hxxps://cdn[.]discordapp[.]com/attachments/896172142138376233/896530657084342322/Electron[.]zip

Analysis

max time kernel
425s
max time network
987s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
31-03-2023 22:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://cdn.discordapp.com/attachments/896172142138376233/896530657084342322/Electron.zip

Score

9^/10

evasion persistence spyware stealer themida

Malware Config

Signatures

Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 2 IoCs

evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	JITStarter.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	JITStarter.exe

Checks BIOS information in registry 2 TTPs 4 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	JITStarter.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	JITStarter.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	JITStarter.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	JITStarter.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

Themida packer 20 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
behavioral1/memory/2440-119-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-121-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-122-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-123-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-125-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-128-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-205-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-231-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-233-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-266-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-303-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-333-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2440-334-0x0000000000D90000-0x00000000016FE000-memory.dmp	themida
behavioral1/memory/2784-335-0x00000000008D0000-0x000000000123E000-memory.dmp	themida
behavioral1/memory/2784-336-0x00000000008D0000-0x000000000123E000-memory.dmp	themida
behavioral1/memory/2784-337-0x00000000008D0000-0x000000000123E000-memory.dmp	themida
behavioral1/memory/2784-338-0x00000000008D0000-0x000000000123E000-memory.dmp	themida
behavioral1/memory/2784-339-0x00000000008D0000-0x000000000123E000-memory.dmp	themida
behavioral1/memory/2784-340-0x00000000008D0000-0x000000000123E000-memory.dmp	themida
behavioral1/memory/2784-367-0x00000000008D0000-0x000000000123E000-memory.dmp	themida

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Software\Microsoft\Windows\CurrentVersion\Run	chrome.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2440	JITStarter.exe
2784	JITStarter.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Program crash 4 IoCs

pid	pid_target	Process	procid_target
1896	2440	WerFault.exe	42
2324	2800	WerFault.exe	106
1524	1496	WerFault.exe	111
680	1340	WerFault.exe	113

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
1544	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
2000	chrome.exe
2000	chrome.exe
2440	JITStarter.exe
2784	JITStarter.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: 33	2188	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2188	AUDIODG.EXE
Token: 33	2188	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2188	AUDIODG.EXE
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	2000	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe
Token: SeShutdownPrivilege	1328	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
2000	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe
1328	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2000 wrote to memory of 1192	2000	chrome.exe	27
PID 2000 wrote to memory of 1192	2000	chrome.exe	27
PID 2000 wrote to memory of 1192	2000	chrome.exe	27
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 364	2000	chrome.exe	29
PID 2000 wrote to memory of 1336	2000	chrome.exe	30
PID 2000 wrote to memory of 1336	2000	chrome.exe	30
PID 2000 wrote to memory of 1336	2000	chrome.exe	30
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31
PID 2000 wrote to memory of 984	2000	chrome.exe	31

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://cdn.discordapp.com/attachments/896172142138376233/896530657084342322/Electron.zip
1⤵
- Adds Run key to start application
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fefb069758,0x7fefb069768,0x7fefb069778
  2⤵
  PID:1192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1196 --field-trial-handle=1220,i,13853212663053410352,13154560983806254431,131072 /prefetch:2
  2⤵
  PID:364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1540 --field-trial-handle=1220,i,13853212663053410352,13154560983806254431,131072 /prefetch:8
  2⤵
  PID:1336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1668 --field-trial-handle=1220,i,13853212663053410352,13154560983806254431,131072 /prefetch:8
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2232 --field-trial-handle=1220,i,13853212663053410352,13154560983806254431,131072 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2248 --field-trial-handle=1220,i,13853212663053410352,13154560983806254431,131072 /prefetch:1
  2⤵
  PID:656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3528 --field-trial-handle=1220,i,13853212663053410352,13154560983806254431,131072 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1460 --field-trial-handle=1220,i,13853212663053410352,13154560983806254431,131072 /prefetch:2
  2⤵
  PID:972

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:988

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:2084

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x37c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2188

C:\Users\Admin\Downloads\Electron\Electron\JITStarter.exe
"C:\Users\Admin\Downloads\Electron\Electron\JITStarter.exe"
1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:2440
- C:\Windows\SysWOW64\cmd.exe
  /C vcredist86.exe /install /quiet /norestart
  2⤵
  PID:2880
- C:\Windows\SysWOW64\cmd.exe
  /C vcredist64.exe /install /quiet /norestart
  2⤵
  PID:2080
- C:\Windows\SysWOW64\cmd.exe
  /C NDP461-KB3102438-Web.exe /q /norestart
  2⤵
  PID:2272
- C:\Windows\SysWOW64\cmd.exe
  /C dxwebsetup.exe /Q
  2⤵
  PID:1556
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2440 -s 304
  2⤵
  - Program crash
  PID:1896

C:\Users\Admin\Downloads\Electron\Electron\JITStarter.exe
"C:\Users\Admin\Downloads\Electron\Electron\JITStarter.exe"
1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:2784
- C:\Windows\SysWOW64\cmd.exe
  /C vcredist86.exe /install /quiet /norestart
  2⤵
  PID:1336

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Electron\Electron\README_IMPORTANT.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1544

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fefb069758,0x7fefb069768,0x7fefb069778
  2⤵
  PID:576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1184 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:2
  2⤵
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1532 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1508 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2288 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2280 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1368 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:2
  2⤵
  PID:2816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3552 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3776 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:8
  2⤵
  PID:272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3804 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:8
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3212 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3260 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3796 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2692 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4260 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=2736 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4940 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3272 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4996 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=4780 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=4716 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=4700 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:1364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4744 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=2468 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4868 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:8
  2⤵
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=3464 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4276 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=4596 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=3320 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=2816 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=3572 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=3244 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=4784 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=4008 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4116 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4112 --field-trial-handle=1204,i,7662190306821732299,16355017104088461315,131072 /prefetch:8
  2⤵
  PID:3004

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2688

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:2648

C:\Users\Admin\Downloads\Trigon_Evo_Installer_v2.5\Trigon Evo Installer v2.5\TrigonLauncher_v2.exe
"C:\Users\Admin\Downloads\Trigon_Evo_Installer_v2.5\Trigon Evo Installer v2.5\TrigonLauncher_v2.exe"
1⤵
PID:1580
- C:\Users\Admin\Downloads\Trigon_Evo_Installer_v2.5\Trigon Evo Installer v2.5\Trigon\Trigon.exe
  "C:\Users\Admin\Downloads\Trigon_Evo_Installer_v2.5\Trigon Evo Installer v2.5\Trigon\Trigon.exe" {Arguments If Needed}
  2⤵
  PID:2800
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2800 -s 872
    3⤵
    - Program crash
    PID:2324

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe"
1⤵
PID:2380

C:\Users\Admin\Downloads\Trigon_Evo_Installer_v2.5\Trigon Evo Installer v2.5\Trigon\Trigon.exe
"C:\Users\Admin\Downloads\Trigon_Evo_Installer_v2.5\Trigon Evo Installer v2.5\Trigon\Trigon.exe"
1⤵
PID:1496
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1496 -s 772
  2⤵
  - Program crash
  PID:1524

C:\Users\Admin\Downloads\Trigon_Evo_Installer_v2.5\Trigon Evo Installer v2.5\Trigon\Trigon.exe
"C:\Users\Admin\Downloads\Trigon_Evo_Installer_v2.5\Trigon Evo Installer v2.5\Trigon\Trigon.exe"
1⤵
PID:1340
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1340 -s 772
  2⤵
  - Program crash
  PID:680

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
PID:2524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fefb069758,0x7fefb069768,0x7fefb069778
  2⤵
  PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1200 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:2
  2⤵
  PID:1264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1528 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:2724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1648 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2264 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2260 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1476 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:2
  2⤵
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1196 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4032 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:2424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4152 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4060 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=2688 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=2564 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4704 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=584 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:1364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3276 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:1048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4904 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4884 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=2748 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=2560 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:1216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1180 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2036 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=1372 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4876 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:1372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=1456 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4904 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:1580
- C:\Users\Admin\Downloads\dxwebsetup.exe
  "C:\Users\Admin\Downloads\dxwebsetup.exe"
  2⤵
  PID:2148
- - C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe
    C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe
    3⤵
    PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=1864 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=4356 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3980 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4884 --field-trial-handle=1328,i,4142084457072227677,15779744210794487799,131072 /prefetch:8
  2⤵
  PID:2700

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1984

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x170
1⤵
PID:2572

C:\Users\Admin\Downloads\dxwebsetup.exe
"C:\Users\Admin\Downloads\dxwebsetup.exe"
1⤵
PID:2620
- C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\dxwsetup.exe
  C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\dxwsetup.exe
  2⤵
  PID:1008

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:1824

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
PID:2592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fefb069758,0x7fefb069768,0x7fefb069778
  2⤵
  PID:1868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1132 --field-trial-handle=1124,i,1700982380411500034,7034807144058289610,131072 /prefetch:2
  2⤵
  PID:2472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1592 --field-trial-handle=1124,i,1700982380411500034,7034807144058289610,131072 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1516 --field-trial-handle=1124,i,1700982380411500034,7034807144058289610,131072 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2104 --field-trial-handle=1124,i,1700982380411500034,7034807144058289610,131072 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2112 --field-trial-handle=1124,i,1700982380411500034,7034807144058289610,131072 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1392 --field-trial-handle=1124,i,1700982380411500034,7034807144058289610,131072 /prefetch:2
  2⤵
  PID:1508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2280 --field-trial-handle=1124,i,1700982380411500034,7034807144058289610,131072 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3904 --field-trial-handle=1124,i,1700982380411500034,7034807144058289610,131072 /prefetch:8
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=1864 --field-trial-handle=1124,i,1700982380411500034,7034807144058289610,131072 /prefetch:1
  2⤵
  PID:556

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1572

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:2252

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Virtualization/Sandbox Evasion

T1497

Web Service

T1102

Credential Access

Credentials in Files

T1081

Discovery

Query Registry

T1012

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

Filesize
1KB

MD5
55540a230bdab55187a841cfe1aa1545

SHA1
363e4734f757bdeb89868efe94907774a327695e

SHA256
d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

SHA512
c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
61KB

MD5
e71c8443ae0bc2e282c73faead0a6dd3

SHA1
0c110c1b01e68edfacaeae64781a37b1995fa94b

SHA256
95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72

SHA512
b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

Filesize
230B

MD5
05796f625a023c87f0cfb540300d9d01

SHA1
283dcfdaddf63c950d33356af0db9dd84cbc084a

SHA256
2d28970bff475e7776b139f2b379485a2d504d1b146129ffb7e6c4a06385b980

SHA512
83573019f544aea88043f4604be8d9e4ba7819fd7955117b6b69f6fdf91929c45b4031bac887e6ab01ea248a926d7d56d816fe0c5cbb588c6a76b13f5e47f41d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
a57771969a30fcc4d2b5ebffd5abdb3d

SHA1
e5ad5db1af0e8e1dd953d6bb929b47cfd3916eb9

SHA256
6a70fd59c06cbe56bed3b0de2f79250b0ec92eb10fe89a7f1f325a4b65f348f0

SHA512
6b360a70a626df44e48ec51f1a38a6098f5ae14c9f3485cd8b5d9ee7d3979ff5cbe732623028b2c20974f7b3db5db53fda6df33bf17d2a8e4491f7c4945a393f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
beaca07adebc81f93155ef0c77508687

SHA1
67ef0d577205ae98dffb1d71f4bef3e53da9de98

SHA256
07c69f34baa027aca9930270c5e0bf682a79485b64e67d6fea5fa445dfaefe32

SHA512
d537c02c52d5e3688bd6aa637b85e59284987bed4a3ea4b2c3c57fb39b69655da4ef40b7aa743d854070290ce8413f520e955cc9d2f54c2000bd50167fb7e757

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
421a9b94b05b9c2856de957d0c38ff85

SHA1
ca823c4300b5bb90eff4fe50bb643faa7c704c6c

SHA256
75d77540806ff0d4c4091897319e563979c4559f0906cba7ce5fcc673e8535d9

SHA512
b70fe27724496fd257e7522bd74dc4050ef3bfc7f76c8626e0ec0aa570622e031bf69f18b0623b917f44837c404c98d31dbaa5f30285d1c5343020ed05e34e44

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
52c4a2bb6c6017d80f3cdc84324b02e2

SHA1
835b942cda72324091e68aa03a1ebdd4268a75dc

SHA256
c28d292d5c9889f9a2998a245a71a6ef5910ae08b54254a510bfbb00584da413

SHA512
1289cb65d55ff23cff10397cc566dc2d835dc99008e6e833ed658e04fc6175a849b62dcb5944ec9ad0448aa4653c42298c879fac752dff11d2a2976241025055

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
32f5c8669ce03bcee9571510b77262d7

SHA1
bf9aae41c53d425ee9a03619c42ad0bc62ce99d3

SHA256
97a393a3e86bfe54972bc11e570a01b0239c880ff524a2356a61265515afe87d

SHA512
aa7b5c44163de8aa77d219d33bd31a0bf6d6d968396f95490047a07f25da8baa355048994ecd2bbc0ed7066937a0eb1dbab3050f9dd98a7435f17920d1515950

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0d5765270e0495bc2f5871e71052202d

SHA1
a6912b98a17c17c74f3a848c37484c88f9363659

SHA256
46a40e5ee84587b34b3258b0309f7ba01f05d53740dde5f26dc3c3a4140dd235

SHA512
e1745faba5c322876a19c86eade7ab80f08ab9fdba2e8f242a3996a8b13a34f4bac77410aaf293a96f5174c71ef1d43a8731a628c0d4b37190c9d663f44bd77a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c3275ec86b82cf4d25cbd1cc8d4512c2

SHA1
ac96fd82e8eddb8f6c4cb10301ab02bd868d8a12

SHA256
d714d1fc61d76963e862bf4d2883e136f0ec0914efd30796319780d6abcbe70f

SHA512
1f15d290fb3e5a56be4e749506844166ac78aec600a964d51dc6db134292c72aa8b4ea3c7ca388361e6e1c87072c4083020969f3f5148788c5803debd76b75bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
32aea0db7fc437b75fb7bf13f5306ac3

SHA1
e5b1662115a59d53b62c36b68407223eb48ab423

SHA256
8a907ac0b577d4b43eab4c49311d4f92a9a1c723b359ad5b4de721c27b70e6bf

SHA512
5ef2d35c6267049f7ead01b526b73d7207d616d59f0644cec72571e3bc47d086e6a83cb5b1bdc148c569049d69c3f398c81538dacefbef516a22e255d99b92f2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6e964abd257d51076b402a689ddddfcb

SHA1
d0a8357103fdf9eee2015b47e7d3228a738dbdcb

SHA256
45d7954b8ff5dbc75131a92e30e2a665fb0de5da7e66594b820cfc45c70ccfb0

SHA512
20ae0b07ed260abbf32a35db949109e83d1e6fb248193f2df11d8e0427694131b6103c961648c375a5f04c5d1fddda40901dd1e807eba37a175bb5cf23b236e2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b5a2b6bb8acf08f2fc0d928ad7a48804

SHA1
f741c055e073d17761c39365c818646115f9ec1e

SHA256
8a8d1f50f029f67cd79e5b37156cad29812995fcd4f93ffafc4dc85f79c9ec29

SHA512
cde2196d1634df26c57ce18b2704f6df09f416f4fdc660718271f13e01aede6d3f935b85bd72fd9284eeb94b9d9661a10b47af7baff1521fb0813d762424df1f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b9217224294dec871eaf0edc1c83c0f8

SHA1
6d44ffa29e719488537be30dc80ba1504a3054f5

SHA256
80232d2b76b2b852769cc279b22973f2a2e781ba49a0212c7ca50b4ab2ad99fe

SHA512
aaf32a5c2347b4ca944149c13907cbef5cca8c54a40edcec4235ae715a3268fc983129d14bbca8ff51123937ba838d9fa4429fceebb08981461f59c4398f4db5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ec9a99044f4f17326fc0efdfa3d37b94

SHA1
613ca02cdb60c0ce94bd5d6786ebb83435ffcec5

SHA256
ab321cadd8acdee451c95986b689e18d1cfbba293a26696c40bf7c4643c44479

SHA512
174653e0f402210bac7820dce8cbc56f93dffdc1150973698bd2f75f05632a79e5b9da84e728038bff6bdbc6a157d91c855498a519a5e6e7266af5fc1d44dfc0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
64a7230e024345e8eb307e35d6018a60

SHA1
35c95441b142a289923c72780b0a74feb54851c1

SHA256
071b49d154201617a9ba865df2def15d5ed60318044f6c8f187d3fdebb82b945

SHA512
5b21d0d46ed5f96f355cdc5d592971176aa304bde521f69cfc5551d068e4a0bc91af7ff0e13177f7ab76857865dfb1e763802b3be5c608e7b68b6c01a530d389

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a2fc4c6a267a1e85a3cf1863b247767e

SHA1
e076f884c0b1db5a1a2c8c98bb8641cff8c3ea25

SHA256
ac6958d86d3565f65b16e0fd1bf0b043310c1211db2cabdf0ffa3fb76a1f8848

SHA512
b261b51fe4035c7f5e78ac3345112c1569882bc96fe1c17b1c9a7216a91028767b3c149626c767a3cec3919ef20c847b25e7011efe8136ec516d11a00795af9d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f4e96f61e5d0d94a68a2d0fa0e7cb09c

SHA1
e9f980099d3a6b8bea05c3a15632895a0e9b57a9

SHA256
f283c6c8a49fcb1fc9b1dc67f486963da2525487cb2cfd173373bf8898d3d4d7

SHA512
ceb79738be04231a0475f8b1b998cddd7e220b34118bae4eb91a186835c0d676e55cfa9f7a610b3fc896d144d9fa922cba2d4eb12ca5c56b9959c2819a498923

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
53c619bfe8cb66e3530ffc5aeea3aa5d

SHA1
820863a57d81bab59e0d70c2523e7b4ddd14c30d

SHA256
918bf5b6be694f887c7d8e3e8892baa9cc6020c01e08b74f9f05168387f2d080

SHA512
43b3ec21437a26b2f17b48da0229b67eeece90a11549f8399f5c22cc7ab9ae1f5716d1e7bb8668f7740a30e6b1501478d541e713279cf299400b25050ed83d05

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bd69098cb704a520bd8c549cc1a2e814

SHA1
42570030f4c90798c5bed465b880e9925766040d

SHA256
a80930924eed1fa4d0666c75692911e732c020cb9d9cef64206dae983d9ea1fd

SHA512
491e2c96984f1dd9256d42116fbaf57d781a0b246b6a1d201e8529af55a71a867814b1874af4402fe8e82121f8cd0e807e7a2fea2b2ce429d2772afff1f34a4b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
73e604a474f11ee8b9542b9b1b72ed1a

SHA1
a1a4a916d03c605951350b45114dee4c7e4279af

SHA256
0bda277deab2be09cb823a6fb495a48ff3acd78c32e4df188656ccc915a7a93e

SHA512
14aa80302b2ee65b3228357afc8bbe66d6d159e8bf6776850cd608dc64ed2579956872a7f775735f373042e76b9ca70b03a401fc80568e7744f1eb27a2de26cf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c4916ffaeed41a9a6bb28a13c91b7fe9

SHA1
82c2b1d4ed67c703e9faac6c758ffa22f04c37bc

SHA256
74ba1dd84cee8faa2042170114dd64ae3ff6c6d0a2ef7db2b2f78a437c433b32

SHA512
a9ab11ab7beee324b0b9cfd87c73e71bb2eb6697d0fc4c1cca9fd880e427cb25f7bc02e9732ced704c002f80d4ae08c3a43e546a34c7a0b2b11dc729e5a0b64f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
57e1067e054ca271f515f5302246ac3d

SHA1
9529397929ed78da3e2270b14f23f97d39e5bfe5

SHA256
a5a40f73ea762b215313e9d0a1ecfb777a6eeb7ae1aca27fc322361a02adf160

SHA512
2941f3aa8baced3d9612481a2e35365bbcf6348903e279ca03d140bb22ecad8a7982d270cb90c882aa6e88c1fbc45bb6947f1e491e279d23a9f985914eeb400a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
50c27c594cf03bf708a3bce340e6ef6d

SHA1
d3b49585a7759eb4114a252f86659f7d2347a2d7

SHA256
fb961c33e907684508d8790ec42b24962f2fa3745dbc6b9b7396739f61040cf7

SHA512
98273b8a47a68c76183fb268a61ce949beaa89e2581c3d83cac5d5882c3bee4d26b81c96156773de959a9c32f61bdc454463b64a85bbc230a9296761aca8ac01

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\47d5ed0f-f4a2-4e04-bdda-2fcd46a0314f.tmp

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\757c2866-1dc2-473b-8a90-13ea9bdc9d11.tmp

Filesize
105KB

MD5
4b850e288e031fe342b3df3387c1efba

SHA1
e5b07fe322a43806df511f0518464044669a540c

SHA256
23353e5f12c07d28dcfdebee9bbc4aeef0171e726fb96552778d6da2fae86b34

SHA512
2cfca5f146d4a64b5e4b7f0f8027fe745d3cd9a1c98479f86580153c620e31c49ef82a3093e7bc1754d947049e6e551f3d5eabe72387d1b2dda9cf1b4e91bb9a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8f358ee2-347f-4af8-ae0a-bd96166b9b3c.tmp

Filesize
105KB

MD5
b4f7d5650067a30214b3416935695842

SHA1
77b58953d13f539cd2fc998ebeb8f4f45bf6094a

SHA256
30d283199493373df6c42c2c3d24103ac78d21dda8e30f5d5b075fbe002c12ac

SHA512
d779da0933a3902db53ab788fdd38f8f2ce75a47fc9cdbc91adbf26c19246d65e899780858f1e9b966de99a79739a3bb17b96e591ebe0be0da1abf9941e615b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
4e466fd85d75f2dbe028b3928e8d778f

SHA1
ec495673585b78f478cb124657160be66a6bad31

SHA256
0f540d79e6b6ba7c07aa6390d7f3e0f9a1484ed30e9ca5c092b954468fbeb3d6

SHA512
501c696ce4e26a74e7bb0ae863e068df41db65148d2ef6502a8427ccb8305dd68976713519bc4472cc023f792c1543c47be8bdd3dfbec9cfbd34fefa7f1ed964

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
4e466fd85d75f2dbe028b3928e8d778f

SHA1
ec495673585b78f478cb124657160be66a6bad31

SHA256
0f540d79e6b6ba7c07aa6390d7f3e0f9a1484ed30e9ca5c092b954468fbeb3d6

SHA512
501c696ce4e26a74e7bb0ae863e068df41db65148d2ef6502a8427ccb8305dd68976713519bc4472cc023f792c1543c47be8bdd3dfbec9cfbd34fefa7f1ed964

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\329123a2-389e-42bb-9345-c2b3d5a895ff.tmp

Filesize
8KB

MD5
ce30fb1d6e691ccc52cca47c6b13c23c

SHA1
303d83e74095897ed98cdb6ad459c27606967aab

SHA256
d6489dccd499ee649d5fda836f7e6403801afdaaad6f40b25497f275a7368450

SHA512
6ca96ad2dbb946e6025f5eabda9bdf6d240cbb214369cf3f89593455bb2a4edf75273247f42a15384976076a0e9c8abca3cebc65a3fd36b5ad553120f78a0d03

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7571f275-eee8-46f0-813a-3a89aece861c.tmp

Filesize
8KB

MD5
587ff9cebcf13dd1c1564d891b042fbf

SHA1
c46ecad242743b865df81ee0f88adaa98afc72cc

SHA256
542a982bc2291977980d2abcb9386df91bd8efe5c389755fbc5efe9bdcb46cf7

SHA512
7b0770e132f284abc9030ca980f669e3670b5adea43cc0dbb8bce59509deaa2d309f185de7a912d0f69f9407eb7943cab801cbeea72afd362b5981b41c506cbc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8b3a61a2-91ea-4490-b9dd-8f3d829ab80c.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0

Filesize
44KB

MD5
19db5387538d703b62f1b3ba31261e7d

SHA1
428335f823292f9716adadddc9f558253deb2633

SHA256
0cb3db9115dd85e171fbdf3f53ee372566929ae4329ddd2d0bd8c272ce9139e8

SHA512
1f60057c65635062ac260d82614178f8cb61f304545c9188fdb87b1863e11f4e792eca25b602f7b2392898b91f24d4276d23ae2c6274f96b060b4c486f26a468

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1

Filesize
264KB

MD5
347ce92bd75e928c71febdd2edd01844

SHA1
f7fbc08d8a9a53a6bda53fc9124edea91471d588

SHA256
4d2c26dc41bff979216d72e5f0b9f393ef6ee8480ca69e0fd46a9633c0f095c9

SHA512
15a08407b4c56ff5b64b2a210174d7bbbc077e22f4473b7163a1aa4d8bfad855ff8f95c002893eafd5c7dd290e793f95372f2f9b3a9e1f362038e4d8d66bf4e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3

Filesize
4.0MB

MD5
5e7466fe562a0aeaa5684acd0f173a71

SHA1
cbc9e2b71cb65fbce31dbe0cd6c06997762fbc0a

SHA256
679acf04123098b98d7c9759f782d2acd813f08f1a13d82a7dd2ed7b9dfe01c0

SHA512
1bb06997cfea714a6d314f1eec3e1cfd5a28b9e1573fd6988e68b67bfa5bff32419fc39f523e092eb04376f2a1abf9e09e67820e5d2a3c872e1aabadf3ac87eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
0c83e5835e4ffa11c684493a57428ec6

SHA1
f27053b32eed7db79774b026aca3c1b8d5100e0f

SHA256
157dd202d8c230f08bad8cf09df3ec32de4653b059df9ff2a60bef99717ed704

SHA512
b64fe06a69cbfd9b417627d0f7c96d481177aca925eb4ae2833c329d5db355b319ee7fe407888635a560ac5c40301ac400e63363c00a669fc84522e62a4128b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
c6cbdd5631ac65d4e08459a3850d8656

SHA1
cfae4a5a9bbeb1c446f1e84e5513350b4bf75f9e

SHA256
863142b7596be5280c4749cdd06a6c9daae26927d192202f1b7a44a5e35faeca

SHA512
2f7c6dad5a0b9acbe108127d0bf249798cef4b174870006c98df71bcc7ec09224126b1799829e77076c1ab179445764eb4e8417546bd1ac23b320a47681ce882

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\000011.dbtmp

Filesize
16B

MD5
6de46ed1e4e3a2ca9cf0c6d2c5bb98ca

SHA1
e45e85d3d91d58698f749c321a822bcccd2e5df7

SHA256
a197cc479c3bc03ef7b8d2b228f02a9bfc8c7cc6343719c5e26bebc0ca4ecf06

SHA512
710620a671c13935820ed0f3f78269f6975c05cf5f00542ebc855498ae9f12278da85feef14774206753771a4c876ae11946f341bb6c4d72ebcd99d7cff20dcd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG

Filesize
247B

MD5
10b00a6afb9a80a18582dc052730e93b

SHA1
2da87f78b767ea0a2456ab48f40b56d1bdce18aa

SHA256
3dfd2c337f9d2abaf57fd64cec6cd9dd2b19189ee5024aed05c9dbb00ec362f0

SHA512
84e5b07b4cf59500a3386c3dc66238c13f6335959b2a7d5065a19b0da22528a7d80cf88fda513f6ed17048c75c78a657ffa3b1233f4aa76404429cb3ae047834

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000004

Filesize
50B

MD5
494e626a5079642efed0f0c7f38bd4ef

SHA1
0cbead74a33ad551eae3b25c213d3b080535589b

SHA256
9ce8bd68fe0b86c0bf2067d549e7b93bc1c24f12bdfd227aba521e9d7e704436

SHA512
659bc9699799757dec5b257d78949d378caf03001890f7ae24d28055cff7175d85f8ea14393048aab1c0ba460082f568e5f4bfacdb8921f006f98989293fe78d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT~RF714e8e.TMP

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

Filesize
148KB

MD5
8ee36353f19e8ac369b6442fd94ffc48

SHA1
98604cc3343ec605d42351cd54b0c66bc32490b3

SHA256
bb800fecb867058beed84086ae819874c946ceed0eecaa0de7d27b4eaac98fac

SHA512
b9f2aa7316cc31a6d443a19ac0dc9296cdfd166b41d2648dccb2d0c4e2cedcadb779d4c7e2adbe38ed083c97c19a99985e7d32a1cefebbe327ebacacb3a0e9cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_nnxou.taitlastwebegan.com_0.indexeddb.leveldb\000002.dbtmp

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG

Filesize
136B

MD5
718526f23b918a9f03ef6b6a8e0cf803

SHA1
117f23ca4fbd9a050a13a787ca9d7c46bd0e05f2

SHA256
5d9f9e0d9aea56d966169cc27686148c0a1fd7feef90276102f9a9801b01f04e

SHA512
a593298a18a97bfb4193a02af4db0db7b749214d87a6a9a5d00c388e8f5c066471f9c463ceef2fcffcee17f2af0002eae18caf66bc7bb5e2a470c331394aaf46

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000004

Filesize
50B

MD5
031d6d1e28fe41a9bdcbd8a21da92df1

SHA1
38cee81cb035a60a23d6e045e5d72116f2a58683

SHA256
b51bc53f3c43a5b800a723623c4e56a836367d6e2787c57d71184df5d24151da

SHA512
e994cd3a8ee3e3cf6304c33df5b7d6cc8207e0c08d568925afa9d46d42f6f1a5bdd7261f0fd1fcdf4df1a173ef4e159ee1de8125e54efee488a1220ce85af904

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor

Filesize
12KB

MD5
76efe1cf7682121a71d0e7770406cffb

SHA1
a6f6c47b1bca7cfcd7b64f0452d5991b1c583ee6

SHA256
2002081dd3f6e7b539a5b610fc80af9c2716e144ef2e996640bd27dae6e944f6

SHA512
25a718a6d641358c1159d860de83e1d402444c5205861441fd646b2ab361303c61cbef66ab15091f368b0e1ee72cfe38251966063394cbe523aef745689f305c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal

Filesize
516B

MD5
3734fc9c7440029873072a9d6cf010d2

SHA1
c1f1ee5f94cb41337269e031a1f0ab37915272ab

SHA256
ab9f4d44709d37c4fe3020f3887d4516e76fec30235b2076517384f23a68f3f3

SHA512
45175455dacd6d025e8cb3faffe345fabee2c2ddf0afcf513cc793684c92eb6923a1400c87a2837fd1e253c25f73758d2102aa0f76500b6115c17354e976398e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\2732c182-faca-4781-b396-3f3f654b6ab8.tmp

Filesize
10KB

MD5
51529dcc89712d5e4cbb0c7ccfab28c6

SHA1
b90e49d729f003348b1049134a8fdb21e07081f1

SHA256
8e3e90a3b97e67dbf93c73ecd021a66c1ab50ccb7f7a32def1daf6c9ec8f21e5

SHA512
809ac8b48a7208c1e8b1313805c545ffac86c240e3a52db56d93a6c3cc96c053347f21de76f125c1e63cd631ad69a5fc2c1a4522cbef4b29a757e9ad9972c5ad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies

Filesize
20KB

MD5
ed3972a7109b9ab9aeed2ea00585c848

SHA1
23e0e34507f7144c21436d396c67ee9b05ebe011

SHA256
dd2883f0b4fb7e023ab6b569cb23fe6b3eb95458815f42acdb7c3887e9b19a6a

SHA512
05fbd11ac64946d4986ca8cf6e2b115c7cee29ecc1c5c80ab0bddb2f154fd85e5717c927c60ecdbe3f95c01627b7a103b6d984cbe4deee41328c5d764ed09196

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
5KB

MD5
5b140c0bc723c4be7029e1a32e664597

SHA1
da78a6e334f4930753899c5c4f637a31696fd006

SHA256
31cf1ff9c0a7fe80ebd118ba7626b57c0c26ad30ef73d02b69ac55bb292d5b8f

SHA512
2ab9eb0c33347c7539d753546a0a6fb1f108b0d5325f4cdebb0b0823edfa540b017acfcd106d3169f8d9076254e6cc2877e0d0347ded5c5e4b3101799daf23cb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
8KB

MD5
eb85644c021ce1edd5f9eb4ed5ea48d1

SHA1
865d7b510813a7894916c935215b1fee419061b6

SHA256
a8bbe57686338971ab3b6c3e129096d1a10f489d94e64054c60ce8bcbd39b63a

SHA512
a4e8d9f8738535c5efdb98bfd9dc3bde3eba7d43bde1496e5385e1cbaae597f2a23d51e3ae69ef65fa87eb4123b39017d9a1406e69025bb250a1619eca37d0b7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
823B

MD5
498fd0639be1cc37804bbbd8632ed86b

SHA1
6974aba31f6a6de9b79c2db1cee4a76f449e1a33

SHA256
5ae871d373d7ca27657803839bbe6f2a2fd7d92b86c771e34b224a443facedb7

SHA512
c751d2b52d76d33eae0868abe925c0cff90a53249630bbcc89cedddcce83a8736a9a8bdd2c1e11b6c82ab9143602543ada6b36909a9f49d25c8e0d9d3cec98c7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL

Filesize
36KB

MD5
8d2202d2ca39245d12ec27a8d5b953aa

SHA1
fcb4ed7c92d2fac5aada740d9054f6d1b61f86ba

SHA256
35c429afc49a8ead6e05f745d08d38d7e5ad88618e77224860bb237700e8c06f

SHA512
4fdfa5adef8d6bf357323a408a0113db9f6be6e3cf75ba7a8ef1dc1b03d6abd46a9288b52c9c4c098ea04e719bbd86a4fe48b1948198b968636b95454287331e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
d2aaf747b947a0bc1e251af0ce41b22a

SHA1
db2ba2421838af0bcbe165049c68df4a9a7717b9

SHA256
4a37315c8cf7269b2feb3934396aefdbb54fed650e9b3ec1baf4ea4e4be3e42c

SHA512
43ece4a6c26792825272aaec15c3e1069e8b36fbf9c3fc0312a5ffd6686f054b1cb39ce053a3f0a7be58bc47f62074905b33b62c9032321410746e584b1fa984

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
e3477fbaa5aa498d3e261fe70e2d8022

SHA1
2d14fe7b8639cb7173a0c497de729fe6e9950835

SHA256
672477b9256075f89a1d78d94a0e3f9f4a487bc91043b678a94a1752d72fe6ba

SHA512
eb3ac7fe05af918c5100ec452470fd83e4693aa1ecaa9f965f3128abce456cd484aadcb996923376afdf919cbbe15ff36575449a92c395b561adf232871d2540

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
581adce16a565cf43547350fcbd02b75

SHA1
92ecf0207b584dcca4125680d6ac88d4713e3c05

SHA256
61fd45e5847fb2f7a6d7920520ca0dded635297f0fffb2966cff995e2d163dce

SHA512
4122d34a8dad4b5c0c63ecd41bb8ed006b6ffd60819be51b8e0291560df503e958f53a7a458faee4fc6e177a8f9085832553211568a3eb0cb9fc712076a41133

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
e8099f0f5b188f3217af339cc178a2f5

SHA1
025bcc15c3e56bd6195d397263dbaba36ccc9a28

SHA256
bdbc5da3b1b2c16ab49e03749d51cee2270848473403a19cbdc23a916811881b

SHA512
fa267041808704ffbf4b383856ddebb31a530bc64a16ec3683d17da9d15a4714237ee21ac43664317faf6b5b048e3cb1dd31647834571dfec3fd28d6ed5d8282

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
a288fd55ebaecfd1b0334e55b4bf8a35

SHA1
42ee73e6ec0a6ba105b755dfe9cdecfd130f55a7

SHA256
0b70123b31a6b58246d94d78824c229f8e8a82f01154b3539139329f5458f9aa

SHA512
495673309066a7f6741497ec6413b31832611a323ef2fcf22a71dbeaccc0be10bbd77c09d8147d95ded709e7adcd0480225edd5ff875f86b15953ed2851a5305

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
0bcbf23f49dd6e1ad4bb67c9dadb348e

SHA1
eef2da7a3a7841461d33cac35109939733e39549

SHA256
d46ed7edd9e6c7a134e2e156a0491629a945cd7bdbf0a129f13281ba5e9e8b45

SHA512
03c1996239877f8c6affd4a8fc0026b8757f644d36b468a3d63ae032a6aaeed35ccfd55b8853b94771301d12dc88326cdadea47b260f8b8acaa6851e6bdb2038

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
0b9eaa4fbc25140eff3538bcc5ae9d2a

SHA1
72ee6ba854fb51ba066cf0468d816b612f1fb2b3

SHA256
6dbd438246626d0a162291791c2dd332a5aaa424dbe4efe2e7cb1430baf5f481

SHA512
878e31c7898cd1150de0aa46cbd570159ab515503e361ff595362983dfe218d6042732296e6885848bb99a7d49ffc499b88f248c8643833fce17536dd4586e06

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
363B

MD5
9de0def1040d4c0bfaf65800d0d7d03e

SHA1
1b903c203856f34f785ba0461cff8f2c7c0b964f

SHA256
bd76b70b94d87d7d3e820f466098368bf96655d3a80a820eddea21ffba340735

SHA512
fecaf528b26d70a3659e5e4f10b6e221e8ece1f912535e37b8b0177f352cce86a95e2e5efa220bda897dbdd64bc88c92e14ea6157f706cc9adc5ed96ce4395c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
0b7c2109b81c6fd775db61c479c9850f

SHA1
08e3de03448bb94c0706244277a0e538c97e2ce2

SHA256
0ec05e6a43586ed486729f0e473ca62591b7b86db2eea33af14a34503ec7196b

SHA512
ae1c63612f5cf9815c2d75101ba285a05048d900be8e8fc87c9b0f46782636f0c8fb29e590677a2ddb5600330a027a2ef3818b572ae2ab6435c2fa3e5c5fabcd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\000006.dbtmp

Filesize
16B

MD5
aefd77f47fb84fae5ea194496b44c67a

SHA1
dcfbb6a5b8d05662c4858664f81693bb7f803b82

SHA256
4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

SHA512
b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
3c1f07ac64357a2d4e4aecc61836e5f5

SHA1
dba7ffdff0f39d1613622bae70f638eda2bffc28

SHA256
4571e11382bc2532fe393dfb6aa160507094642aa593d346d54905376c226541

SHA512
ee691e89476b9eb0489d82da695f465766eac894a8015b08eb7ad1d26ebea365979d80234e28b9560824a7f27c642e0fcc9d36f8674c2f0c85d7af06757c3557

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
0ec7e1dad65a386c71c82dcf7d439714

SHA1
4236caed03af7d18fd53dc67f7e394dac6a2a9e3

SHA256
ff98229d1e9c1aedde36387d22d983a1fd9569ff0492fd4cfe774a4773016b41

SHA512
784661617d75feaea1f58071ae1ab66638982effa7eb32898e2cd4473f82d5c7a7cc625e6abd23271d01c1648651d30d03176b2bd9137d4716d305727f3a5bad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
260b8b15d9cfe96292855094e7074f52

SHA1
8877828a3e941727d59d288b0b895684e1d2de14

SHA256
db02abbe52e6ec55e55e07f32a339b33d54ca56837b292abdf30dbf42f6e9cc6

SHA512
63323e89887949959d4a4b12291f9dc05de263598c11dcadf5a18dcf67bd99715166daa640579da4ea905dc9402031cd2c046ab240e27dd92fb94fe2f8dd586e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
d179cc1b3402902e76a4d14e0f801fcf

SHA1
2a437faccdcfaae79fc165fdf244c6ba3191f0b2

SHA256
aaebfd3a2d4b4039014b818c81aa1f49acfaddb75a287f232c70b16dd9d367a3

SHA512
4e447438e95a28fb4a921e1321d9f55f02069bd03f609da4a3754a25001989b5480772a67ce3c37fdd28bd92f29fd5d3060f459388817b90ef8b3a58322ad894

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
dce4893a678b96429d983a10f7a94cf1

SHA1
263834fba12ac1ea281a4ca03099fe4a66295087

SHA256
38697928e1412cdb5f0ac7aa483ed7787db2ce638d2653b6efe84f16b6530084

SHA512
9f8ca01fc373736fb2a7b236c267c0c82318b67ed733a53cf401acb47414cef0a9993bbf5be40e57296593ceab788621ec7acc4cf65e773b1c4f7b97019c4aa8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
8cd6295c70eef3ac9505f6e0167dc2c7

SHA1
81d8fa4ffe972615d14f957b69b7e3daff8ec2cd

SHA256
5e5769f750fd52e442bcc3743f182c264845453641516e6e94083c51718dcf47

SHA512
11ffe387d953a248b61a8030ce964e453475ea9c0bd7bef6202913f5cf26907cd27246cc204da87aed94b7edd0696f42cc8b2c2374d8b9169a4c0ab7b85790a7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
52bbd607b366229460383e964f066061

SHA1
a4dc2908a65561c40df69f3c668ef221df28190b

SHA256
e5ffced69e40b9b05763c54cead49cb1f8d2d3c72ec6a3a60bbd579b766b4955

SHA512
f2d098456ae3965a334fa38203f132eb493699ae3cbf85dcae26772f2a711b975cc1e8b899eedea6eeae852e3b1d4b82430f30be1abfd5720cd74d8e049673ce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
ba25c980c1e40556d18efb644537e89b

SHA1
1b8bf3b6b670a48984eeb16e96d8a140ee287a72

SHA256
e2e4bb8d011bc76dc55ae7eb9b4d74edf6ca5dcaa750232027012881a862e26a

SHA512
937decdfa1d9d75300a959cb191a8d8c545f4a2a82eaf765d1aee228c95dd1e0a8216cf3ab680a3d27e99636d47947797cf6d966c2dcedb8d181b9ff1d4f9c2c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
b02c022f517547b39153cfb85ce50f26

SHA1
01549d478903c75a3ea437bed254fb9e077e6f8a

SHA256
924bea258b0c5c154756f0d69e0a2bbd2c668610777ba80439a0ae2d4c223f77

SHA512
336234cf91b3adde841a1f45d900b0dcb6704e687f3fc806098f83c7a6ed2e536847ca4a2986437d2c9ff606ebc29bac1dce3e023effd61955aa4b49e964e9af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
c44ac2f1016c86f63f7dfd13541afc55

SHA1
afbce3e4ccb8b8289f6cc585eedd88785634b8b5

SHA256
a74b3ce0d2d7370f67e7af0b80e8258e6a22ac62d19ca1a119f877c218974a7c

SHA512
65e5f441e534e06c0f157fc507d639553bfcefebf45bd9b7437bf2c0abfa7bc00ee21e45e11466aee7c30b1ceab9fd90180b7ba7fc0cf82afa2c067cb01e846f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
af2a29a840f37e22ae2e23c24337fb6f

SHA1
37a5df77f512501d12ac4b417055ff7ce9fc934c

SHA256
b0333af9d499659e06f5ca66a59367013d5700bbcac13c32cea7e3e30944f12d

SHA512
5aed7b0cc46ea1de1ca420d2c54c74a91c949520d0f61597ee62d41372043d686737d4bf3277aa3f7aa83b748947be8536f5a08e64791fc1e0f4acad5d285260

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
ff18430f77d8c8a7f79b83932a81f76f

SHA1
f249b8d31cb73464554a9ce406f3a2e8e5cfcabc

SHA256
b70f2081a4a57cd2d4262ad587496a7f20dab6f3990bb34d21a6278c85b1fa7e

SHA512
5c60170e614cab0016060fed44c8dcd85e44b05d695173b0f1db625bab63d5cfa9f3c2ff0f6562220a2aa4d607b238dfcd04758db2dfa4f18f85ca8fce7fb0d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
fd326c17c6c16be9a9e2c21532578808

SHA1
133cb71d213b0dde963964e6dad7d2267a7e5491

SHA256
576bebb0bba9c76f3d23fcc05ddb70e63be3e13ff22f6b274d19cd51652f5017

SHA512
caaa49e45c58937f6293818a6cb4a2d2f845bb4c99fe97cdadf639162baaa7ab93e69a5380eb3a9e9f70f3e04582799cfc47a846f4c755716a6180b00ba6add0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000005.ldb

Filesize
141B

MD5
38fc535a8f11d7e955ef58cc63158eff

SHA1
c45ad3ee106dbfb65dce7c09b53140f34454cd0e

SHA256
085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8

SHA512
26e70000f77c1b6388dd470f9d7ec6bedc4fc3c43e48efcc853812eb076108bcdd9f50f7a89265e431d33df96e71755ca242dfd0aac16a51d99dea50a5a1e505

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000006.log

Filesize
38B

MD5
e9c694b34731bf91073cf432768a9c44

SHA1
861f5a99ad9ef017106ca6826efe42413cda1a0e

SHA256
01c766e2c0228436212045fa98d970a0ad1f1f73abaa6a26e97c6639a4950d85

SHA512
2a359571c4326559459c881cba4ff4fa9f312f6a7c2955b120b907430b700ea6fd42a48fbb3cc9f0ca2950d114df036d1bb3b0618d137a36ebaaa17092fe5f01

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG

Filesize
249B

MD5
6d51bc5b00d00c6046da6adee29e61fa

SHA1
7f633731d7fd0d2a653873c813d78a5748af764f

SHA256
d4601853392463ec080529bc5d63a4b7dce99afb0fc8ea167d9acce610ed1ccf

SHA512
6bac08ba5690812ebdf5cba1cbd3d64a991fdca1fcf074c63e84316dbeef8778f62cdc933e05a5d21458bde280d48f4febeacf0b280757077aea640938e18758

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000004

Filesize
90B

MD5
ac5ca65c3ca57b518ed4b2967d8bb535

SHA1
2a120e38f4d5b88eef5003739731e3244b9e104d

SHA256
736bbc68d3228bcee4e4acfb6719cf67aac09f05745a957123658b8740071790

SHA512
aabb0beaab621117d70e29804b611d5296ffa799bdcb85ce8165ee28e87eadad975382c46d2a4a3d1bfd7843a20c19a9bd8bdd47ab691a86677dd55a56a45cd9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13324776521359000

Filesize
456B

MD5
dff717a01ba6f5172c3575e71e440adc

SHA1
468a8e91756e18dbc576108fdece520abb0bd440

SHA256
4d46ec7781908ed3cb58b90323c4ad645335083b264821a2d30aaba525cae5de

SHA512
de99a5407f0612a805b41436848e50f419784920fe8350378541dcddbf74d48adafcce2a2a54250a2afe4e153f7154b0ed0449fa0d57770b4bb4fc5b0fb47f0d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000005.ldb

Filesize
130B

MD5
0d30bb8b60f3c477b7f5bee76de87a5e

SHA1
754db054cc38503c0a7b261489b25208749dce50

SHA256
7d66803b525484d42d0699ed1a2370028b7aa21ce173ea3cb9331cb80d01b695

SHA512
fb43e45b6676ea12643127731a1d3fcd783c16b4b6aba0d31ea93af19020248d766ea877a7abfdfe484e70bd4c2ed8d66f44ac2c3da38885b3edbad41ef68c43

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000009.dbtmp

Filesize
16B

MD5
979c29c2917bed63ccf520ece1d18cda

SHA1
65cd81cdce0be04c74222b54d0881d3fdfe4736c

SHA256
b3524365a633ee6d1fa9953638d2867946c515218c497a5ec2dbef7dc44a7c53

SHA512
e38f694fd6ab9f678ae156528230d7a8bfb7b59a13b227f59f9c38ab5617db11ebb6be1276323a905d09c4066a3fe820cf58077ab48bf201f3c467a98516ee7a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

Filesize
249B

MD5
f43a3926f13225e76acdad397d8a8663

SHA1
6fd1b041e5f74fcc8898c9ac910969a88ae7ca92

SHA256
a0e981b2b32ba3ac4b2617649ba6b1d2f483561ec5e8ad8818069292ecf652ad

SHA512
3bf146fecbde42f330ccce9adcaaf8524044fc527d569be50c2627545f95d3174007d6c84bcce17b83d41e1483b629136bb3d0b4d23fca3eb9edb30f28ebd2fd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\MANIFEST-000004

Filesize
107B

MD5
f3a604cc1687a04eaabc91b49ed90eac

SHA1
507d0c1334e11f23da43bb9c8702652511893d03

SHA256
628a12f2ebfd6d19731a8a362956c95803f1d909293f6936542fb458d8be1a39

SHA512
a49c1632af45f2a938c2752aeb67e254e92a04bff91affe95952ba7960a60ec143639565790898d55a5ac4d5eb34c2dab1b93e295840d4e30cf3b16d913a7806

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb

Filesize
136B

MD5
fe382e791274914bee5950777e4f1fd3

SHA1
53b523b5fc87e66f2520a0b5f9ea080072668f4d

SHA256
935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132

SHA512
a5f608fb4f0a1dbc4c5d1b739b1a5b6f50cac1d6a61312b19abf9f601882a291d73524ac55bbe183e4e64db8dcc203d4bf3cedc734fd04bd448cb825d98d1e67

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG

Filesize
249B

MD5
df0a6f73ed99bf5a1c253d8171071acf

SHA1
524f43ea1fbfb5d4db12dc94378ab66c6044eaa5

SHA256
4f9c643424bdc0cc83e111e9a90d16ec998a5e291903f21b4bdd9e68350ea160

SHA512
312ba5ff5c573f9539ab84119220f12fac97e36322c4e5eb9de331889011f41115712e6474c6cc29ea334485b4e8b39a7bf86e972f36bb666dad484c7411a7e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000004

Filesize
117B

MD5
63d832bd47d6e550eaef754596d8fdaa

SHA1
3b11fd4048f84fe5143057e7e90a42c4220e1807

SHA256
4dd9ab33b9f8a5aa6b190ee3a88133be4d10b5dfdeff0c3ca060b825ff6420dd

SHA512
586287b26249591e5ae5ba0847bfcb3c3c4bbfb0cef433ecfb2052bbf0f37527bb72ddc57447c37c6879f50a28c96575b911fd121c3f145a061ff57ccacf479c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a65e7159-f0e9-42c4-8c0d-6de1eb373ef7.tmp

Filesize
6KB

MD5
9e95b81a4f56e5c89561f5c39bb9f621

SHA1
14fc5f6a1a6ee8c7bc39d514458c209133a78c48

SHA256
39e599e07a5029e7dd94309372a6dfab483c94ed4e1813af99a69912f61838bb

SHA512
ac2cc60fcd86b4d5be71ab5e425485a0bcae4037ca652a5563acb757e0579258aabc159c92e25ee7b7d2b3d08c81dd756671eeaf566bc5aae47b0c7eb9fc1133

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a6e13b96-698b-4f47-ba83-738b98d19b60.tmp

Filesize
4KB

MD5
4fd80f700bd47b08afbbd8a908f6edcd

SHA1
841270862d8d84e8beb8e9cca22dfe57e6e32351

SHA256
9fd4868955d1388688e269f53898aba1dcd1ea5992a6b5a2b5b0a2f04aace6b2

SHA512
e4e5d580904ed3d1d7bd885733e1cee520902230ac7a2308b2d3417c4d3177ea9ef07772fa0ff6978c67617c26b7679a0a48943ee52d21f6e816128cf18f41c0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000006.log

Filesize
1KB

MD5
a3d24e7621d25cede2830609db23b013

SHA1
6614f0c8f46853da0a95245afe33e7810fcbaa87

SHA256
abc6b7e4ce7232efcd21d4d2df7e1c7c6633dff3af53626fe60353b319b07128

SHA512
6d9ffee749142544263b22f43c59748aab395bbbea6f95e6aacd2d258a6450dbadcf2acce376e30b13e55d39caf606c8492cda74aaacd02e6b349c4eb627f53e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000010.dbtmp

Filesize
16B

MD5
60e3f691077715586b918375dd23c6b0

SHA1
476d3eab15649c40c6aebfb6ac2366db50283d1b

SHA256
e91d13722e31f9b06c5df3582cad1ea5b73547ce3dc08b12ed461f095aad48ee

SHA512
d1c146d27bbf19362d6571e2865bb472ce4fe43dc535305615d92d6a2366f98533747a8a70a578d1f00199f716a61ce39fac5cab9dd67e9c044bc49e7343130e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\CURRENT

Filesize
16B

MD5
a6813b63372959d9440379e29a2b2575

SHA1
394c17d11669e9cb7e2071422a2fd0c80e4cab76

SHA256
e6325e36f681074fccd2b1371dbf6f4535a6630e5b95c9ddff92c48ec11ce312

SHA512
3215a0b16c833b46e6be40fe8e3156e91ec0a5f5d570a5133b65c857237826053bf5d011de1fcc4a13304d7d641bcba931178f8b79ee163f97eb0db08829e711

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG

Filesize
247B

MD5
2dcd7bbeb7d5a99a8110626767ebc2ec

SHA1
0ef1d97f49a047c615a321dc15770bdae83ea284

SHA256
f430198dc1e36d7866fbb4187f323ce6cfdd910788d06ab1b7128c4fafae7cb3

SHA512
3d7bf21872ee575049c40a8ec82a588859ec137fbad46da1cc58d569fd407133324409e725a7f0917c57d120e77322849854410cc7f49fcdee971b450cf74687

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\MANIFEST-000004

Filesize
50B

MD5
494e626a5079642efed0f0c7f38bd4ef

SHA1
0cbead74a33ad551eae3b25c213d3b080535589b

SHA256
9ce8bd68fe0b86c0bf2067d549e7b93bc1c24f12bdfd227aba521e9d7e704436

SHA512
659bc9699799757dec5b257d78949d378caf03001890f7ae24d28055cff7175d85f8ea14393048aab1c0ba460082f568e5f4bfacdb8921f006f98989293fe78d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000005.ldb

Filesize
172B

MD5
fc496fa0be2ef759d8f66ad47c4e8aa3

SHA1
68b12df8934513df301f12586a6bb59d5f7acdda

SHA256
22e9bf1e2d01ec2b6b809206dce898fcfb5d25adf821535c48285ff55c63b41c

SHA512
082c33facbe89998d8ecea89fd11c76c68cbaff7da0449fd64bf2df57ec08629bca2efa0da006e8483dd985292b8df3f5c46cd15cb95db83233999f92449a27c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000006.log

Filesize
92B

MD5
bbe4e609a3636ce7d71d9de9cc157b9d

SHA1
d10da59275bdc3a729d18c618de8646ef8c997dd

SHA256
51e80dfa3755f483b7ac7a7948d65b153f6a9f72f99fb7c531a06e7e5ac4db16

SHA512
6f9ff8d2bf634b9c4f2f076bb30a78e96837bb63b62f621b07595f6bc38c5f39401225e0bc4cc208173c83af196621736a557404fe17883f44745a8812aee87a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG

Filesize
249B

MD5
36060cf617965a5b887a90764869d2fb

SHA1
4d93e8a5d9e899f5ac86c58e7cd2545fad06d26a

SHA256
24302566c76e6bb77424093bc4843ef08e02b3d4d6c6fe0722fdda6c925fabda

SHA512
1b2d79b39ae106a413ea1bc4e4774705a328607a3d8e8899508a6ffa1b674258472af5103ff98b95683d496d1a74b56cdb627c13e1c9bf6896c559668abecc3e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\MANIFEST-000004

Filesize
84B

MD5
be2a12b06745bb5de6254b2592d8ab20

SHA1
19a3dc035140689628e54095af6c4b4dae44b55d

SHA256
29e140732c7fc2d81fb1f506cc94386ce55f27446f9277e66236080cdf6f5944

SHA512
fad84027f46c0d4e4fb0357c15d77f7a86c941042ce538e0e89e5b8c477ed3cb46e262e3a3da186eadbb266c9288965c7299b4dc2a7ae1b346230dc48a7ecdba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

Filesize
14B

MD5
9eae63c7a967fc314dd311d9f46a45b7

SHA1
caba9c2c93acfe0b9ceb9ab19b992b0fc19c71cf

SHA256
4288925b0cf871c7458c22c46936efb0e903802feb991a0e1803be94ca6c251d

SHA512
bed924bff236bf5b6ce1df1db82e86c935e5830a20d9d24697efd82ca331e30604db8d04b0d692ec8541ec6deb2225bcc7d805b79f2db5726642198ecf6348b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
173KB

MD5
55b91717602dd04658b858322d931002

SHA1
2753fcabdac0ed35edd0d81d0ae032b6e565abb8

SHA256
ca1baad4e6d04f72b7695bec6b9e22cb63b091d2eb2699b4a1aba40c349ae5fd

SHA512
4098d8d439fe179fa2aa590d6d3c6cb6d9fa1aa3a6b82acf6bdb19aadfba2a513e1b44b3aa7185889ee0bf63174ff3d7c3f16b926b85b7bbc3ce1a7e8df730e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
105KB

MD5
cf20ea27151c162451a62dfa317b7d7b

SHA1
0a553e1af954792643887e05a629c78ef718f7ea

SHA256
6215e7d3e2abe9c5cceb21107dba15cc9f57dcb57759eb184e3ed993a848de09

SHA512
aa209a9020aeb5e1fbf760aa720ed22f76870b2d1b2af3c8b496bf96410cf8749e2c28c115cb4eda5198ce88122ef2f7ab057c151d5a33291124fd9440926f70

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
105KB

MD5
517b2cf75b1bf3257d55218a54c73ceb

SHA1
7eab9b4f42db62b495e4812cdd50ef98fbac3c14

SHA256
e67691233cc1d1eafc9526fc530ba873bfeb517971a02da36d6356e3cdb729a9

SHA512
49bcd19421f407827d844171f224cf3f2a31bc2bf7d9003377978f5e607885f242cf03ea706a0fc1064539c2b1761307ca7ad541edc6738d76f81657a57d9387

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
105KB

MD5
7e56bc4a2c61bf618ea2361cf5ca61ba

SHA1
a8476b6c7846276f6ddb4903164e563f8afcd112

SHA256
d9962b937e107a003ee5bb218e0cc6073bc18fe667919958c49b39f4399db586

SHA512
99e830308881b59f8b8dba7248ca2f8ad223f77c175ad675e57ce55d5d4a05c5a3e79c5c3e28dca0ef1fa7a099c6aee0f7670d1a61dea5f48c6f18a29d6344c4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
105KB

MD5
81b4b0dc153bf26a969d76081b3b3811

SHA1
bfcf2e681ae467838f0a114a8fb3afc58453c2e0

SHA256
f00b71e64c3463d1b4e3819f1d8e309a988c56cbc51014942dbaff952e9071d7

SHA512
56284a053a82f6fe1411fbaa0b93370df19ba4abf48b540a76ffb532a60480944bb374fc53d7f5101df1b86cd6f019ffe673e6cb0409e9bf7a801bf50d6b3dad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
173KB

MD5
b29b07997eb63f2436d980d2af932b29

SHA1
bbb5a165a351eb46829a0c51f8dc5cfbc2edea08

SHA256
e5c1f86453d48d4ca31863e63293409628df153574698af1b72257eeb56b1c5e

SHA512
eb9687e1d66d6a772c4245495def2c650649ea07cccdc9189353e17b7b79876ffdd372846f2cf6d415314132e7ad5fbb4ef4cd15426eea584517a3ee24bb2bde

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
80KB

MD5
8c96efabef16b9092df85f4828777986

SHA1
0d92704480f952254b4d37c3385d40208a47056d

SHA256
f0d1098e11a0ba32d4bef11a23a87bfcdd1e96efe6b8713a3a8ca384884c1748

SHA512
e708cff46ff9ce2e6744eea36dd028f7b2a3f7601163ad0a0db5a9d33d86c8abb94ddf690a2076641f300344409f50c12810ed970c1c9fc8957976184eb56a92

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

Filesize
85B

MD5
bc6142469cd7dadf107be9ad87ea4753

SHA1
72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c

SHA256
b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557

SHA512
47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt

Filesize
6B

MD5
caf7079256c00013e88966ca94dba856

SHA1
dc629192882559002cdb01e4402067719b7903fd

SHA256
c81a10ba67a9ac06541db7fa8623f0df0d69124f7eb476e0b06ba7e1489d7cc5

SHA512
0f727c7d1c7f2cd95800e8eae387c405521d3ae458523b8c82e7f9d3b37678fb268c0b48db375c0624a48351a908b657115908c2077e59bdd1ae94bfab5898a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\dbd13314-6bde-4d15-bc28-817118dd37dc.tmp

Filesize
173KB

MD5
b29b07997eb63f2436d980d2af932b29

SHA1
bbb5a165a351eb46829a0c51f8dc5cfbc2edea08

SHA256
e5c1f86453d48d4ca31863e63293409628df153574698af1b72257eeb56b1c5e

SHA512
eb9687e1d66d6a772c4245495def2c650649ea07cccdc9189353e17b7b79876ffdd372846f2cf6d415314132e7ad5fbb4ef4cd15426eea584517a3ee24bb2bde

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f6dcc665-2f68-4e6a-97f5-850ba4798ce2.tmp

Filesize
105KB

MD5
d0ee32bb7bbdf8e3362c31e6a2c3258f

SHA1
49b187d8e07eaa3c57129739f83cf2778b0a97a8

SHA256
f6444229e71babda0da999377f6e7afbe2b32ebefb90242916f9a1b6b5430de7

SHA512
8af28b393c24a9f307997a41a4dff256a07098986ad7fdab42c49abbed9970d53ff3660709e230a1470b2423622bb229bab9d758c6249267a4992034a5e61420

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab10B6.tmp

Filesize
61KB

MD5
fc4666cbca561e864e7fdf883a9e6661

SHA1
2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

SHA256
10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

SHA512
c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

Download Submit
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\dxwsetup.exe

Filesize
515KB

MD5
ac3a5f7be8cd13a863b50ab5fe00b71c

SHA1
eee417cd92e263b84dd3b5dcc2b4b463fe6e84d9

SHA256
8f5e89298e3dc2e22d47515900c37cca4ee121c5ba06a6d962d40ad6e1a595da

SHA512
c8bbe791373dad681f0ac9f5ab538119bde685d4f901f5db085c73163fc2e868972b2de60e72ccd44f745f1fd88fcde2e27f32302d8cbd3c1f43e6e657c79fba

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar11D6.tmp

Filesize
161KB

MD5
be2bec6e8c5653136d3e72fe53c98aa3

SHA1
a8182d6db17c14671c3d5766c72e58d87c0810de

SHA256
1919aab2a820642490169bdc4e88bd1189e22f83e7498bf8ebdfb62ec7d843fd

SHA512
0d1424ccdf0d53faf3f4e13d534e12f22388648aa4c23edbc503801e3c96b7f73c7999b760b5bef4b5e9dd923dffe21a21889b1ce836dd428420bf0f4f5327ff

Download Submit
C:\Users\Admin\AppData\Local\Trigon_Evo_v2\Trigon.exe_Url_msajqc411mdi5cj1neu3tiybnac0quri\2.0.0.0\sxsdxfgk.newcfg

Filesize
920B

MD5
9e0d92b76d739f1d4bbd540d85de1bfc

SHA1
18be3c87843e500b49a11114b7293eb238c11e74

SHA256
08d4e347030a9cc8b188b08218192fe595deec06277dd89a284430485163f3cd

SHA512
3e346ee3411b3f7c8dd979a3c09a6e08ce0356891f2ac952e58de942ffa4558e4d0ce38b3901c6070a52948343ad199afa08348348e7d5743ef2f33a8a2b0a21

Download Submit
C:\Users\Admin\AppData\Local\Trigon_Evo_v2\Trigon.exe_Url_msajqc411mdi5cj1neu3tiybnac0quri\2.0.0.0\user.config

Filesize
797B

MD5
bd4166518dcdd367dc51f66eba4dfc73

SHA1
4734f6d1ddf0cb0780a49b404f9a3cf8cda75f44

SHA256
6c5450a5f60a27e9c1714766fd8131e1e39e54616303ab82e1c6f66e1c4cbad9

SHA512
79b53d91b0447a43e3f57401c407e5b939331ac534f23580abea4b2ae60c199cbf94cfa9ffdb574604799c56b9cd6b49882962bd584b4b04406d6a545e87047d

Download Submit
C:\Users\Admin\Downloads\Electron.zip.crdownload

Filesize
3.3MB

MD5
bc76740766fa189213608e4241f82c99

SHA1
d95244d12e6dc41143769693c525b6585356571b

SHA256
55e6fea62131f0c4544fa8b31b602109b710a792e6f2127cb09bec789348b6d1

SHA512
2f44e7a46cbbc64addcb239d8c9209e443378f4dabb659431a1bdebc20c2782eb373d68afb118823c9f1b381fb232c195881488691c8a60ecd21e637cc70f050

Download Submit
C:\Users\Admin\Downloads\Trigon_Evo_Installer_v2.5\Trigon Evo Installer v2.5\Trigon\bin\ace\worker-html.js

Filesize
329KB

MD5
9b72ecdeddb846d5647a815c13516e8a

SHA1
20d5c8dbd11c71497bf675a518f0b370df6d71d3

SHA256
875094b00677b6d9c4b68bd2a8123348ed20965fd55b7d9226cc996e588e4de7

SHA512
83e0cc90195b353d523a708576def71aaf650436538ec6515e58cbc12fb4ea1c143ff1f29fad644a949f1cefe261ddbd482329f2998415f667e89740380ac288

Download Submit
C:\Users\Admin\Downloads\dxwebsetup.exe

Filesize
288KB

MD5
2cbd6ad183914a0c554f0739069e77d7

SHA1
7bf35f2afca666078db35ca95130beb2e3782212

SHA256
2cf71d098c608c56e07f4655855a886c3102553f648df88458df616b26fd612f

SHA512
ff1af2d2a883865f2412dddcd68006d1907a719fe833319c833f897c93ee750bac494c0991170dc1cf726b3f0406707daa361d06568cd610eeb4ed1d9c0fbb10

Download Submit
C:\Windows\Logs\DXError.log

Filesize
285B

MD5
10533167f8d1eb3c2cdbf2f9b1b76596

SHA1
ac72dc14e83b789c330061ad65dd0edb1c443e06

SHA256
63b5aec77a95aead912f938b27c0e36ae0086bdbd2acd9bc4050da52e18362cc

SHA512
1fa6ca9e303489e2ef7acf965a427f3d8819ff9215b15cfe950e2ea1a49defe6f03b7db41d668fac5143b32e7525b297a13d05645ba106a0792300ceea14c6cb

Download Submit
C:\Windows\Logs\DirectX.log

Filesize
4KB

MD5
93bf23b3cce8f7ae26dfb62ad42330ef

SHA1
feafd836096694297157cf69353e99c612ad7ca2

SHA256
b44bcc7dd4761ee6db0f4e905c8ddd5fe37ee1fc2236db5d0717a24c097ab725

SHA512
e19e766358626aeb128846dce207cbae713249f933bc6bb5d4ae008e3b72bcc1d606f73d4c5b21ffc24938fb419551e29744da13a23b90a52ac69d71877073bc

Download Submit
C:\Windows\SysWOW64\directx\websetup\dsetup.dll

Filesize
93KB

MD5
984cad22fa542a08c5d22941b888d8dc

SHA1
3e3522e7f3af329f2235b0f0850d664d5377b3cd

SHA256
57bc22850bb8e0bcc511a9b54cd3da18eec61f3088940c07d63b9b74e7fe2308

SHA512
8ef171218b331f0591a4b2a5e68dcbae98f5891518ce877f1d8d1769c59c0f4ddae43cc43da6606975078f889c832f0666484db9e047782e7a0ae4a2d41f5bef

Download Submit
C:\Windows\SysWOW64\directx\websetup\dsetup32.dll

Filesize
1.5MB

MD5
a5412a144f63d639b47fcc1ba68cb029

SHA1
81bd5f1c99b22c0266f3f59959dfb4ea023be47e

SHA256
8a011da043a4b81e2b3d41a332e0ff23a65d546bd7636e8bc74885e8746927d6

SHA512
2679a4cb690e8d709cb5e57b59315d22f69f91efa6c4ee841943751c882b0c0457fd4a3376ac3832c757c6dfaffb7d844909c5665b86a95339af586097ee0405

Download Submit
C:\Windows\SysWOW64\directx\websetup\filelist.dat

Filesize
111B

MD5
d6f81567baaf05b557d9bc6c348cb5f1

SHA1
0c840165fcd34d996c85b6b44b00c7206bf772b6

SHA256
e60413bec64775bf1933ef4f9673c8bcfbe0ce71e950fd589bbd14c0f9a00359

SHA512
09b84cc9199592821d7de38cbe24332097b276bb25b6d09f7dcdc3a6b17369ee944a6f8120f13ea6a5c15eb759a90d7ce29cc845a5c0680ff2fa53e2623171e2

Download Submit
memory/1336-362-0x00000000021A0000-0x00000000021A1000-memory.dmp

Filesize
4KB

Download
memory/1340-2823-0x00000000051C0000-0x0000000005200000-memory.dmp

Filesize
256KB

Download
memory/1340-2899-0x0000000000770000-0x000000000077A000-memory.dmp

Filesize
40KB

Download
memory/1340-2898-0x00000000051C0000-0x0000000005200000-memory.dmp

Filesize
256KB

Download
memory/1340-2826-0x0000000000770000-0x000000000077A000-memory.dmp

Filesize
40KB

Download
memory/1340-2824-0x0000000000770000-0x000000000077A000-memory.dmp

Filesize
40KB

Download
memory/1496-2798-0x0000000005180000-0x00000000051C0000-memory.dmp

Filesize
256KB

Download
memory/1496-2804-0x0000000000560000-0x000000000056A000-memory.dmp

Filesize
40KB

Download
memory/1496-2745-0x0000000000560000-0x000000000056A000-memory.dmp

Filesize
40KB

Download
memory/1496-2738-0x0000000005180000-0x00000000051C0000-memory.dmp

Filesize
256KB

Download
memory/1556-325-0x0000000002220000-0x0000000002221000-memory.dmp

Filesize
4KB

Download
memory/1580-2104-0x0000000001160000-0x0000000001176000-memory.dmp

Filesize
88KB

Download
memory/1580-2105-0x0000000000620000-0x0000000000660000-memory.dmp

Filesize
256KB

Download
memory/2080-265-0x00000000021E0000-0x00000000021E1000-memory.dmp

Filesize
4KB

Download
memory/2272-295-0x0000000002380000-0x0000000002381000-memory.dmp

Filesize
4KB

Download
memory/2380-2787-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/2380-2735-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/2380-2732-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/2440-333-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-121-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-334-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-266-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-125-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-233-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-231-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-122-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-205-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-128-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-303-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-123-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2440-119-0x0000000000D90000-0x00000000016FE000-memory.dmp

Filesize
9.4MB

Download
memory/2784-340-0x00000000008D0000-0x000000000123E000-memory.dmp

Filesize
9.4MB

Download
memory/2784-339-0x00000000008D0000-0x000000000123E000-memory.dmp

Filesize
9.4MB

Download
memory/2784-337-0x00000000008D0000-0x000000000123E000-memory.dmp

Filesize
9.4MB

Download
memory/2784-336-0x00000000008D0000-0x000000000123E000-memory.dmp

Filesize
9.4MB

Download
memory/2784-367-0x00000000008D0000-0x000000000123E000-memory.dmp

Filesize
9.4MB

Download
memory/2784-338-0x00000000008D0000-0x000000000123E000-memory.dmp

Filesize
9.4MB

Download
memory/2784-335-0x00000000008D0000-0x000000000123E000-memory.dmp

Filesize
9.4MB

Download
memory/2800-2635-0x0000000000440000-0x000000000045C000-memory.dmp

Filesize
112KB

Download
memory/2800-2632-0x0000000002BC0000-0x0000000002C00000-memory.dmp

Filesize
256KB

Download
memory/2800-2631-0x0000000000E40000-0x00000000016C8000-memory.dmp

Filesize
8.5MB

Download
memory/2800-2633-0x0000000007A10000-0x00000000080BC000-memory.dmp

Filesize
6.7MB

Download
memory/2800-2634-0x00000000003E0000-0x0000000000430000-memory.dmp

Filesize
320KB

Download
memory/2800-2636-0x00000000080C0000-0x000000000815E000-memory.dmp

Filesize
632KB

Download
memory/2800-2637-0x00000000004B0000-0x00000000004BA000-memory.dmp

Filesize
40KB

Download
memory/2800-2662-0x0000000002BC0000-0x0000000002C00000-memory.dmp

Filesize
256KB

Download
memory/2800-2671-0x00000000004B0000-0x00000000004BA000-memory.dmp

Filesize
40KB

Download
memory/2880-227-0x00000000021F0000-0x00000000021F1000-memory.dmp

Filesize
4KB

Download