,18128378039539297236,12946536124595214633,2097152 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4448,i,11646475798395522140,2946734019442815877,2097152 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3952 /prefetch:2
  2⤵
  PID:2992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,5551636362898133794,15886407097070810214,524288 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5596,i,17795784005980397403,6436220515724244327,2097152 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5808,i,9606398984335358675,3497031908353717312,2097152 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3420,i,1590154401478691728,17455901547149665284,2097152 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3392,i,16682409567962270128,2708853515849481122,524288 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=208 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3376,i,6361480110041434181,13650662667338350689,524288 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5856,i,17138190327323936394,6667049979648623139,524288 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5324,i,8456405280664280099,18405595300827549691,262144 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1768 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6036,i,3227490159624407602,14896130744631049613,2097152 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3460,i,3625668004487752562,17700818679778026050,2097152 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3492,i,11261639423882611943,15446456040388961707,524288 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3408,i,15845401832114509424,9065075638912981045,2097152 --field-trial-handle=1992,i,6330695205194343730,14103653536337319580,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4452

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4048

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 77bcdb2c3160a7fd4141144587938963255d18e2280ca048bae35e2b889daae1
MD5 f444c4b91d48467daad7fc304bf0b2b7
SHA1 0a54e0644c006f7b684b802915a76b0b9e907f2e
SHA512 954788cc6221a65dba3cd53452e7ffe912bdce7b20bd8cf2525ecbc1a2e6c0ba3448dfbcc8997d4347508beecb9ddb77704805450cb4090f76ac02aea569ca9f
MD5 SHA1 SHA512

Submit Download

9297d73b-608b-426a-b41a-7bc36af9fc6a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9297d73b-608b-426a-b41a-7bc36af9fc6a.tmp
Size 414B
SHA256 7a4a932f27890e4a516817884528523e2a8a73a1dfb8b8e7182f228e9de51c76
MD5 11c1fd0ceda7e314a27b011edda64eda
SHA1 db977b8e4e886f19ad13664af1561a6ad8f59d5b
SHA512 fab5bf29009da17032c17cab3f84ea4e11f3b48875b73d3c987c077fa7e3f72f0d3b094081c3e76e7edf2001e420251442f8e75b8e47790dc29520131da7477c
TLSH
T1E6E02BA6C925ACB72CFD071920954B06EB5513172A8159AF3A3CC20D4FB062A4196C9C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 62KB
SHA256 e96962c7df63a9fbe00dddda6e5360d639e7b25498fef7400fe0333fa5311294
MD5 5bbcb2d4f3b68ad1969574166cbf7210
SHA1 c1659c4e5b88de42858857ebffd3accaa360b02e
SHA512 71f65503cd3f12f908644cc2fecc7b5e833724c93107962935a74eef4d8eab2806200cf291d366c646f5d0f881e27f9252b7c1a39050eaf4388c7ec474ddca74
SSDEEP 768:GlmILj20bh/Jhu51KNCCcwgjjp1X3xRTFo8OmY1gqNjbBSxY45QY6FP5vv2Mvc/r:Gt7/ju35wgjjLrrqdb4xn5Vs57vcV+FY
TLSH
T1B553020A009EC47EE703DDA03087145E5FA508BAEFF5E3B9B012597B82667DAD75806E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 346KB
SHA256 06fb30c34e3d7cb64ec821dd7d1eee69613b4a84c3841c081dee7143c151555e
MD5 e4bc0d7ecc0b43b6b8bd71ed0d8e894a
SHA1 27776f4cfd2ff01e98221769cb4aa554a2670e6a
SHA512 4c0956fb89b264ceb8dcc20a8cf905a4ae784195e78c306d2c0577d2e4c0548b6058ecda0516a089dc97570864728ab60503bffd804af5d0934e5f9c8b1fa475
SSDEEP 6144:ZPNyy2q1x/xjj1YO1RKSXVSFAsamiA6r/dsaRDDQ9fSoA9pT1c/i:qy2qhGORKNARmiRRDkJIpv
TLSH
T1EB7423DE4C0A0C9960EAE1034BDF477B3A4A44E7E0C5EC52987C1DD26D9F2627CED688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 264B
SHA256 69dc4ef57ee4a0409475163e51f230c3a55dbd1dc9ffa89c543ae8c15ec51472
MD5 d7fd4926fe72ddab536d683223316857
SHA1 93f81b926c5c5c20198e91991eca70d9b6299343
SHA512 155e561c5b15103918a5fc68087f35dfc74cd7abe555c3384af8526da57013aa9751b41f05529772132a8e0404f0d22b6ee0e68308c7a94cdcd7c67123c5f95a
TLSH
T1D0D012C9A3832405EBC9237057D6499732E5542774433BD359A8D35A98F37A4815EF05
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 b4d4f7d227ee42bb13eceae035bcbd2e1884d2b768351c07a23baf48f5428013
MD5 89917ebb07b8e54dcca5a4b6a8f44e20
SHA1 34f1793c48ce7e34cd7e5321f99fda493e94dd51
SHA512 f987b9278379834a611750280578a305e02c8a7854c9ea702c2900848dfe0566e77fa46dc24b15f5bb85e8a21058bd23f5e50063332eb5ecee5d6e94af6ef814
TLSH
T17DC08C90A3820446EFC4223496E7094322124062B8033B038984C09600723A4C21DE00
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 864B
SHA256 e735aa361aec39a11e775fb5b083a3fdf468f30b0386f791f6ba95bb4dc03ccf
MD5 95b448bf82caf4a81b45e7613799eb64
SHA1 5bc3056ccd17fd894a7bad31079acdbb6b6b9c42
SHA512 2baf46f6657b99a0a81c558980fb3eedfcc3668b0a4c29fa6fccfdccbceb99c9ecf95e7eaed51818d6c1b7ef8a402f210045d3189a7dd40a8e9c2fe46e68b101
TLSH
T1131199883A433C20DFABD2724FF570323119369EBD1A368E1482CE0294F10AAE1CCE0C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 bcd547f78edbdeb13dc61965ac7d1fc103ff53696c4e52e60c4424a8858b6d23
MD5 2a96099dec3cbaa1c5a39df6942d844f
SHA1 86108da33120ee73123075a0016a1010b705d855
SHA512 15697d297342d943cf79d7b5ca3a2fffa5de017e50fe13151eb59571f0fb429232e41ca80eb2ccb251cbf24e5e8993ae5b23be195dad12b5f7efee59149d6de5
SSDEEP 192:DK1oAF0KNPJJaRaI4e/CjGgWi8FO7SaPRpvrfP6NPXdNAOa:DK1oAF0KNPJJaRaI4e/CjGgWi8FO7Sad
TLSH
T1C9F1ADF7C3D8C62DC85156F89B256F1ECE290A28422C3C26C9D8BE5B93E24B1D25574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 87d963a529cd0d48af82ce426dea0aaa4948046ed608def2e0802895a9d2939f
MD5 a6503e6954fe1220dce16833f2512c9f
SHA1 07d6b2d0153a93d3966d398e9a6b8dd88a3e38f3
SHA512 91900f2a0440a8aa097a27ea86a00dd31f45e565c10574cfd43215de9f00fc6691c43f8ce1a72a0c07bdfd4ccfc569b356bd5566c4cd4bcf894babcc26ee3e1c
SSDEEP 48:YALlxlOh//qpxqpjh1xhpvgaXYfoKsXgmgAxJzspusVfsfaosSjKsIqzsDtsncsw:DK1oAFgaI4iAgrMaCjGjIzTE
TLSH
T1DA9199F3C3E4C66D891156F49B256E1ECE6D0A24122C3C66C9D8BE4B93E28B1D25134E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb04b88a-661d-47ad-afd2-667334a2a0e0.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\eb04b88a-661d-47ad-afd2-667334a2a0e0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 756735b4060c24c9ef64e293550984fe4275b3a6f77ef4a91cb347cb963c1080
MD5 bb8d9884b0ed603154bd311cc56e133e
SHA1 b53f062eb88718bfd34b187a00665abba26e6832
SHA512 7e1f40112b5ee67643ce3090fd570dffa68d56ca2768bda2d96e318079aa5783d1573975d53e38bae5d8c776f46a760ecc7faae00727ab21740afa98270d9154
SSDEEP 192:kR2cBzKLIVVtOGjfv7hpDPRp7HasE95Hsb+WNb2LfsH04vtwnNoUfRJ/pak8OKVo:kR2mzkiOGj39lX+rwiLHqCosasKE
TLSH
T1EF62B62EB910297B9CDBC22AF9227B17D7F6146125E01E84EBFC892D15E76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 86fa20a5a318091b09affa27bb96f187ca5d86108b757587f38cad745ee12dcb
MD5 1083080a977560a51f59b46b35f7612d
SHA1 539c930add475504dcac41c6eea7b62e46581107
SHA512 5ef5d234ae4028fb26aeae06037096a94f849a8d1513fdafdc1a6c229d1c25d6b811903c402ec44c9acd459a1227acdaa044d2082968b0bf57d6cf4f9a294963
SSDEEP 192:fR8KLIVVAOGjfv7hpAPRp2xc95Hsb+WNnH0eqx2jRJ/pak8AKVyIsnAUge:fR8kNOGj39UX/rwU52RaKKe
TLSH
T10942D72EB910397B5CDBC22AF9227B13D7F6146124902E84EBFC892C15EB5CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 92df1bbf16cfbdc33b8d65d43afcec23132fd2bc774a150301ce3d0c24511d29
MD5 60511af17fb81aaa409c685a102a86ab
SHA1 db50663b2d263c25fc76efa914f02467097322d2
SHA512 c3076ee5af4da5dc45533f682f3f8b926fa86500a45d74cdfd7b64140c7deb4dc9e2eb248427bf3d8e26554ed54c3f683efaae15c9407c5df9ab71e23f55794e
SSDEEP 192:fRccBzKLIVVtOGjfv7hpDPRp7Hasc95Hsb+WNcLfsH04vtwqx2sfRJ/pak8OKVyN:fRcmzkiOGj39lXOrwcLHqj2UasKE
TLSH
T13D52A62EB910297B5CDBC22AF9227B17D7F6146125D01E88EBFC892C15EB6CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f50fd7068a95bc29cc3c0e299040ee1de7d9c1bd896476f6029b48680b5033d4
MD5 371e252e984866aa4b086ead4ae68b3f
SHA1 b31cca0655d0172d78c1bd1cebcabcb192852c69
SHA512 09c44584211be6e87da8cb08d6c3272ca55274fbf2c97f76e36c0499ebaea91f975bb1cafd8e409800188a4a4e90fc8b539c05e111911c273e5734c5e8c9d093
SSDEEP 192:fR8KLIVVtOGjfv7hpAPRp2H7I1c95Hsb+WNcLfsH04on8qx2GRJ/pak8AKVyIsnR:fR8kiOGj39UX+rwcLH3X2caKKe
TLSH
T18852B52EB910397B5CDBC22AF922BB17D7F6146525901E84EBFC892C15EB6CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 af48efdf2e0f6eb156189d4b2cc231a63eb7ca4b44d7249dcedb2d7595c92ba7
MD5 53cf499bfc85a73a6f4023bd7e358ad8
SHA1 1937eef94a6f71df6edb01537e8ab0245212346b
SHA512 866228bb646badfd7603b7211330ea4d88d2df0a09101462d93288c78fc59f19e874c6d3482780012581e5c18a128860af90c5065b997fb82f9c308d4fc5679f
TLSH
T1D5B0124080416151C04206B012522488F1D45F10F60B270983E0EB63C8272618014050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b263.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b263.TMP
Size 96B
SHA256 77d892dc7da1e40993acf6531dabbd5fa4b5cbfecc50e1b6232381718c235a76
MD5 827200e4e9cf02d5b547782ea9ee89f2
SHA1 1dee772e5db953063b426866775099cfdc712213
SHA512 3569a0ef92a067c73e0b1d80cf6c5802a724208399e20aad30b95630cfd9f18af2977b02ae9257889f3412df2bf35e9470d3dd1c5ec3ad54a067da776ade45ff
TLSH
T1E6B0220AC2022222C00203F030E0A8C83020CF28C2032202A2E08A22EC202B082200F0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 6aecf23eed4587f8b72d484cc794be92ce7b0483f6d8fd727e4bf4dbbc9a1ddb
MD5 6466cf44c92086ee598f423f88c35cd1
SHA1 582b1f8cc8a6cf1ce569228c179be90bc8474c08
SHA512 b8c8ac407af74f7772824088b2484d2faae3e23c0c11bb6a591460589e77b9442f2612a3fff222331b09cc92eff589496af01ab035f0b284a5b6094f2bd917df
TLSH
T168A002B105450616C1410279D6C217C033B37A5043531A4665D15444CD655C69902688
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 9852c3dbd07022cafc4673dcd6e98655fa2ca1c18a72cff713f50c8fb7749fd6
MD5 fbe5ec77bcd24c8e62df8f24d076e354
SHA1 2e400cfe1dbcf44c557fdb299812c1f47d2c1594
SHA512 92de228ae1a4981c4201a5ebaa9ec0402b7bca4262cdc5c02193eb905e5bbe9ca1c851febb3039f73dc6874ebc0b67c4de11e7e362f080934f392e35b95c0784
SSDEEP 1536:j3syD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:jWqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1F2C30237AFC31E335DC2CB70BA130FD797B644AA9034D301AABD2BBB6893455658246C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5469e00d8ae302c14ce645d135bb7f19d164f2bfa981e508cf8ca24e2257f878
MD5 da4d7801e48c42ee16162f6741b32348
SHA1 316d5ffd8bb9d596f8a303ecfefd6c7fa291f200
SHA512 003e250a4228f8922d29c79e43df5fb978c04f139ad1d53c5c9a307aea96b4fa8bdc1874febebf5f8c3bfdf192bce1ec847662367bec37032221b130693dfb7f
SSDEEP 1536:sVdxyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbG:+dvqfd7NtZL8cHQRZEQ6Sps9
TLSH
T14FC30237EFC31E335DC2DB60BA130FD697B644999034D301EA7D6BBB6893455A48286C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7163df98d0e75b54ac091f1975c83f42dd3e475a1c806d1e18aa85c036c9e2f4
MD5 401b9bfea3a36b7fe44b7bf159a3d855
SHA1 42dd4b3497cf8f85f2053bfe7b1f610003fcd63c
SHA512 6b5cbaf226a2fea15a79aaa35b67bb5a98cc12567db0969e2b74175bbcd9bad7ccf9c38a1a180c28a569decd5d158ef3aeb25e2189bdfb4754ba58f3c3d73dd3
SSDEEP 1536:sIdxyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbG:3dvqfd7NtZL8cHQRZEQ6Sps9
TLSH
T110C30237EFC31E335DC2DB60BA130FD697B644999034D301EA7D6BBB6893455A48286C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b98eab7432921c62b1a5c70347f912d58f525faf4b1430076b0b4b320eac4901
MD5 943cb691c824129a911efabeaf7a1600
SHA1 cb08e8111ce65d9043e3705aa1ffd05da47d24e1
SHA512 54c2452d668b64b32ca2f7c79698fad8bac29d9b3a442e49d792ac80a2bfdcc49056403f8d53c00073b9fbca71347e95443a43dbe5952a3f9a31f2e5872262a3
SSDEEP 1536:65yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:mqfd7NtZL8cHQRZEQ6Sps9
TLSH
T162C30237EBC25E335D82CB64BA534FDA97B644A99030D301AABD3BFB6C93451644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e0bd45ce1041c07d28b9bd74eee50ad52d54b7c20f7752090a62e16b31dec6dc
MD5 788e3085d1d55a12f6da436c8d32e1a8
SHA1 7d543abec45e22867363c5632fd111ac1a3ac40e
SHA512 e2c5cb16fe1ff3531dfa2b0b5c1f9eca041ddc0aea0a069636ea3f67585228810a49502d106f999b556955cd07be085cb38b91c3abad85be3b661d50486f1df7
SSDEEP 1536:jEsyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:oWqfd7NtZL8cHQRZEQ6Sps9
TLSH
T186C30237AFC31E335DC2CB70BA130FD797B644AA9034D301AABD2BBB6893455658246C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8704054f96b820530c2a75d8fec2ac99b667d31b42fba6344a2ae9fcdcbed364
MD5 f718f8fa697735a618afcd80dbd6d3f0
SHA1 65aa14b0ae40f3759c5ccee2647b8a09fc651091
SHA512 2f503136a3e042a5bc71b4b12f61f383372c58842dfd8834b916d0931ef472058186309dc22103bee3c8f6acf4c1ced9b4a5cb3c24588ee488b2d035a251ac73
SSDEEP 1536:s3syD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:YWqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1BEC30237AFC31E335DC2CB70BA130FD797B644AA9034D301AABD2BBB6893455658246C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download