Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    16s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20230824-en
  • resource tags

    arch:x64arch:x86image:win7-20230824-enlocale:en-usos:windows7-x64system
  • submitted
    28/08/2023, 11:29

General

  • Target

    State.of.Survival.PC.V1.0_b80832ddec.exe

  • Size

    2.0MB

  • MD5

    0813d662821577f411847b824b97e362

  • SHA1

    867398ebced794ed2c0195687c3643cb29fe6680

  • SHA256

    055c2b40b085af10a552c1c5179df5c98252e34c2b67fc314622d0b2636f6b13

  • SHA512

    01488199ff656c80b117906a84f2653f3e9ef55a6f3716b6f674f8ccf9a14842d3fd303b6d3f6dc28eea9b3091543d479a8dc27cfc100da3dbfefc6af3c501b4

  • SSDEEP

    49152:+3BwVkfnZw3LQfkZSKRIPHzkdm+unMtNnuBSaPoxseB:mB2Davz6m+qMtoSLxtB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 18 IoCs
  • Suspicious use of FindShellTrayWindow 50 IoCs
  • Suspicious use of SendNotifyMessage 48 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\State.of.Survival.PC.V1.0_b80832ddec.exe
    "C:\Users\Admin\AppData\Local\Temp\State.of.Survival.PC.V1.0_b80832ddec.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2520
    • C:\Users\Admin\AppData\Local\Temp\sos_b80832ddec.exe
      C:\Users\Admin\AppData\Local\Temp\sos_b80832ddec.exe
      2⤵
        PID:1088
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:796
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6a09758,0x7fef6a09768,0x7fef6a09778
        2⤵
          PID:2224
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1172 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:2
          2⤵
            PID:2680
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1444 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:8
            2⤵
              PID:2812
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1640 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:8
              2⤵
                PID:2472
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2180 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                2⤵
                  PID:2736
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2152 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                  2⤵
                    PID:2444
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=2808 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:2
                    2⤵
                      PID:2620
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3228 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                      2⤵
                        PID:3060
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3432 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:8
                        2⤵
                          PID:2920
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3552 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:8
                          2⤵
                            PID:2196
                          • C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe
                            "C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe" --reenable-autoupdates --system-level
                            2⤵
                              PID:1908
                              • C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe
                                "C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x154,0x158,0x15c,0x128,0x160,0x13f5a7688,0x13f5a7698,0x13f5a76a8
                                3⤵
                                  PID:852
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3440 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:8
                                2⤵
                                  PID:340
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3788 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                  2⤵
                                    PID:2276
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=2556 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                    2⤵
                                      PID:3032
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3496 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                      2⤵
                                        PID:1004
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1764 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:8
                                        2⤵
                                          PID:2040
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3344 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                          2⤵
                                            PID:2672
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3648 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                            2⤵
                                              PID:2196
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3540 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                              2⤵
                                                PID:2556
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=3964 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                                2⤵
                                                  PID:2844
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=1852 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                                  2⤵
                                                    PID:2144
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=720 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                                    2⤵
                                                      PID:2868
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4028 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                                      2⤵
                                                        PID:2188
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4460 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:8
                                                        2⤵
                                                          PID:1168
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4600 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:8
                                                          2⤵
                                                            PID:2172
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=4532 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                                            2⤵
                                                              PID:2160
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4116 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:8
                                                              2⤵
                                                                PID:1088
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=3540 --field-trial-handle=1372,i,14756762539797574659,3360765399039619732,131072 /prefetch:1
                                                                2⤵
                                                                  PID:1988
                                                              • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                                "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                                1⤵
                                                                  PID:920

                                                                Network

                                                                MITRE ATT&CK Matrix

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

                                                                  Filesize

                                                                  1KB

                                                                  MD5

                                                                  55540a230bdab55187a841cfe1aa1545

                                                                  SHA1

                                                                  363e4734f757bdeb89868efe94907774a327695e

                                                                  SHA256

                                                                  d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

                                                                  SHA512

                                                                  c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  61KB

                                                                  MD5

                                                                  f3441b8572aae8801c04f3060b550443

                                                                  SHA1

                                                                  4ef0a35436125d6821831ef36c28ffaf196cda15

                                                                  SHA256

                                                                  6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

                                                                  SHA512

                                                                  5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

                                                                  Filesize

                                                                  230B

                                                                  MD5

                                                                  c961c887ea70459c2b68bf901f940963

                                                                  SHA1

                                                                  d04c19ce8f79096fa9065475ba3973c88a0d1a19

                                                                  SHA256

                                                                  aca4903b5e71398f9e218e705bdec3c5002fbc4951350ccb87feaafd68354513

                                                                  SHA512

                                                                  97f8cd2999c8daceb5f4db94439558e770eaf31dc8f74273be1aa9808e6104bc57b77471f8e6f78f2f08fdde1c77efc60c73e7f6e6120baecab7984d447e9a8d

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  344B

                                                                  MD5

                                                                  c8b6c20743b57a7daf4b007bbe43a379

                                                                  SHA1

                                                                  8df867c3511d07d8119639e67fb086662d56a61f

                                                                  SHA256

                                                                  75a986b95e300e8cc3bb373dbda7530e6d05f0fa192163558ae3e5f2bfe8fa6d

                                                                  SHA512

                                                                  1c0e3cafd811530e687771c0f16c5718b26ad023ad38aca1cc362b2f29064d98038b15538341df31cd73daadc6b7c9c4a1e648454f6465f06916cb8d976a6080

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  344B

                                                                  MD5

                                                                  7898818d05c83f25153c6e898d3e35be

                                                                  SHA1

                                                                  16132b51c45abbfde0f7db9d64008f281d1117c9

                                                                  SHA256

                                                                  5e22331707ba205ad1941b2588ab246b97596d6fe326a819623f14001dcb8402

                                                                  SHA512

                                                                  4addb31dfe401c6b00216ec41060baa6bbadc1e0101a26c5a0041143de973daeac11668e53d7f365bffa84354a5403f09e0027655c0e993e1cd7d8089591e8a0

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  344B

                                                                  MD5

                                                                  c6c4f71f48d3f2c5db08e7d68e2488f6

                                                                  SHA1

                                                                  93baac31e134c42c22e3a90ea8c033f5c9e695bd

                                                                  SHA256

                                                                  6084a69d2f3830724d709864ce544d843c9547be7eb9b9be6e2afee28eab2857

                                                                  SHA512

                                                                  c51543494351390ee7fc498834909fadf95e9d58fcbe1289cf16e62134612551c836d0fac6009d9b2764af2b16e71ae29a8535bdd44404a4bf79b713c5b1da79

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  344B

                                                                  MD5

                                                                  1dfb11f52d60fcee34b8341191afc916

                                                                  SHA1

                                                                  207f3ff07e370c537f47114a024cbea5e992c78c

                                                                  SHA256

                                                                  f9f525fe41604a613f6322443abbc88f3fb46105dff6b59dfe1719bc3c5d47e5

                                                                  SHA512

                                                                  901762765d92260baeb1f05986a225fbf55ac3e3b0fb3e09a87fe259cc091ca40c34a2dbc75aeedfa040189746937c659f18a7475c31e80a7911370069a6e138

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  344B

                                                                  MD5

                                                                  55605c42c633eb76bc164ce9df4df072

                                                                  SHA1

                                                                  7d20ba2aace85ee2609e2424ba95ffd0b6901571

                                                                  SHA256

                                                                  5929f4a6818ec40ace665fad71c3543fc1888f384006d2c7564c9fbe873ae6ee

                                                                  SHA512

                                                                  da8dcd4d4c5bfe29182f9e76798751ade88672d77da1f57acb6f8beda8279fccc7f3df70708d8afe564252a08a4a117415ba594783f93e457395ba1eab35a0a0

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  344B

                                                                  MD5

                                                                  f7fb89c6e68bd693267e7f103605368c

                                                                  SHA1

                                                                  cf2449c8f208c21bb4232da8bd939524c2159f3a

                                                                  SHA256

                                                                  50082270fca7c01ca3a2610449ab3e0afb02918acd137b3fa9472ac7d5ee45fa

                                                                  SHA512

                                                                  8d55e893354ffc024ff8d47958c33842f0ce6a9819d350a3d4ea47f8f2ae3a8781de9ccbf2e99faf7a4d4273a6660c7a5acd69bdc0a371c7856232dacda4b8e4

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  344B

                                                                  MD5

                                                                  b55a80670eda5644f2c47ee4b3efc213

                                                                  SHA1

                                                                  f04a537ba27caa86a4f5da0e816c718f84e114a0

                                                                  SHA256

                                                                  685571f5cd7fc705ed9c7d52cbe213f871ca8dcc4c0eb067131087a8194eb6cd

                                                                  SHA512

                                                                  21f632000e926dbc50db5f9d69d683a8b2b29ee650cbede3a72cab23d6845a8cebecd5cc6da7a21c3922bc94cd7aa1e647685311f792389745a5cfd4c33c97d9

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  344B

                                                                  MD5

                                                                  bfab1112c8287c8a3167934749b8050b

                                                                  SHA1

                                                                  a304d712815d932e6f8a666ae1b982d25e21cc41

                                                                  SHA256

                                                                  dc62899d15285c49b93a5c4fb99c3145f366c4127483d503c9e76e2897271229

                                                                  SHA512

                                                                  752ffa39fe0cc666681e581a9a815776a0a3b568559203402f2f56f078b15c8c2aebf9d22c26abc6302b5b0ed5692dcd512acbd21de70dba5faeafea3f3257d8

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

                                                                  Filesize

                                                                  40KB

                                                                  MD5

                                                                  2883ead3a2bad1aaae03dfed78354428

                                                                  SHA1

                                                                  59c50ca159265a082dbafbb7862d9f1b6ab9d55e

                                                                  SHA256

                                                                  6d46b2663c377923e14e35b2a9dee252b5ac1599bc7e6275b735dbf89bdbef6e

                                                                  SHA512

                                                                  01dded03ac45205730a21df7e4cd4d52a1bb2d2a3c3bb3a3a2abd081cab63d3c3a424a9856a3fb78abea3ffa6b7a4cb9f9fabc97c12adb2236135b6c3b1050e8

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025

                                                                  Filesize

                                                                  48KB

                                                                  MD5

                                                                  d3acbece4cc51aa5f24c17832a5723d6

                                                                  SHA1

                                                                  9cc2310784ce7f5fafecd19fb2fbbff6d707233f

                                                                  SHA256

                                                                  5bece3a114273ec49249a7b7802f82ef3b016591cd14583324e39f24bee1583e

                                                                  SHA512

                                                                  cf2a5a79ce4750bad4e11b2cb465585944daab873886c843f2226302ccd1d91cedef75feba97d327033fdc7fd2959fc354b93b6c4dc023a513c4feb2fdb1830f

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

                                                                  Filesize

                                                                  95KB

                                                                  MD5

                                                                  95397a40c44ae150a155315a972edd51

                                                                  SHA1

                                                                  6585c72db6862d65fe565b183417350fbcb138af

                                                                  SHA256

                                                                  a4048a5000ff976480d7a722e041f34a754b8a42e967c400fbe8f7bc8dfd2d45

                                                                  SHA512

                                                                  42c0e4840b98a61509a2b0cbec9bd5392fdc51d28120ccf758ea4a40d335b61d87ec0ada53db229e0c38cd27aa72b089575f01a70882bb11b968e31587598761

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                  Filesize

                                                                  1KB

                                                                  MD5

                                                                  dace49816ba706a71c053f2bfc98090e

                                                                  SHA1

                                                                  8dd4cc493ec3979e1fb0462455e45cfb17964c84

                                                                  SHA256

                                                                  60f8ce3c2fba88cb723685b13dc5317561ec0f8500c1061c63c341c24fdfa8e0

                                                                  SHA512

                                                                  c32e8752f9c1ddc11ba8b217c791ee4ddf9787afd753b1a0e31063d402aab1183402a3e60985a87d4c9b17c7f4745b88e1480dccf42202127fa7f58101644843

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                  Filesize

                                                                  504B

                                                                  MD5

                                                                  847f1edf8825f75830e8f6f012a38ba8

                                                                  SHA1

                                                                  2494c2a016463ab002ac991e2e6b4eb66594d637

                                                                  SHA256

                                                                  2d83bea2859b7cc41d2d55cf9142b52b675d146ab65cc7916d81b229194f960d

                                                                  SHA512

                                                                  4af2dd6afa37d76c9984a32940a02ea889dc56d96d3f7e1f6970e0c15ca28349778e874a72590a846f7752c9f6c81eb7b399d663ef8f11817f24ecd68acc7bbf

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

                                                                  Filesize

                                                                  264KB

                                                                  MD5

                                                                  f50f89a0a91564d0b8a211f8921aa7de

                                                                  SHA1

                                                                  112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                  SHA256

                                                                  b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                  SHA512

                                                                  bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT~RFf77b480.TMP

                                                                  Filesize

                                                                  16B

                                                                  MD5

                                                                  46295cac801e5d4857d09837238a6394

                                                                  SHA1

                                                                  44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                  SHA256

                                                                  0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                  SHA512

                                                                  8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                  Filesize

                                                                  5KB

                                                                  MD5

                                                                  31120c70d28ec13503f84e7ac504477b

                                                                  SHA1

                                                                  356099bae191a2d2328c63ff11b5b9ae4924f45f

                                                                  SHA256

                                                                  c4bf7b2a65cd3d8b97ec6749d269865cf279bfd27e7c0b9a24b827fce1db73ac

                                                                  SHA512

                                                                  f1e757ed060156c1dc8ac47f2b4f5a2cf0b0b60cb381dded6081ce62ed55cd2b44ae6b5559fc51b12dc704d8ccb161b3c62dd4ce1c65d7125ecb0fd939fd1fcf

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                  Filesize

                                                                  2KB

                                                                  MD5

                                                                  1e7d9c899f9a09039822ce06a2607829

                                                                  SHA1

                                                                  9434039d1989addc992318679cf7990acc10e1bf

                                                                  SHA256

                                                                  61310282f3d17f72825fd6e16a0df92d511d74861c4d484faa0cf917bb3a0b69

                                                                  SHA512

                                                                  b532974a852535a4e931dd7e77dde20344c185127b8aa1d42e5fce22051000f5b03c996b533b3c52afed59f8463a56b92d85bf449c83111d9a392a6676ece3be

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                  Filesize

                                                                  526B

                                                                  MD5

                                                                  104fcb6498964af9ad33d303998597c6

                                                                  SHA1

                                                                  41bd1bd961ef293abad0d8e2164d57b773234271

                                                                  SHA256

                                                                  1f9a7de81e5cd5843771c690e9ea2f23d632e0caa51bea14c98a0bf7b646f36e

                                                                  SHA512

                                                                  e48f6d500174efdd759ae1a0c65ab16daa9ffb2b09d7e00121452d378b83f37d3f08976f51167351672a2630e0865de61e311cb24e2ad420e34bb5fb7bc81010

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                  Filesize

                                                                  1KB

                                                                  MD5

                                                                  783e8b55275297201d1d2d8121313126

                                                                  SHA1

                                                                  81935642f76b157e20510587313220d08890c617

                                                                  SHA256

                                                                  e62ade01a5eac9f1859590127b82cf6ab7252aae0f6b63fe3bc4da36c86e841d

                                                                  SHA512

                                                                  556c1c48e1e786789716c422d32752896eb9dccbac6595323563d3878105c4a37b804f1abec031b5603dfc3301a5fb1e57a03aed27de7563790de0854ffdcac4

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                  Filesize

                                                                  2KB

                                                                  MD5

                                                                  7ff798957c993f304bfaba7f09b0a60d

                                                                  SHA1

                                                                  07bf1900512ac1b65503816dde30b9782dc527d9

                                                                  SHA256

                                                                  875aff181c680c9abb7d23fe7f4a80797d31811f661f7fc7000dfb7f4b70428d

                                                                  SHA512

                                                                  5a7932f24cb17154bd64a2e7e6135ea4f91ef01c7742c5f4b8c08722477913ffde60035185b27b022fc026fcdc4653c867a4e709a39328a8c854459f13e66a06

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                  Filesize

                                                                  1018B

                                                                  MD5

                                                                  0df8653fecb28d7e8d936a1d0d0caa13

                                                                  SHA1

                                                                  ad8d817158662f36bd15a87dd10339fed4401248

                                                                  SHA256

                                                                  be7ac62c58079b51b1dfd4adfdcb4d8beea78f19ddcdcb088d0a842d42d3b4cd

                                                                  SHA512

                                                                  5927e9a1ceb72f69dd565e0fc1066f8508f5316506b50147ca3e8ec0871dfdd8d44d819e078e9e21346e31f15546dfc4657830132a2acf1ba548e048ae3efd9e

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                  Filesize

                                                                  5KB

                                                                  MD5

                                                                  346afe310e472d618d7191e4381ff1ab

                                                                  SHA1

                                                                  a899f7818e274a0e99734d7ead9ae9fc1e8c9ede

                                                                  SHA256

                                                                  c7e0995b2d8eb870acb0618c475c6ba438e39aac9d991fe4323b9befa166f87c

                                                                  SHA512

                                                                  d061f621a612e747df2098c2b12d4436bde7ae842d7cf2dd106fd783829c1326d9539cfeeed1cd8e16f9684e313af920f2b43b7fe942f2faf490d484bf76bca4

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                  Filesize

                                                                  6KB

                                                                  MD5

                                                                  dc6a6a39a6b2db130ec83b6d8aab8bbd

                                                                  SHA1

                                                                  930b9d230ab411ba7c480e6e65cb0c78f4a9478d

                                                                  SHA256

                                                                  ffbfe7cd477f2f05f6f21fdaab7bff91ad9f26eba8843b7d7eef4371f32cfa93

                                                                  SHA512

                                                                  57c1383f6a3ed7d21d96ab59406d5b859dc3d3cdd73bf2b7a9aa33f98041939b5b401508233d3e93b9f3f0214d809f8cee1dfc9cd94575e68dd4f116986ad412

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                  Filesize

                                                                  5KB

                                                                  MD5

                                                                  954f353a7ac8ba3e5e9846980b37183a

                                                                  SHA1

                                                                  36b955da09714fda44655d93afcd2028c2cc1ae2

                                                                  SHA256

                                                                  49eb3c94d58ef9616dc55cac7c74a3d802eaecfe5df4b3f27a3c62eac913aae7

                                                                  SHA512

                                                                  3b966c0632060724e911ffb52036c3245dd40ae891f75d5915900c6a438b43b835c25514b07e713edb6037a3d26cb30c1338befabb5a0954c084a5204a515815

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                  Filesize

                                                                  4KB

                                                                  MD5

                                                                  45a89ecbe8b1b987a3f780ca324b7e38

                                                                  SHA1

                                                                  f7d98d141059d7cd418d68785c5fe76568589754

                                                                  SHA256

                                                                  527b42af2172cc3f38be5a0d873d77d3eeab5d6babff7fea50a088a5934b5e64

                                                                  SHA512

                                                                  ee4a7f150d0d603ca7d77effaab7d657cd6645812c61a1a19ce19f128f128efbb36ce58f801c611bf7187af58e25fcc04cf72c3d244ad01f14982658da67e431

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                  Filesize

                                                                  5KB

                                                                  MD5

                                                                  032bcf891b8bff6cb7c0ff2d3f963c54

                                                                  SHA1

                                                                  ed198b4a7ddf9601e26071867a60ccfe951d0aaa

                                                                  SHA256

                                                                  60e60e1e92245dccd813022b1451bf32e637fa9e1b5e7eba749d4ed48efafbdf

                                                                  SHA512

                                                                  5897053ffff6239a8d824e8db4667a30585d2c87cb356903ea5c6d6b4d6985cb2add186155d1acbbd2982b516ebc7549da2e07531bef0211111847a2192fd5d4

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                  Filesize

                                                                  5KB

                                                                  MD5

                                                                  3f6107607dd75cbd384cecb44962e226

                                                                  SHA1

                                                                  501b3d203b2f682a6a710675a8fa9c87ff0b7f7d

                                                                  SHA256

                                                                  323a96dd7db70a3ff2fff256175801aefb4863865ae6c57a11a66249d5374497

                                                                  SHA512

                                                                  5fe7ada942323e6467389d2a98afc99b25b7dc910e689e78407bf0f71330e8a57dadc1bed001c9d85eeb83f8f2eb4ffa88bae9828102165b9cb683f73362aab6

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                  Filesize

                                                                  5KB

                                                                  MD5

                                                                  e72e1e4f4cafe2e6c5ffd611ad860272

                                                                  SHA1

                                                                  ade0b5798035dcfdde93d5741cb7b14b409c9df2

                                                                  SHA256

                                                                  2f53c73eab537c160363285df912b34de253e1734655471d0cd827471cb8bca3

                                                                  SHA512

                                                                  aa95b867ea95f60ef4867323cb1296c6b5776fdda27ee1e91efaa1c78c272a8077714c486184fdee030ede91cb5281109a535ee6bd304dd9d769aa03270730e0

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT

                                                                  Filesize

                                                                  16B

                                                                  MD5

                                                                  18e723571b00fb1694a3bad6c78e4054

                                                                  SHA1

                                                                  afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                                                  SHA256

                                                                  8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                                                  SHA512

                                                                  43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                  Filesize

                                                                  184KB

                                                                  MD5

                                                                  cbbb89c6e0238fe3c4830db3c0f6790d

                                                                  SHA1

                                                                  eab1efb7c7db247e37d221f3f231a2b13619f985

                                                                  SHA256

                                                                  735db160dad976bb379960041a0a5eed12f06e46d5760f174118cd2f07980079

                                                                  SHA512

                                                                  4eb507bce8d1b8b7789f69073f873ec38ccae1db38aa93b1cdaa86ddba407e9f1f80ad7f5045d6eb20aebc3e800f038a5a2e40ea2d6b2515154e3ffff66a08ae

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                  Filesize

                                                                  184KB

                                                                  MD5

                                                                  b767bc60e8c5f4ed0f79d4621ae4ff18

                                                                  SHA1

                                                                  3ae20d55b93ff88d1420cd1f827b57f8a4967872

                                                                  SHA256

                                                                  135f2b9c59824151f4e886e00f0173fa43173067363d913f5efdce3d6769855e

                                                                  SHA512

                                                                  01825daf0a8818c7964c3533951376d7e0e2a661d2d7801f5bc7eb2251a0fbd4e8296e784ccb3d9a5b847f42b2add5bc0e0f75cbdfe8657069ab41579de81d44

                                                                • C:\Users\Admin\AppData\Local\Temp\Cab2944.tmp

                                                                  Filesize

                                                                  61KB

                                                                  MD5

                                                                  e56ec378251cd65923ad88c1e14d0b6e

                                                                  SHA1

                                                                  7f5d986e0a34dd81487f6439fb0446ffa52a712e

                                                                  SHA256

                                                                  32ccf567c07b62b6078cf03d097e21cbf7ef67a4ce312c9c34a47f865b3ad0a0

                                                                  SHA512

                                                                  2737a622ca45b532aebc202184b3e35cde8684e5296cb1f008e7831921be2895a43f952c1df88d33011a7b9586aafbd88483f6c134cb5e8e98c236f5abb5f3aa

                                                                • C:\Users\Admin\AppData\Local\Temp\Tar2BAB.tmp

                                                                  Filesize

                                                                  163KB

                                                                  MD5

                                                                  9441737383d21192400eca82fda910ec

                                                                  SHA1

                                                                  725e0d606a4fc9ba44aa8ffde65bed15e65367e4

                                                                  SHA256

                                                                  bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

                                                                  SHA512

                                                                  7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

                                                                • C:\Users\Admin\AppData\Local\Temp\sos_b80832ddec.exe

                                                                  Filesize

                                                                  30.0MB

                                                                  MD5

                                                                  77f31bc10d8a7b21c6253d2a8cbff2f7

                                                                  SHA1

                                                                  02bc9bbde95074caffa53da2c29983678b5d3d0a

                                                                  SHA256

                                                                  ee3cf92f01d7bdda818b10d5c2306de3bdf25dd55e789fc5d31fae2872f6f8b4

                                                                  SHA512

                                                                  f48fdbd813347de0f3bbcbb1ac01167ee3bbec3585285607588771eb10c63ba8c8e3e661987182eb01e740224b4da52e3ebedcad51aa090683802d67bce38342

                                                                • C:\Users\Admin\AppData\Local\Temp\sos_b80832ddec.exe

                                                                  Filesize

                                                                  30.0MB

                                                                  MD5

                                                                  77f31bc10d8a7b21c6253d2a8cbff2f7

                                                                  SHA1

                                                                  02bc9bbde95074caffa53da2c29983678b5d3d0a

                                                                  SHA256

                                                                  ee3cf92f01d7bdda818b10d5c2306de3bdf25dd55e789fc5d31fae2872f6f8b4

                                                                  SHA512

                                                                  f48fdbd813347de0f3bbcbb1ac01167ee3bbec3585285607588771eb10c63ba8c8e3e661987182eb01e740224b4da52e3ebedcad51aa090683802d67bce38342

                                                                • C:\Users\Admin\AppData\Local\Temp\sos_b80832ddec.exe

                                                                  Filesize

                                                                  30.0MB

                                                                  MD5

                                                                  77f31bc10d8a7b21c6253d2a8cbff2f7

                                                                  SHA1

                                                                  02bc9bbde95074caffa53da2c29983678b5d3d0a

                                                                  SHA256

                                                                  ee3cf92f01d7bdda818b10d5c2306de3bdf25dd55e789fc5d31fae2872f6f8b4

                                                                  SHA512

                                                                  f48fdbd813347de0f3bbcbb1ac01167ee3bbec3585285607588771eb10c63ba8c8e3e661987182eb01e740224b4da52e3ebedcad51aa090683802d67bce38342

                                                                • memory/1088-948-0x0000000000400000-0x00000000004F9000-memory.dmp

                                                                  Filesize

                                                                  996KB

                                                                • memory/1088-763-0x0000000000400000-0x00000000004F9000-memory.dmp

                                                                  Filesize

                                                                  996KB

                                                                • memory/1088-829-0x0000000000400000-0x00000000004F9000-memory.dmp

                                                                  Filesize

                                                                  996KB