hxxps://github[.]com/RattlesHyper/TrafficerMC/releases

Analysis

max time kernel
325s
max time network
329s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12-02-2024 18:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/RattlesHyper/TrafficerMC/releases

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service
T1102

Processes:

flow ioc

98 discord.com
99 discord.com

flow	ioc
98	discord.com
99	discord.com

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

Processes:

chrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133522360189350416"	chrome.exe

Modifies registry class 1 IoCs

Processes:

chrome.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-996941297-2279405024-2328152752-1000\{FD729184-794E-428A-8604-9C5E7E0461C9}	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

chrome.exechrome.exe

pid process

4464 chrome.exe
4464 chrome.exe
2536 chrome.exe
2536 chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

Processes:

chrome.exe

pid	process
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe
Token: SeShutdownPrivilege	4464	chrome.exe
Token: SeCreatePagefilePrivilege	4464	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

Processes:

chrome.exe

pid	process
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

chrome.exe

pid	process
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe
4464	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 4464 wrote to memory of 3656	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 3656	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 1440	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 4184	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 4184	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe
PID 4464 wrote to memory of 2012	4464	chrome.exe	chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/RattlesHyper/TrafficerMC/releases
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4464

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcae169758,0x7ffcae169768,0x7ffcae169778
2⤵
PID:3656

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1732 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:2
2⤵
PID:1440

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:8
2⤵
PID:4184

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2820 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:2904

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2180 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:8
2⤵
PID:2012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2828 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5052

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4552 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:8
2⤵
PID:1168

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4904 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:8
2⤵
PID:3724

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4952 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:3008

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5208 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:2420

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5416 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:1344

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5228 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:2852

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=1676 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:4444

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2924 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:660

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=976 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:8
2⤵
PID:3060

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=2828 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:3068

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5332 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:2484

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5128 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:3464

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=3156 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5060

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=884 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:2688

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=820 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:1336

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=2272 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5064

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=3152 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:3712

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=5704 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:1456

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5712 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:3064

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5892 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:4652

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=5236 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:1292

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5836 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2536

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=6104 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:216

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6368 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:8
2⤵
- Modifies registry class
PID:2080

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6352 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:8
2⤵
PID:4304

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=6280 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:3972

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=6748 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:3180

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=6604 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:872

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=6344 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:4964

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=7156 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:4016

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=7204 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:2688

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=7368 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:4544

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=7320 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:4628

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=7376 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5184

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=7848 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5192

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=6320 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5344

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=8184 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5352

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=8336 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5528

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=8524 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5632

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=8740 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5712

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=8728 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5756

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=8692 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5880

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=5524 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6096

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=9980 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5360

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=9964 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5372

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=11148 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5948

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=9948 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5408

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=9908 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5384

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=9680 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:3444

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=9552 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:2768

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=9536 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5176

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=9520 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:5168

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=9504 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6140

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=9488 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6132

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=9452 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6124

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=9464 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6116

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=9428 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=9188 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6088

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=8004 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7192

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=6184 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7464

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=9184 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7496

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=11580 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7504

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=11828 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7672

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=11684 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7768

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=11352 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7776

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=11380 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7992

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=2820 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6216

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=10364 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6704

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11348 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:8
2⤵
PID:6752

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=3780 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6600

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=12296 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7836

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=11528 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:7528

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=2168 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:1584

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=12440 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6084

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --mojo-platform-channel-handle=7080 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:6188

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=10708 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:3544

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=10380 --field-trial-handle=1884,i,17644865240295215183,4557107943656397142,131072 /prefetch:1
2⤵
PID:2508

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3836

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2d4 0x3c4
1⤵
PID:6464

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

Filesize
194KB

MD5
36104d04a9994182ba78be74c7ac3b0e

SHA1
0c049d44cd22468abb1d0711ec844e68297a7b3d

SHA256
ccde155056cdce86d7e51dfd4e8fb603e8d816224b1257adfcf9503139dd28f1

SHA512
8c115e3e5925fb01efd8dda889f4d5e890f6daaf40b10d5b8e3d9b19e15dadcb9dcf344f40c43f59a1f5428b3ee49e24e492cf0cb6826add1c03d21efdec52ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004c

Filesize
87KB

MD5
956657a32f7e5f4290bbe6266b9176de

SHA1
cbda22ddf1c82c846a1c08ff7c6ea64c3c052eec

SHA256
6d23c9d8e4bc7b413b64137310d4dc399914dd5a8f0dab302095acf2cd8943e3

SHA512
e43152b71ee2b6cff2efa62537a31253bf20ee9911ef898c2fe3efe6fda9fda4b597c40bce46f7956460fcad585a700c17ed6ab9bbe2629eebe79e5f3b8b6092

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000061

Filesize
38KB

MD5
2b7ec9fe5044c75348bc52964bf50b78

SHA1
039e784c53ba423877c5c845ffb044abbf4c110e

SHA256
71c9403962b1f930169325d2c812125a0088d2a695609486bb6f31185e84ff97

SHA512
92cb64599e198177093bda32e1c962fdccaa049d9875292b97c6b014d0d0afde750dcef27151751dda3f8639df41bed611bce7816c04d4e581b17b132d169016

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073

Filesize
61KB

MD5
de88eea07eae84aeef510fb69593823a

SHA1
26cf9c9181ac9f00df34b6abf4faee271b057dab

SHA256
3002c562ce1f7bdd7bcc5e88677b67fcda891adeaf4f1913801302a1d4abc63a

SHA512
f69894bb1f2060407656eb44c22890dcf62f9b08747777f74e4a59d700749db3735c25b66eaff25e834d1be17ea739ef0bd1347f5cf18d5a059eda0c070246bf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ab

Filesize
106KB

MD5
48c565d63c8f53144ea10e99a011bf0c

SHA1
b3b8196a343b854992cae93e520acb8e13d80657

SHA256
9fafc14d1538d938a367b9c9cd51b6df7caedfafcd21ca167afc9623efcff0e1

SHA512
ab24ea7debb88ae27b4d3d7c03fa4055fe9283695b0a5c9555e3d774c35f8a4b353c9b1756aa161451671854bba5d4223b124268f5bc04fdfb35984c012b3b79

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ac

Filesize
221KB

MD5
0e7e653af44c9cdffa27c9065c920b67

SHA1
eaa4c96ef5660bf0fd0e245d4846ab71082d05f5

SHA256
0a9e3ab4b385121ebc96639e5bf51b20936ef87f5770d1b43af099643f8c9ad6

SHA512
39f69ac147d073865586e819696f6db234c49cb38d1ecd3be2735781fbf16cc76c7db79b8cf0566a5d59538b33c49d0a0e3ed18d69fa240a3d158a13edf3ac33

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0aeb9f1af1f75661_0

Filesize
276KB

MD5
1a7d850b6b65f32a8e8e64262231585e

SHA1
8ee382d6ec4abecbd577a23143835a3e41b25a75

SHA256
95106e1a7265eebb6b2c78fb392ad3500c308f72095afa086ddef0aaf0209659

SHA512
a7079ba98c85880a90cdd5bb36daba94c4f2e8385374efa6fdd8ccacd9ad257000a0b23b775b1c3015cd8092b33d89c60b3937f030fd98182bd2fd0d619d4bf6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1f60a3903cccb676_0

Filesize
20KB

MD5
e5cb0a9ff661d40cf6f7756012968e08

SHA1
6cf9e9d72f061dc8f1de2ec8f8f0a9fd31d64fbc

SHA256
22b875fcfb7f16b67a5e4f44dc744e1031e713b3d01b60621c6f90d41afcb69d

SHA512
e0fd0012c67d45a7888e48f4fce968a7a19b8b71aba2be0ce10c137d4fee0601e84e23abb344d2526abe858d0990cb1ad8facfcd981dc30c4b8fb57aae1da309

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\741427add2007c88_0

Filesize
300B

MD5
489e50c8a92ad838cf151d8a83386af6

SHA1
d9dd4c5224136a839bfb22328ec32689a2b7941e

SHA256
3552046d53371d4177e9f9fa263528800215de24614252c9fbb65faa25db6037

SHA512
c20c807eecf9db4cc237ee6172b74649fed9ea7b53bd64ac1f353992d233ee879de1eb563b0599196924fe75434dda819718df1fc1e323a51665e32dc7507edf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\89e68caa7ff3e519_0

Filesize
254B

MD5
4112f46107cdaace3c9cc706baa04ef6

SHA1
b674dc5d56af9ff0146c14226982acb4bbb6bff6

SHA256
8dd4f28ef0d7ba7b622575f08540d734b0c21a6497972d7cfc5c84d9fcec7f5d

SHA512
c892c11b7b2ec851988fd6da927d889c39b9e296633905aeb846aa0dda2d139fae3833b3b9f468715ff79027a1e5435c1413204794c2785ddb7dd60a82b2696c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\90afed0d8a8177a4_0

Filesize
546KB

MD5
22d80a991259d80df55058d7e334bd4b

SHA1
156f50411685e0679038ee1c3d377d8ec42c8bbd

SHA256
1bd5118684b4e19ebdcc03299af743610e725e29db7351646b3fce1e4815f2d4

SHA512
545de444a71992f3cf72f9ba23470adc6cdcbf2b6166749803b6517e98586cc90c2cfe25a5d1457435ad1fc790e39ed7281a6ce7a372073361b15f47f78be335

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ac5d9cc93bac2b3f_0

Filesize
289B

MD5
ecbc826c0e7401f42ed93e2b279f3d56

SHA1
9984b0e9377581c8aff48bf6c1876e0d15c3531b

SHA256
8b35898127175fadef0bb3729b2e182a49a120fb8debd5c2511536f4d9ab2726

SHA512
875fa56ddd667b9e4325dc0ff45a404f6d9f64d3354a78bda23e19c056dca86c83632a80e64a3fdde55e2ee38fc4c0b5099abe2f52ca44e5a780507a916797a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\be03cca85aefb7dd_0

Filesize
324KB

MD5
cb2d4fdc91513113e6ce63899ba296ac

SHA1
526229db363befcf92006de36d2cb075fd1ea9eb

SHA256
bcf2276cd00b0dd75ab8b895566e31fb6d11a2598df5c613c98335730e46d5b4

SHA512
5f84d0b6787046892654aef4e172c08bbbd2847eed27e9d7d6d0fdf23659e54e03764697a611a118f07ac6187284e4280ffe5ae858a82d62c5ea2e284fa79958

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c29c38a19b5b0069_0

Filesize
17KB

MD5
fe4f15c8eefb45cc54d655be63122891

SHA1
95c912f92b7845bcdf5e6634603ead33263c1565

SHA256
84f1729bf84ad7756dc02c2c431ac179422427aadb3ec3eac9dbbae749beec23

SHA512
3306c7d00fccc738e5a388e220dd5bc212d707e496c8f646dd972ef5eecbe582762d80f1ae64f91ae8b8ee20e85aa4d4f3784842e17b0262af3e1829010e5cb1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fbecc4d0428bcf2e_0

Filesize
280B

MD5
d813d417bf5cb1cccb77019d40e4f391

SHA1
bd37f3080ba3a5574a4a4fad868ef7d6e76ff44d

SHA256
5153660afea8b10dc4c7b998277334062e06cf8047a56e2916826348c3dce062

SHA512
b27c7d11db5b045bae79a243d0b976edfd1a1d289adfbb224301a9e421701866ee005de269ba2b3b606f95ed68b439e1f1dacc7756810453bca5b6bdc01a3595

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fed7c79491ef6793_0

Filesize
268B

MD5
caf5520460170aadb5e8e317d7d8879b

SHA1
26f288bdccc309a57811c4b0a714a7fe22ef87b5

SHA256
2f9bdfbfc056cdf762cf74e3cb81aabc0f32e3b871b44eea8465589cd1bded1c

SHA512
472fd8096404599f5faab6409866ae4b02c383ebdec299f5cbf5dad6a9d5e2641f31c03e48dc95d0d19ec5840105e361622e3686f494afd330ae96499b45fdd6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
27db256bc19ef8af3f18761a9c8725cc

SHA1
71437be2b695ad6064bacd9d0c57c22739748ba7

SHA256
48c31a085b7c6030223f7250670d5ed28b80136f561a41c86238660ce8cc7e82

SHA512
4f4e009b4cd3cceeb15973b9e97221e64517c272f3cccab407c43a355742984ed52a1199272597444bc9f2ba1925cf421850957e5b7ea8423d1e25949d53a03b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
7bc0ce0c8ecb9ff753f4a047615ad637

SHA1
7473cabeb697edad24c2c2f77bfeec2fb8ed59d6

SHA256
55f6369c39f53a7fe534426861f3bfbe661da654502a4163ef150d281d693c1d

SHA512
4589a1a846ea611f8a4abd5534aab05b852518a09e81d8407aa8fb74e6da8b29d56dc8ff23da734b9a43dd72c5aa44fefc451fb6da5fb2f06868051461c09273

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\0d44fd5b-a34f-47c7-8341-ace318ab83d1.tmp

Filesize
9KB

MD5
d72a3933355d7fbde57f4db8326fb9d0

SHA1
a6ff60787ae87fd11cb4dc59a1d093257d6fe48a

SHA256
b43ffddc8eea2a1f64d972560eedac2ec6fb4c056a2ae2bd01512e8a9cb3a1dd

SHA512
a1d6336cff002f7a31025c605b4adfd1b71bdf9e42e4be4c9224cfb623cc2a0bf92b2a566d9e2443a7859f79c8042de000349ef4917806b1df945aa574b82d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
09d58dad70abc2c629ca679522637cba

SHA1
b71f91ce87852ea8721dcfd2e65f8baf271a395d

SHA256
9139d1c8307fbe70c3f11f1d4b68160d1dd595f6b2e0b2e6d75a729d45e0a346

SHA512
54958d09e4d4c1e696752ebef6cdf3b7a1e574cceee535a3ddeeb0f6e1f2ab23e603999aec14f0093eed85e6b9a07b38255b6a056299b0bb841e32a19d46db4b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
20KB

MD5
4e1ba0ed52e419a56ca5ad6e2b0f24d8

SHA1
dca3dc3047a9b45dd788b683bc4c21d71c5c36a6

SHA256
f61826a1e298541057c4edacbe4538873204aee9a40359d656fd2e8211fee508

SHA512
04ee25f6f4ac30987e14bb5dcddcd642a66d72ac34e48f438ccb0a6efc4683a24ed5a11e02c4d855162c159080cfdffc6297b571487c16f5a6184476020e06fe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
ad869d4446598f4104ae123331a8983c

SHA1
2567cd7e28a630aae7bf168cdf521b2a1f03b570

SHA256
78379fece7124973aa7f7f12d1c3b0212e0b560fd84ade14b884c8be729da12f

SHA512
3f605048c3eea8018f15c651e7f15fa2772d486177c390600440d46a9b986a589cbff5710c3a2c353aed10a5a07a3534b15feb7fc631cf1ef9645445437225fb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
f1625ac29adda7e34e4138cc8889ecd6

SHA1
ac98422650231c2f1550efd01885253c4f1ec2c5

SHA256
c5281093b8cfed6e367c74263cd14dfb46200014e2012565630a0f1db76a256a

SHA512
179ebc086d0dde5efee9c43d774c28f1c73115a58e4f41402e7b03246cc1bc4363a38746fe34394b69ae4fc7c019eb7aa018a2727af8e3b95de1c67cd51e6e1d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
3da06fb77df672f4f54b228e3eaf9372

SHA1
dd06ed500f9b89173cc3c09b63ca3356935bac5d

SHA256
ec20277e706e463a1ec7a49d0125116b8e2f187f3b1d3c76cbfe9a51fdc62435

SHA512
48fa8a620dda87b8b6b718b433248ca319307a39b330e275513b0fccd73a2ec8b99aa36bfd8f51c1273e0150289057ebf91519fc301d9562ec491d7e7a418c46

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
ac7d973f45e821858959be696613f4d7

SHA1
34eb62f50da4a9700030d827d75916794468146d

SHA256
e8ce8fafd67fcf8d35a927151b3dcf9cbabaa61addd4cc647dd969f17cc8c523

SHA512
6fd85db6bb5a624f76a0cc4f5c1c1def16aeac22c640170527e43e8a79ed984443df77953f12e1e52f6fec7e4bfd303b69d94f3adda37b92f590aee085f2a795

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
6283112c7758709e3c7626eb5eac6785

SHA1
62e0680d711ef2f72b57daae751fa86500fbc7aa

SHA256
15df968f564f0ffab344fbb93d04a61e6e9114e05903f579501cd72f2607679b

SHA512
8800fdff9c682a3d212afda951fe0564c473ba5dd4163291bb7781dcf0b587117dfcc08fe51b8d38f5f2fafdcc2272248efbfcb9324311339986562223e213b7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
5d04b63c2c2de5813732ab0413c6ecc4

SHA1
302c1167d5f34682b21db9431034ea6166b4cd83

SHA256
df350401783d00df2f3daa79bc52f3254825cb78d7ad31f9e9f994fa72fec143

SHA512
150c14b869d1c842138afdea4a3a9b07e583649626b18f4287b943fab694a60086e674df4d40e6b467faa762837f9920f36e52c9219f55b33325c39dd9de29ea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
4ccc1537c9b80a4aea860f5c4ef67f51

SHA1
14af804d3a41e69f9d7eebb2f26115e9432b885b

SHA256
5207e088440561f0407a9ebe840112359a9f228d2afd684753d27adef842bd98

SHA512
8c44f5eadace3b9f01385c525d7b53c2f886e8b09088e6e7025be0ae9167e834fc3ae0c16e4b224b096bd23c9ce1e704302eb2ee446d8dfaca541c9c32531246

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
6440eef9cf5a3b2c5cfcbbf0faf0ef09

SHA1
075ac0f12d23d07c49fefc18dc660d389b9e9180

SHA256
3d1e1d53dc86f0800defb64fc38631a23d55f04a33c40226f8e045f67a297011

SHA512
27e8ad91d231b4113216fb4f3f755fb5a9151c6ea5b9539370010bc16768b4bcff4a89d4686ad13e05e2a75bde3326afbf4fcc2ff5495f6738f0be4a13511e93

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
c4b64fb053162a2c007e7db4c7e0e049

SHA1
ee9a8fee8a1bcd3474a95c86021f9ade05c0df80

SHA256
41c4d3ba024ad5825c797e4c8ef5c7e9ecf9ee91b41aceeac25c5b1b174106f9

SHA512
ba7d7c83ccfba5ce76cc58d507bd84e415575e6238f0c03b8be3e7be8f6ea95cfbdf4c0caef9c403d38e3b63cd399972d52e1aa4a953f5d71d091b9aba23dd9b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
92dbd16fdcde5b6e6775c78f691d6740

SHA1
06f9b9a29efb08f85803559ff5157df72b6d13be

SHA256
38234df27c651a1dd0ce46d346ac0e5ab1dd1aa61bb973c07643c0338ad6b84a

SHA512
a0bf0e030e0a8b03afc9e2c2f4c4a99007d4bb785542a3ed13223d6eb241a8e18aa86b0a0d0e28584ea32cd637f7cd99c554f836d3302dfe05715385fbd36087

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
6KB

MD5
8398b0d38e39eab631eff78731de1e16

SHA1
0aab4b28123b371e3d9e06bd33b4e7edb3b57219

SHA256
f22df54e7c75b08b83dfd27f745e025d22a9c9b0a331b0a0aad0549d21e7e6cc

SHA512
28e0a1c8e875eb59bb5c6b3f79c82b09ab69ccbf2704bc068c8a69df4d3ecbddfd0bdc2800c36a1c69d34e0f7f609261e5832193daf1971904c857f8b21923bb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
1f84117ff1250468a1d696df85219d44

SHA1
881ba23e3ce21afdcea9f6e82a10fc9d15d23991

SHA256
21e0bb4db0434b89d2a7fda932d2166fcf217c21df5af26f37ebb8f59c1b1c68

SHA512
84029c1bbd21c3565a1a956ebe24c13ed79b5237ac159d43e9a6414a87858c8330ba7e0267c55b03821b8862155690ffc410c7bfceeeaf0089837e72c30f6e20

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
3712cb900412748cee67a0e35f5fb01c

SHA1
3ece9a7702be605cb62f27499f3b17117a4adc82

SHA256
9e3b135c802c0f0468453651a80d4af29296fdc3daeab58d2e6782c5cd413021

SHA512
a2574316fecf31a6d1847bfb27961bd4a4ad5b98e6768ff5a87d943c605e8038107c4338d43db3fb4a56c45687be9b7c7a2136addc47dc3901afc25a463dc7ca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
1b02d8a92e356900529210cb00e4367c

SHA1
32482401f92d25d872133be088fc978342531346

SHA256
4d3b25009b746274efbbf4f2bf48eb45a08de2f993fa5f3e298d9abde71d8680

SHA512
34cc6401084cd052ad75bce9be65797cf9ca376e49edb88968a6d1f3947631888652c87e4bc121b773b3f9d088ef04f65b24f8ce295854c8851a121971c1d3c5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
0ec6bf878827bd4d44be41fbe1b6402c

SHA1
e4d97d6dc3da5d2f3270a00aeebb47b78649b268

SHA256
a96eba555935269e37ebb71a7fed3cf0cbdc668428c57d8a2851305862263402

SHA512
892188edaae154cb176209a6803a624c8448e78a60eb891cdcf207c0535d27d765a396c48184d8ac38179af2ea81c83937243c528f206c8b01e348f766ad2f01

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
f347a39d273f4c8aa36c4a7cc33adca3

SHA1
26df17e52211fb8ace4219fa420d67d369dbeb49

SHA256
0eba245ef030f293e4b9a40f1e35954ab5ab41669541412579445b5fc952d9da

SHA512
19a2f80ed15b08df81d67f7efebc5762095127c1cbe3f8108689b3d817538a93f9db3df0f146c8c23aea6a8f9d73501792f35fffb38e499e7f0241b64b3cf8a5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
f80fbb5aa3a1717acc80dacb1c2d298e

SHA1
52722fb72588de12f16f807badac51ebde6a1562

SHA256
0f1d021cf4c10b8951ae82972ca5db67b012f4b8cd4d905242f4f943c77f463b

SHA512
97c1d48846aaa3f28471e2c8760ce0fc0c0a01fd725f22f452b7cad0156ae5775ed4062b6a8f67cf42b7bb13fd09b4a783987333425fd8ac882d74637c2e59dc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
092599b5b6d25a66a6ebe0d010180c7f

SHA1
791b3a79f879671ce039ae6c50827a054a0043da

SHA256
60b05922298c5beaffc3347d612b2c010159c7d16674fbd3a93442eb012d9cf2

SHA512
cc74a82c5fd9fb30e4c9e945627256860fb8b820a2d239246cc51e01bd7215b0c52255bde3668d7c6f5d1e15bbe3dee1fb0e132605d35dc3c3a61c87ba27072c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
2bddcfc3d0d75b77737ccc4023419d3c

SHA1
70594e5519db6e49b9fb577d8aa48a79e218cfea

SHA256
ea776096c7245b6910db4277b7384f49a93f60673c185f9fdc74a57dd14f70a9

SHA512
ab2693327fbb77a6f56ed55f4395b4f6cbde524aafeb2d0eea70fde92c35394ebe89fc7a0cbed8667a3a69d0b7a0f16dde977ee552f390b84597b1158f532696

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
f4b3dcd6015e256355794438f87d545b

SHA1
3eeb6f70a5897e6d20f574318f003cdbc55f5b84

SHA256
299cf6e15e6234207c23af5201ec3375fcb862adb98dc0a3f53e0295a7d322d5

SHA512
5776d9eb115980c8a0cefbe180f5db8ea95f90978248952fdc33b85a905cd748f661a667196b88e10f7b50b3a2e49a05fcc6a06f52a61db927ec7cdb145f2764

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\ce5ac48c-3fb2-499a-aab5-778aa1ec6df9.tmp

Filesize
1KB

MD5
b0f413f5fcbec4bc77c6e059edae5a0d

SHA1
998af0d313980c0de79d7f6a6ecc5e3f61de680f

SHA256
071400a3c1d513de2640f9e1207508c233200b5846e1a48d22d2ec3aeffca4cd

SHA512
5a17d90f58cbd4bdb4e621125ed3c947b2a956aa64c09fb58c62ba394d0160e174c72af91cbed5c50401e24515a9031043b569f9202d025a8d7bd80b54097d9e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
82c29b7f5107b8e5a474483d0e9202e7

SHA1
0b5b40ea7d6ae45f2c8412162362331033a32484

SHA256
7fdded788f37ab3cc6144e0d7114d2bff2f593e883eb0fb7a148e231bdeabb37

SHA512
9d0165e0e77907d5b8837677192ccf6a7931eedd66de55713e3e1778c9e37119b7054876b6f0636767de81f5cc692269344af6b3a2d7056f8008a27a3d56b2bb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
b2fd9e94cb04d480e601861e7842a4a2

SHA1
54f1df5447f27cadcb88cac4a81be30207698b7d

SHA256
6cfc0d444466d895478b5278dd968bfcc2ae28471e57ee1aaffccfce7fd749d2

SHA512
83cd016f60b525893184dd8cf2fb32dbe95ac48abc86a707f1f9de70bfd746253d9a8ae5b684b78e54d3b98f10c9cba8bf31fafd2835c603d39dc639f6e54a9a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
b00ccec781e473ac0c31818fb1bf329c

SHA1
f27294e4034daad07a60ac1f38a166c039ecf4e5

SHA256
109c4ba3facd13820be4db4fb57bb249403a9c0eaee8b00a81ebc71c9dda4f66

SHA512
6c48acbbba351dcd9cabff8f03109098ebc6cea5585dda340c9c4824db0992228182b934195da6b97c3ba5bee8453a41949531f07c1fba9f15525f069db519e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
f02754868015a1137dfea66f73e97ee4

SHA1
bbbb84ce54a3ab107f5154c64719b9a6afb89521

SHA256
81134e20a3938ff74fc5b32ac579275f65b54a9b77c0ed352ede8e3cafc5ae65

SHA512
3d556f226c366d58542f8a6d3857ace16f79f57925f4900c5762a194f2c86f128529c23550b8a38c63d1ff184a44166b02d4cde3795ec65cb94f1d48cb0d3154

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
c6157f8bd1317aa6804c0a8034d388c8

SHA1
9d34ba1738bf7a6c639b1c930a8e2a8436f3fc7a

SHA256
5b6c39b5fee75880db8defce6e75621e7f93520e7cbb056de5f32764af348867

SHA512
2f054374bae03ff64343742acd1586c497bcf897005bb510801eb2efb4f102bd2a8c1ce61e0f7993e2ca54ba7e4e5b7982532cfcb7bb35b9a63fb48f89cf68f7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
5ad998ce7215ac8a011a4abce486486f

SHA1
81b5a978e15030915f22d7ee35ed08b5ad8e6bcc

SHA256
a82450eb4c00a78e8bcc77405b38ac843d731095ecb21ca2bf5bf28431905c28

SHA512
8885cd69e0725b317cf5691a476813c420d7e572a86d3175d0825e23c0f611645a65998f69de2697d7913ab76b6454fe8ce2124784b7620c414a6527b57cf1cf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
c11749387665950a2bb71d3166b37db2

SHA1
d97d7f58a360adf89b30aa2d85851ef04e07391d

SHA256
f83649b4a3d2830229107b8fb00d69bbaccad64a38c3260746d9d98df6380494

SHA512
92e979ee51addc2fa3f9053b7a0c7907c2f9388fb3ca18e4d302a39fd2c23b30c574211459c8962a01ff9b3c1329fd905f1a4b7ff0dc5bcd9f93d0ae4c4f5301

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
ed5555e38016ba95ca2c3468d596f6d6

SHA1
50f7fa6010c0f4a1bd217120dcaff49c36b4fe64

SHA256
358c87e682a3f4fe286cc3fec8ac873e9c74e99811aa5d0391c6d500a9350abf

SHA512
3fd0c72abb7d583933766716772345c173f597236b98e2409a3680fe7898ce4902cf9e27e7a385f4c0b0d28d4243cfec8dd1849d56ea302b82bcc6e013e15a9e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
4d9d6fd36aafb8de708546cd6a964534

SHA1
cb18c463a517ee313d70b5de08e432a8ed06e268

SHA256
ccfd1a190b634d2575e9b2c8716d3442841074cfca86e43cebe72015f658e42c

SHA512
a64c241331f8137b3a06a739f2ff3e6033124ccb7613375e333331a0a746d1aaa4c6b4053171df9a770e41c627a30de8b087d6e746f21fd4178713dc84a62ac1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\f_000026

Filesize
17KB

MD5
43cbe3af7a99f859fbe405a4416a914a

SHA1
cbaa2eda4ed71a3d61541b1fa80f9870b4f9b810

SHA256
d2e3669d2812af7275bc72be47edd55663a898b251d02d0ab57e18d929906a8b

SHA512
03fed245be777e2046a3b2e7e702adad5b31a477104894409c8fa2a0f8357d1967c95ec53c8b5e0f94607d9e2bb5dad01ccd282de45da0347dcf59ef91a33883

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
b14b77a14a84e37674b5f37b822f7f2f

SHA1
af7ac781eec651efd7013b58cb3555ef3aa14b3f

SHA256
b0deb4c6e35bdc6d0b630fe82c10fe5f31204d2cc8f4061a6288e954cc46ba2a

SHA512
f326228774987e50ae4fdd58daaa16dae13eb77f88f8110dd56ac109e2519cdec6b22b2dcfcf3bc01e7252582bfd0b58d403befdc090ea0b1a4144fce5580df0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
0c30d8493eb976d9d5173ae90eb38b4b

SHA1
26f93987bc27434242666d743ab76e73d0a67451

SHA256
69098046a6574a42e1658550a7255c690b605b10708f8bd45bd04466aa95c52a

SHA512
ff6c8e32da06b852f5d79b253de551b45477a8a296e22411b6d36d45bbc3d8fb008d7586297f22abe5d96f97d49c5206e23d24ce58551af44ec0ac1f14e8b5e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
5cb1fb5e400a8dc07f012219271b9545

SHA1
94180ea6338443afa942e95a992cc7b8d2981586

SHA256
28d0fb0c3cdd02e92cb4b0618841c40b04e3b7437f585cf3141a29ab3432eaa8

SHA512
8ec09f7163c3978b41d6d155d5f30450589354948f1036466c74b4c3625931573d2495c5eeeb168f498957f3882032109e9c05df207296ea590b9605662dc2d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
0a8c090a608fe312eed68c403636b82b

SHA1
83f691fd81e2f1a5ec44353dddf6bd6bcef5ba89

SHA256
e8c90daafd172d3627007401f242defa03d2b5e5718e77969587165fe50e2d49

SHA512
8cb913652e337b8de8c9bdc63d976e0b382b4f3330a7bec07781e9684256a213294dea297e8e8d2b819bf0590bf4436a33d16af1cf43a4916b79a59601f38f67

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
105KB

MD5
23f83557b4b9a35a57af7e7c90008048

SHA1
cf8140b75117ca6cbfd73ceb4d4c8f8728b76290

SHA256
3c71d5f0ade31c3482ea84301d20c63ae1f1daa3ebd9898c751d2f62413e4216

SHA512
753082f8e8ddca821b87ada6afc1882ab1b7803384781cf402c68055a6c7cedcf3761ca373e2517989ab16b6cc99381a480cd2a3c877bf7a850bb09924b09084

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
104KB

MD5
60200d21e78021a9693bff2e32895076

SHA1
8d05f58e965fd9262cbdb612313f71c0c9f17b67

SHA256
d481e5201fa16998b663d172ece4976e0141e4060e534f4791914ca31cb5d387

SHA512
e383008f124e691e7137a1427283380aa4260f7244cff6be4f8f9a863a30c330a2f46555640d86b432d390b3c5d51db31e8609e127e4d9673d32c496cc2c27e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5876b2.TMP

Filesize
97KB

MD5
51d5cca3078c4f844b560255a6b06c58

SHA1
5b3ff640e07aee41573ab2249e83246753d29dce

SHA256
888bcad63ba6605c47d13e55d585179862866ddc1715f90f8f409b74ea53a728

SHA512
8958c6d7707e26c68226283d2c4c67a5718a89215aacdaf86c6a5121fbc8624f5ed8148affe1096f7b415b1df995fa31c7b826f4760ec80abb368cf4cfa255b3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit