Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    154s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2022, 04:35

General

  • Target

    b813f93f24761505af2792be190b5cc19838252fcbdeea9946216964f7649ee8.exe

  • Size

    17.5MB

  • MD5

    fe3cb9edf4b588d8914cbdc12379def8

  • SHA1

    86e3db1eee65d53f57ac69a72d6c24a39959545c

  • SHA256

    b813f93f24761505af2792be190b5cc19838252fcbdeea9946216964f7649ee8

  • SHA512

    9e279263466879e3e0861c676dc49e77687b6a4b0550e72228dd93273335180da4321994fbebaca17e5648092e5151329c08d47633ab6c588aec6ad28ac8ed7f

  • SSDEEP

    196608:BJrDZMUFXFKj6JzwzFBxUmucoJ07KgXjz+kVUC:LVM6VKuBwzLqhK7KgXvPt

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Executes dropped EXE 5 IoCs
  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 14 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • GoLang User-Agent 1 IoCs

    Uses default user-agent string defined by GoLang HTTP packages.

  • Suspicious use of AdjustPrivilegeToken 58 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b813f93f24761505af2792be190b5cc19838252fcbdeea9946216964f7649ee8.exe
    "C:\Users\Admin\AppData\Local\Temp\b813f93f24761505af2792be190b5cc19838252fcbdeea9946216964f7649ee8.exe"
    1⤵
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)
    • Checks BIOS information in registry
    • Checks whether UAC is enabled
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of WriteProcessMemory
    PID:4476
    • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe
      C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe --disable-background-networking --disable-background-timer-throttling --disable-backgrounding-occluded-windows --disable-breakpad --disable-client-side-phishing-detection --disable-component-extensions-with-background-pages --disable-default-apps --disable-dev-shm-usage --disable-features=site-per-process,TranslateUI --disable-hang-monitor --disable-ipc-flooding-protection --disable-popup-blocking --disable-prompt-on-repost --disable-renderer-backgrounding --disable-sync --enable-automation --enable-features=NetworkService,NetworkServiceInProcess --force-color-profile=srgb --headless --metrics-recording-only --no-first-run --no-startup-window --remote-debugging-port=0 --use-mock-keychain --user-data-dir=C:\Users\Admin\AppData\Local\Temp\rod\user-data\bc67daf841096f8d
      2⤵
      • Executes dropped EXE
      • Checks computer location settings
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4148
      • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe
        C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\rod\user-data\bc67daf841096f8d /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\rod\user-data\bc67daf841096f8d\Crashpad --annotation=plat=Win64 --annotation=prod=Chromium --annotation=ver=106.0.5233.0-devel --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffde5f07738,0x7ffde5f07748,0x7ffde5f07758
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:112
      • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe
        "C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe" --type=gpu-process --disable-breakpad --headless --use-angle=swiftshader-webgl --headless --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --mojo-platform-channel-handle=1428 --field-trial-handle=1472,i,8490739146315195650,4258274038689669965,131072 --enable-features=NetworkService,NetworkServiceInProcess --disable-features=PaintHolding,TranslateUI,site-per-process /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2688
      • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe
        "C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-angle=swiftshader-webgl --use-gl=angle --headless --mojo-platform-channel-handle=1716 --field-trial-handle=1472,i,8490739146315195650,4258274038689669965,131072 --enable-features=NetworkService,NetworkServiceInProcess --disable-features=PaintHolding,TranslateUI,site-per-process /prefetch:8
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1676
      • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe
        "C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe" --type=renderer --headless --lang=en-US --first-renderer-process --disable-background-timer-throttling --disable-breakpad --enable-automation --file-url-path-alias="/gen=C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\gen" --force-color-profile=srgb --remote-debugging-port=0 --allow-pre-commit-input --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --mojo-platform-channel-handle=1980 --field-trial-handle=1472,i,8490739146315195650,4258274038689669965,131072 --enable-features=NetworkService,NetworkServiceInProcess --disable-features=PaintHolding,TranslateUI,site-per-process /prefetch:1
        3⤵
        • Executes dropped EXE
        • Checks computer location settings
        • Loads dropped DLL
        PID:3636

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\D3DCompiler_47.dll

    Filesize

    4.7MB

    MD5

    cb9807f6cf55ad799e920b7e0f97df99

    SHA1

    bb76012ded5acd103adad49436612d073d159b29

    SHA256

    5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

    SHA512

    f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\D3DCompiler_47.dll

    Filesize

    4.7MB

    MD5

    cb9807f6cf55ad799e920b7e0f97df99

    SHA1

    bb76012ded5acd103adad49436612d073d159b29

    SHA256

    5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

    SHA512

    f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.dll

    Filesize

    171.8MB

    MD5

    556857d30fe492f4b1731fc8956cb7dd

    SHA1

    8490f8f17e5624be94aa43ce4891ef275b0967b8

    SHA256

    bf150c04292bf3e2c140cef013d325198ae144321ca2e364969596644e26f332

    SHA512

    1cd3b844afb695f15992c7fc59cabf67a2f0f1ea81968ed95cb42f3bc68b39e28294685c1198dbc34d448b61b4f006d87d927907db4a27d7acde30dbdd89ea8c

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.dll

    Filesize

    171.8MB

    MD5

    556857d30fe492f4b1731fc8956cb7dd

    SHA1

    8490f8f17e5624be94aa43ce4891ef275b0967b8

    SHA256

    bf150c04292bf3e2c140cef013d325198ae144321ca2e364969596644e26f332

    SHA512

    1cd3b844afb695f15992c7fc59cabf67a2f0f1ea81968ed95cb42f3bc68b39e28294685c1198dbc34d448b61b4f006d87d927907db4a27d7acde30dbdd89ea8c

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.dll

    Filesize

    161.4MB

    MD5

    d632d3474ff89ba5b980b48cb8904329

    SHA1

    9650b5f656964bef2adc48a0d27ed7efcba6a67f

    SHA256

    f7b4c80c4fb219f813454680f8a7ed5ab2a88da1a082301b612a8010b630afc3

    SHA512

    9e8899d1c3fd3469c6b8d56de0f7d2ea97c8c090da2e1a90f79889f196dd71c13f23a76ecb115037d01ec620510e677b547770c88a8515aaec8955653d69fa1b

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.dll

    Filesize

    159.6MB

    MD5

    863b29c644a298ef72c37a5ddd2e1b55

    SHA1

    823f9d4fc4ebb26959d17134a589e932e998a722

    SHA256

    cdd1ee4725561a532edaec5091be21f56e82cd8ca5377d71933b41b5abab93ac

    SHA512

    201168458aa2051fd6ea819043f0a73ad5b7a7eb916b1c089222a67cd74317383b2dfa166119204f8100c23b12021861cec684466a61af1993e4cee026a2da8d

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.dll

    Filesize

    141.9MB

    MD5

    00aa2e14e53f8808bde1f21f8de6d549

    SHA1

    f4be720ef7cd7c1c0ef0795ed29a99e7b13b144e

    SHA256

    02ee734da35ad3495f5fe0927a8c028b306ae1da15ac28cf095189d6ac2425b2

    SHA512

    127c07e4dbb7a9fd27e8c563f43dfd71ad11e652cf4e8a4128c132aaedeef0d6117f3cc14a31fad4e30f56353c3ac9f700990b19646df64121d1a32e7bea3981

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe

    Filesize

    2.3MB

    MD5

    2c6ea6c736276d06610a1a17babfde39

    SHA1

    f8d8140aec34dc4bc20237989d7d5f0bd8166e11

    SHA256

    85562a8dd02f0032ef2e5da4f5f2aaf84975e4d607c97d059188dd623d671aa3

    SHA512

    9121feb7b3961c94b07a9ce6da9f0e95409a7596f4db904c046ba5447aa46b034d54f9ba8ea4f8028fb4e025bcdd716d13c08aadc18dd47345eecb9fd95b6f3d

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe

    Filesize

    2.3MB

    MD5

    2c6ea6c736276d06610a1a17babfde39

    SHA1

    f8d8140aec34dc4bc20237989d7d5f0bd8166e11

    SHA256

    85562a8dd02f0032ef2e5da4f5f2aaf84975e4d607c97d059188dd623d671aa3

    SHA512

    9121feb7b3961c94b07a9ce6da9f0e95409a7596f4db904c046ba5447aa46b034d54f9ba8ea4f8028fb4e025bcdd716d13c08aadc18dd47345eecb9fd95b6f3d

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe

    Filesize

    2.3MB

    MD5

    2c6ea6c736276d06610a1a17babfde39

    SHA1

    f8d8140aec34dc4bc20237989d7d5f0bd8166e11

    SHA256

    85562a8dd02f0032ef2e5da4f5f2aaf84975e4d607c97d059188dd623d671aa3

    SHA512

    9121feb7b3961c94b07a9ce6da9f0e95409a7596f4db904c046ba5447aa46b034d54f9ba8ea4f8028fb4e025bcdd716d13c08aadc18dd47345eecb9fd95b6f3d

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe

    Filesize

    2.3MB

    MD5

    2c6ea6c736276d06610a1a17babfde39

    SHA1

    f8d8140aec34dc4bc20237989d7d5f0bd8166e11

    SHA256

    85562a8dd02f0032ef2e5da4f5f2aaf84975e4d607c97d059188dd623d671aa3

    SHA512

    9121feb7b3961c94b07a9ce6da9f0e95409a7596f4db904c046ba5447aa46b034d54f9ba8ea4f8028fb4e025bcdd716d13c08aadc18dd47345eecb9fd95b6f3d

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe

    Filesize

    2.3MB

    MD5

    2c6ea6c736276d06610a1a17babfde39

    SHA1

    f8d8140aec34dc4bc20237989d7d5f0bd8166e11

    SHA256

    85562a8dd02f0032ef2e5da4f5f2aaf84975e4d607c97d059188dd623d671aa3

    SHA512

    9121feb7b3961c94b07a9ce6da9f0e95409a7596f4db904c046ba5447aa46b034d54f9ba8ea4f8028fb4e025bcdd716d13c08aadc18dd47345eecb9fd95b6f3d

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome.exe

    Filesize

    2.3MB

    MD5

    2c6ea6c736276d06610a1a17babfde39

    SHA1

    f8d8140aec34dc4bc20237989d7d5f0bd8166e11

    SHA256

    85562a8dd02f0032ef2e5da4f5f2aaf84975e4d607c97d059188dd623d671aa3

    SHA512

    9121feb7b3961c94b07a9ce6da9f0e95409a7596f4db904c046ba5447aa46b034d54f9ba8ea4f8028fb4e025bcdd716d13c08aadc18dd47345eecb9fd95b6f3d

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome_100_percent.pak

    Filesize

    595KB

    MD5

    60159cdd77dbb5bb2f31b181862207a8

    SHA1

    b71415f9c048987aeba9fd1c57ad2d652126bc1a

    SHA256

    0ae37d1abe5db69f9bd39aa40f27a6040f251c12b1c6330f6a9df7f293200e04

    SHA512

    200bb378f66bc7a8e9da97a02199bc6975a3ff66840d851cf407c36d7b88c31ac48c69cc853f37878fb19c1bc7e46d4a9d73126fad1e87d66d261bb6e75ae6ea

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome_200_percent.pak

    Filesize

    892KB

    MD5

    c776bc9e28dd86370bb78cb38770c4a9

    SHA1

    d43bd2f40137d110a7dec102eb7ea17014eb38aa

    SHA256

    18701fd9811e143c9d0200d36e2383a66ea4ec12d973ded7a5aaff6f7ed26148

    SHA512

    9870e0ff88ed60dc528cb3da93263586f55dff0885f19f5050bc46ad718818bc7e665af6615596b6c7b6e9f5f3577bd7211c6fea81c10d1c964e6dbb56f73965

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome_elf.dll

    Filesize

    1.1MB

    MD5

    e2a6ed99e7be909b5a3f42fab533bc63

    SHA1

    59a7c914d60f4277e23c740f1f669c7227ba6204

    SHA256

    b2dfc480caf4d42b413fa82992cbfaa68a016cf3431a88523a3f6b54d998712d

    SHA512

    dc51a4b5fd49992efe86c199195684d5bf58b0c6bf8635b7b228f468ec46fb1485352e92f401310b6fdee8f9f5ac6f0ec4e58839249865b0ba3867131b16ea11

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome_elf.dll

    Filesize

    1.1MB

    MD5

    e2a6ed99e7be909b5a3f42fab533bc63

    SHA1

    59a7c914d60f4277e23c740f1f669c7227ba6204

    SHA256

    b2dfc480caf4d42b413fa82992cbfaa68a016cf3431a88523a3f6b54d998712d

    SHA512

    dc51a4b5fd49992efe86c199195684d5bf58b0c6bf8635b7b228f468ec46fb1485352e92f401310b6fdee8f9f5ac6f0ec4e58839249865b0ba3867131b16ea11

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome_elf.dll

    Filesize

    1.1MB

    MD5

    e2a6ed99e7be909b5a3f42fab533bc63

    SHA1

    59a7c914d60f4277e23c740f1f669c7227ba6204

    SHA256

    b2dfc480caf4d42b413fa82992cbfaa68a016cf3431a88523a3f6b54d998712d

    SHA512

    dc51a4b5fd49992efe86c199195684d5bf58b0c6bf8635b7b228f468ec46fb1485352e92f401310b6fdee8f9f5ac6f0ec4e58839249865b0ba3867131b16ea11

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome_elf.dll

    Filesize

    1.1MB

    MD5

    e2a6ed99e7be909b5a3f42fab533bc63

    SHA1

    59a7c914d60f4277e23c740f1f669c7227ba6204

    SHA256

    b2dfc480caf4d42b413fa82992cbfaa68a016cf3431a88523a3f6b54d998712d

    SHA512

    dc51a4b5fd49992efe86c199195684d5bf58b0c6bf8635b7b228f468ec46fb1485352e92f401310b6fdee8f9f5ac6f0ec4e58839249865b0ba3867131b16ea11

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome_elf.dll

    Filesize

    1.1MB

    MD5

    e2a6ed99e7be909b5a3f42fab533bc63

    SHA1

    59a7c914d60f4277e23c740f1f669c7227ba6204

    SHA256

    b2dfc480caf4d42b413fa82992cbfaa68a016cf3431a88523a3f6b54d998712d

    SHA512

    dc51a4b5fd49992efe86c199195684d5bf58b0c6bf8635b7b228f468ec46fb1485352e92f401310b6fdee8f9f5ac6f0ec4e58839249865b0ba3867131b16ea11

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\chrome_elf.dll

    Filesize

    1.1MB

    MD5

    e2a6ed99e7be909b5a3f42fab533bc63

    SHA1

    59a7c914d60f4277e23c740f1f669c7227ba6204

    SHA256

    b2dfc480caf4d42b413fa82992cbfaa68a016cf3431a88523a3f6b54d998712d

    SHA512

    dc51a4b5fd49992efe86c199195684d5bf58b0c6bf8635b7b228f468ec46fb1485352e92f401310b6fdee8f9f5ac6f0ec4e58839249865b0ba3867131b16ea11

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\icudtl.dat

    Filesize

    10.0MB

    MD5

    cd0e13a98199230dffa990e329f2d83d

    SHA1

    5e1fd566c575d2f3e0d32e10b9df8cab2d349afe

    SHA256

    be5f3cd2ff0bba10c13a603b08a34c91a875da31a6ac8d5820b8f12009d1cba8

    SHA512

    f49e5319fb36538b667144a4d9f9252ae2c545459d3395cf5d29fa6ca4621308ac5e84e8fa4cdb1475aa6a6ae19185118b267f0eb0e97210e54c2f1817d8a69d

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\libEGL.dll

    Filesize

    431KB

    MD5

    eee3d5cdd3c301a9eabfdba40b2f628f

    SHA1

    f1dbfde4c874ba0351d8e4319d0e18bea000a3e0

    SHA256

    d3f9cef962f09cfa5f3f13bbb4a9f0c0b2af276342516609411559fb6b20c535

    SHA512

    8efcd15b328f1f1fe5af367ac594736c90fc3c22a6284e938cf1840d2d5d818e36cb8564564731e2bd010e48f664cc4e7d13da1f3e3118e964b81b56a4c282ba

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\libGLESv2.dll

    Filesize

    6.2MB

    MD5

    4f19ee3135f619d7accbd780559c2568

    SHA1

    2414f31c9d8450bfd6ffc9cd697a2fb2f159aaad

    SHA256

    f82a9db06d455144181acc83a451882964aaf788f7d25af12f3a66005a6edf03

    SHA512

    91a96b376b5732e8480cb7ab60eb17ff2a7f889644a79e6ef078483ff56b6e6641ccdff985e9a755a05dc9ab745ca621f9d6938abc2c30022484f3ac5a5f7255

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\libegl.dll

    Filesize

    431KB

    MD5

    eee3d5cdd3c301a9eabfdba40b2f628f

    SHA1

    f1dbfde4c874ba0351d8e4319d0e18bea000a3e0

    SHA256

    d3f9cef962f09cfa5f3f13bbb4a9f0c0b2af276342516609411559fb6b20c535

    SHA512

    8efcd15b328f1f1fe5af367ac594736c90fc3c22a6284e938cf1840d2d5d818e36cb8564564731e2bd010e48f664cc4e7d13da1f3e3118e964b81b56a4c282ba

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\libglesv2.dll

    Filesize

    6.2MB

    MD5

    4f19ee3135f619d7accbd780559c2568

    SHA1

    2414f31c9d8450bfd6ffc9cd697a2fb2f159aaad

    SHA256

    f82a9db06d455144181acc83a451882964aaf788f7d25af12f3a66005a6edf03

    SHA512

    91a96b376b5732e8480cb7ab60eb17ff2a7f889644a79e6ef078483ff56b6e6641ccdff985e9a755a05dc9ab745ca621f9d6938abc2c30022484f3ac5a5f7255

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\locales\en-US.pak

    Filesize

    336KB

    MD5

    adaf6240c0e96447ea230c07105f1928

    SHA1

    295dc371b377da1d7bc8905ff44f1021f5737f3a

    SHA256

    c2f4b690ea75ca61d94ecf44d2900573a44ea19d37964c7117bc03c963a834b4

    SHA512

    5a624aeb76bac7762a9a7189a9a612d58f12d1fa2fa8079977b85d50684524b2ce1d0e174bf4b0220540735331fa286cce8ee527109a9ad95f034245a26ae23f

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\resources.pak

    Filesize

    8.0MB

    MD5

    9e054333002a440fd4a6b8a0a34e336f

    SHA1

    422d50d66f85e7780008d9608db19b4b6e2acbe5

    SHA256

    7cd9597e92bbad6e6198d2cebe7bae6cc2fda9b1a3f6dff9f2bbcbc4a788f6f8

    SHA512

    1b589f0f7c7f173b55ba40c21af053508e363d905951d1f92c666e8a7770e026fef01deb862b6c6fce1bdf25987fc9cd8d5eec06605ef0fd19cd79787cd07a1a

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\v8_context_snapshot.bin

    Filesize

    727KB

    MD5

    fd64816bf6289934b9f26887f8b54459

    SHA1

    80769d71177e0cc830ace1af5224bc3c3c29b6ef

    SHA256

    fbaa11c191477432ee74b8d80ed49c8f3aaa305d253d7fc6c63f2d6746ec9541

    SHA512

    040a7dfe458666d76d7a65b1dccaa64e600b24ab8cefbbe301c8f161568fe047e79c893b919ead38409cab008da8c36cd6bf1f40ef4ebd054677d7d98211b045

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\vk_swiftshader.dll

    Filesize

    4.0MB

    MD5

    758815f9026f1bcd24f9c2bec4b58be7

    SHA1

    89203da42064e258e853025a35c62bff96755b83

    SHA256

    5d123bdd0a8245bbaa63e9ac0c1f50e5db816f9e7cac0efe2fd63c41d99625fb

    SHA512

    2b85ba506c5c9f363d17821492fa053cec9854427eaae3da0f457aa08827356fa825d7d0fdfaca2b03b3be8cf212e398f902d27f5c431d12cf17809391cc6fcc

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\vk_swiftshader.dll

    Filesize

    4.0MB

    MD5

    758815f9026f1bcd24f9c2bec4b58be7

    SHA1

    89203da42064e258e853025a35c62bff96755b83

    SHA256

    5d123bdd0a8245bbaa63e9ac0c1f50e5db816f9e7cac0efe2fd63c41d99625fb

    SHA512

    2b85ba506c5c9f363d17821492fa053cec9854427eaae3da0f457aa08827356fa825d7d0fdfaca2b03b3be8cf212e398f902d27f5c431d12cf17809391cc6fcc

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\vk_swiftshader_icd.json

    Filesize

    106B

    MD5

    8642dd3a87e2de6e991fae08458e302b

    SHA1

    9c06735c31cec00600fd763a92f8112d085bd12a

    SHA256

    32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

    SHA512

    f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\vulkan-1.dll

    Filesize

    812KB

    MD5

    a3076e21f7c3aaa131b0a67e0988935a

    SHA1

    590479fe8d11cb4e86a7fd03e954286c42b73579

    SHA256

    3c701284065a664a853f595497bcfee9f6612038c41761bed601ef607e4739b9

    SHA512

    63b5d55aa8e5104e2cb5e188bf0f73c4d3e4b3417074226f40420bef0d06a490141be0fc1f806c39935d97cb1960c7a26f0726b6800e105ee4efeccd0bb9c2e5

  • C:\Users\Admin\AppData\Roaming\rod\browser\chromium-1033860\chrome-win\vulkan-1.dll

    Filesize

    812KB

    MD5

    a3076e21f7c3aaa131b0a67e0988935a

    SHA1

    590479fe8d11cb4e86a7fd03e954286c42b73579

    SHA256

    3c701284065a664a853f595497bcfee9f6612038c41761bed601ef607e4739b9

    SHA512

    63b5d55aa8e5104e2cb5e188bf0f73c4d3e4b3417074226f40420bef0d06a490141be0fc1f806c39935d97cb1960c7a26f0726b6800e105ee4efeccd0bb9c2e5

  • memory/4476-132-0x00007FFE03CD0000-0x00007FFE03EC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4476-133-0x00007FFE03CD0000-0x00007FFE03EC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4476-176-0x00007FFE03CD0000-0x00007FFE03EC5000-memory.dmp

    Filesize

    2.0MB