Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    74s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/02/2024, 17:41

General

  • Target

    Deef_64.zip

  • Size

    52.9MB

  • MD5

    43d73755832709175ca639fa410347b9

  • SHA1

    262136a272132704dccbf2d9738fb1ce5c4e707d

  • SHA256

    b8ea2490dafd9641416714fb0fecdf55cb1d2b91dfe111bfc6b0bbc7364c11b4

  • SHA512

    e3e1b2e4feac6f9eea7699ea16cf4a38d66cb67acc71583e80332c410137c82d3ea641c3eff76eb9a60a56830f4ae8dad03b46e94fc30b2f468d3ac28deb630f

  • SSDEEP

    1572864:x8OzMj7F6Zhneiuv5+tlHUd74dzu1QVVYTx/JT0:aOA3cZVeiuv5+tlHUwmWqTlG

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Gathers network information 2 TTPs 1 IoCs

    Uses commandline utility to view network configuration.

  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 46 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Deef_64.zip
    1⤵
      PID:1936
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:2116
      • C:\Windows\system32\cmd.exe
        "C:\Windows\system32\cmd.exe"
        1⤵
        • Suspicious use of WriteProcessMemory
        PID:2568
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2644
          • C:\Windows\system32\whoami.exe
            "C:\Windows\system32\whoami.exe"
            3⤵
            • Suspicious use of AdjustPrivilegeToken
            PID:1532
          • C:\Windows\system32\ipconfig.exe
            "C:\Windows\system32\ipconfig.exe"
            3⤵
            • Gathers network information
            PID:2948
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        1⤵
        • Enumerates system info in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:2144
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef5f79758,0x7fef5f79768,0x7fef5f79778
          2⤵
            PID:320
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1096 --field-trial-handle=1224,i,834843160983046780,2190047294795710156,131072 /prefetch:2
            2⤵
              PID:1740
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1496 --field-trial-handle=1224,i,834843160983046780,2190047294795710156,131072 /prefetch:8
              2⤵
                PID:1360
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1600 --field-trial-handle=1224,i,834843160983046780,2190047294795710156,131072 /prefetch:8
                2⤵
                  PID:2064
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2272 --field-trial-handle=1224,i,834843160983046780,2190047294795710156,131072 /prefetch:1
                  2⤵
                    PID:1480
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=1500 --field-trial-handle=1224,i,834843160983046780,2190047294795710156,131072 /prefetch:1
                    2⤵
                      PID:272
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1460 --field-trial-handle=1224,i,834843160983046780,2190047294795710156,131072 /prefetch:2
                      2⤵
                        PID:2056
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3216 --field-trial-handle=1224,i,834843160983046780,2190047294795710156,131072 /prefetch:1
                        2⤵
                          PID:2176
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3668 --field-trial-handle=1224,i,834843160983046780,2190047294795710156,131072 /prefetch:8
                          2⤵
                            PID:1584
                        • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                          1⤵
                            PID:864
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe"
                            1⤵
                              PID:2348
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef5f79758,0x7fef5f79768,0x7fef5f79778
                                2⤵
                                  PID:584
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1144 --field-trial-handle=1284,i,16845891549274512832,707916062975426646,131072 /prefetch:2
                                  2⤵
                                    PID:1324
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1492 --field-trial-handle=1284,i,16845891549274512832,707916062975426646,131072 /prefetch:8
                                    2⤵
                                      PID:364
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1572 --field-trial-handle=1284,i,16845891549274512832,707916062975426646,131072 /prefetch:8
                                      2⤵
                                        PID:2764
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2264 --field-trial-handle=1284,i,16845891549274512832,707916062975426646,131072 /prefetch:1
                                        2⤵
                                          PID:1724
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2296 --field-trial-handle=1284,i,16845891549274512832,707916062975426646,131072 /prefetch:1
                                          2⤵
                                            PID:2876
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1448 --field-trial-handle=1284,i,16845891549274512832,707916062975426646,131072 /prefetch:2
                                            2⤵
                                              PID:2492
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3000 --field-trial-handle=1284,i,16845891549274512832,707916062975426646,131072 /prefetch:1
                                              2⤵
                                                PID:1300
                                            • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                              "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                              1⤵
                                                PID:2680

                                              Network

                                              MITRE ATT&CK Enterprise v15

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

                                                Filesize

                                                40B

                                                MD5

                                                c6969b129900fb90d31dab364862d870

                                                SHA1

                                                456ceafc86e70382b2070382ef2e42263cbbd927

                                                SHA256

                                                0871a5dcfaa91de843fe3ba6daa4b926de5f84d9072219846df043221439d2d8

                                                SHA512

                                                8ebf456bf06ccf59ea3cb6e508429a7b34e522009a04876288c83985a0046c738fa23786ff6e506d7a8b82ed8a4b61cd741ffd635f793cf4761d789aef57359f

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0

                                                Filesize

                                                44KB

                                                MD5

                                                76c07e6c8caf3a865635806ebdc0f75a

                                                SHA1

                                                fe493a93cdcea85f056d635f24092acaa3d079a0

                                                SHA256

                                                6e96edb7224d0404bb38344ad3485a0fc177c57b33fa3833478514e106f6ca2d

                                                SHA512

                                                dabfa4e188ac4e307eaf5eda78134e0ad0abfff363e8295e0bb23a3a24bf1c140535ffd6c204121a92ad5a791c885f9b328ad50e66e8b6ad7b957600c9011fbd

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1

                                                Filesize

                                                264KB

                                                MD5

                                                3b089a0e3c6c567718bb275960f1500f

                                                SHA1

                                                c1c057d1b4309bb45acc3f51a7ea138253626db1

                                                SHA256

                                                53d57f2487a8c556ae64a2a2e597ab0e7cfe4780434bf09fa253ae5ebff77c69

                                                SHA512

                                                984bf3b817ff17427ee15433cabd2c7374fe7c9f59754f1a53b1d6c2dc26622a0be113d14f6488ace013b6dfd648aa0e5be8b3b8e01af418965fde14ab7b0101

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3

                                                Filesize

                                                4.0MB

                                                MD5

                                                4f96e9472c89bc1386f0db3e7cff7ef7

                                                SHA1

                                                c42ce2ce3bc16567c3bd11a3bee29e2452e61f60

                                                SHA256

                                                bd46547a00d04e890c6728ccf82b594fcf6074dfe18d9bb34afe0f9b2d40ca82

                                                SHA512

                                                612650b04d6167fe866cdfdddc752e2a142df81cb5e841a55ba017e405c2a3da460365df62c512290b480344e9e2bed7794076de3a61e8da3c950c113f1a387f

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG

                                                Filesize

                                                136B

                                                MD5

                                                cdf4a9df0fabf4357f2752c1f7932e0d

                                                SHA1

                                                8cdb656ab4ff459226bbe4cb40b9633c0561138d

                                                SHA256

                                                b810d6664b62449100c427353b05c077de04fe6ba21112f6d35b0713c9551481

                                                SHA512

                                                15a817a045f08a26074a0e7e66d1fdae0f6a1f1f3db4182d3ebd477e0fdbd3eabd186dac45717ab1799e8379d0a7197eb992b74b616c6339b83f2b9185c53e51

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000007

                                                Filesize

                                                50B

                                                MD5

                                                1be22f40a06c4e7348f4e7eaf40634a9

                                                SHA1

                                                8205ec74cd32ef63b1cc274181a74b95eedf86df

                                                SHA256

                                                45a28788cde0d2a0232d19c391eae45777fe640790ac0674d6daa5672c444691

                                                SHA512

                                                b8f6f42d375e3ad8015d744fa2814994fa6e588b41cce0131fca48194dd40146b08169a8ce0da350525ff32a59a16edb503c72e0f07254955c82a0d38074856e

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT

                                                Filesize

                                                16B

                                                MD5

                                                6752a1d65b201c13b62ea44016eb221f

                                                SHA1

                                                58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                SHA256

                                                0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                SHA512

                                                9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG

                                                Filesize

                                                136B

                                                MD5

                                                1b8d1c1f7ad4f98bd56ee9496dbad6aa

                                                SHA1

                                                dae4418e5464f518be1edabf3f654e7cacd81388

                                                SHA256

                                                3c7761111abf767a8878525b14ecacde798befaed88683fe373d26de13c284fb

                                                SHA512

                                                5dec3ff448b4d3de621c45180085e1b7fcf4cc714e4bf7eaae74e02b052d90990af9fe0fe685ea2c37ed73ccb8d9dee3367aa6c9d3e0463100b733c538b3a20f

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\MANIFEST-000004

                                                Filesize

                                                50B

                                                MD5

                                                031d6d1e28fe41a9bdcbd8a21da92df1

                                                SHA1

                                                38cee81cb035a60a23d6e045e5d72116f2a58683

                                                SHA256

                                                b51bc53f3c43a5b800a723623c4e56a836367d6e2787c57d71184df5d24151da

                                                SHA512

                                                e994cd3a8ee3e3cf6304c33df5b7d6cc8207e0c08d568925afa9d46d42f6f1a5bdd7261f0fd1fcdf4df1a173ef4e159ee1de8125e54efee488a1220ce85af904

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\CURRENT

                                                Filesize

                                                16B

                                                MD5

                                                aefd77f47fb84fae5ea194496b44c67a

                                                SHA1

                                                dcfbb6a5b8d05662c4858664f81693bb7f803b82

                                                SHA256

                                                4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

                                                SHA512

                                                b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG

                                                Filesize

                                                136B

                                                MD5

                                                1d6ebe08a43fd3adb84d9b22a3bbcbb6

                                                SHA1

                                                53b40176bf3d7f05fe52812a854d9a55a75f7dcf

                                                SHA256

                                                9e2069c283de861c170b91af9df48045a993f64bb4bd70fffd800f17a9515200

                                                SHA512

                                                46b511e098aeb03234ff823d327fbeedf76bc8e055d3ddd82f236ea37300702213e84bd59984b17542f83d66ffb6492fa6111e57021db72236d37321ae9d3bd1

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000006

                                                Filesize

                                                50B

                                                MD5

                                                78c55e45e9d1dc2e44283cf45c66728a

                                                SHA1

                                                88e234d9f7a513c4806845ce5c07e0016cf13352

                                                SHA256

                                                7b69a2bee12703825dc20e7d07292125180b86685d2d1b9fd097df76fc6791ec

                                                SHA512

                                                f2ad4594024871286b98a94223b8e7155c7934ef4ebb55f25a4a485a059f75b572d21bc96e9b48ed394be8a41fe0208f7bfb6e28a79d75640c5b684f0c848fe3

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                Filesize

                                                779B

                                                MD5

                                                35439c804f96002b82c89e31acd8f5a2

                                                SHA1

                                                843d1d828a8688951b814a81ae61a1ced79c3b77

                                                SHA256

                                                c8c7d27139e5ea2c67f65b0db13ce9e0889dcd8f30030d7d000f62d62b49ce0c

                                                SHA512

                                                9ab47c2e5b65bd2d89222c120de1cd095aadca8187042873cd88269fbc134b3ed836ba2076319cb6f14968d8da9dd3511a2a27550bd7adf4f21cb23e87b249ce

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL

                                                Filesize

                                                36KB

                                                MD5

                                                a058bc62769e6d51f2d05f32691fe219

                                                SHA1

                                                3a3db95b9c7acd20b0472cdf93a2d8941ef3bc1d

                                                SHA256

                                                05b28e3920bcbb3b517a6083c7a158e56f02095f830909ca6fbcf0fc6f141462

                                                SHA512

                                                a551cc645a9664e99e22b1cce1ac8d94533d6928042c49de4e6bf39a7f47f606ad7d12182e0bb4c85c71b97cd14c0c4477b05d1af98679883eac426e23ecdd78

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                Filesize

                                                361B

                                                MD5

                                                cbab546fbe5170fa1aef5db2ad3ba57c

                                                SHA1

                                                b1f67817c06d3c3849faf7841274536f37b3d1d1

                                                SHA256

                                                dbe11f8d475c4605fa3135013132f63f347250c49e068d3ee33932458aa9de60

                                                SHA512

                                                fb9ec8d7bbb295d8ae721afbc9cc73608628e15e27000ea95e2086969bd445f8830236169861c435d5184b1469a82e37cc3578452834dcf4a9c0ba91f2b3dff1

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                4KB

                                                MD5

                                                51ab14b36581abdfbfad3008c9e4d11c

                                                SHA1

                                                d53be52d5f92a0685212e234fd578bed03ba9f44

                                                SHA256

                                                9276109f342f2810bc816285452738e23d27323d3f6dc58097357f7823f609ae

                                                SHA512

                                                72d3442b32bf0567a61dc84078b01235200bfea4ab4afa1dd01ecfb62ca391292729516bf5aff88f651fe227620909ac814154bd9b6dc87ffaf3c89c54d1c416

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                4KB

                                                MD5

                                                652f668bd056e4bb3a8e6b7529deae34

                                                SHA1

                                                aaa897b85e345c1d5cbc0a580971511987e8bd6c

                                                SHA256

                                                70a31f8588cf2e2b653ce5a2105250fb1a2b9f564503a71f17b2bc571486ba50

                                                SHA512

                                                a959824a4e2651fb50e4cca6d6fb9c89c9fa1119cd49bc7e3273d667ac299c8fd7745b725e53bdd24c190fa081de707b4e9c85e05157271e4e6975b377282534

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                4KB

                                                MD5

                                                92ffebd216ef8c0eda3ef920739795bb

                                                SHA1

                                                a7aca8917c924cd8dbef429b2e0dcdf60d1ba521

                                                SHA256

                                                bed97587e86fe222a77119637f9688cf5ac603d4ba979ce30a2b4402ffcf8225

                                                SHA512

                                                4c1461fd174b46002125aabbbd7a230a9a1200832ca895795829021aaa36161fb10c2bc56e6dae491f261789c8465b1e19e700a30a8200734bd94df91080a61a

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000009.log

                                                Filesize

                                                38B

                                                MD5

                                                e9c694b34731bf91073cf432768a9c44

                                                SHA1

                                                861f5a99ad9ef017106ca6826efe42413cda1a0e

                                                SHA256

                                                01c766e2c0228436212045fa98d970a0ad1f1f73abaa6a26e97c6639a4950d85

                                                SHA512

                                                2a359571c4326559459c881cba4ff4fa9f312f6a7c2955b120b907430b700ea6fd42a48fbb3cc9f0ca2950d114df036d1bb3b0618d137a36ebaaa17092fe5f01

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG

                                                Filesize

                                                247B

                                                MD5

                                                a5764c024ea72a8b61ea8b5e1f8e6cd9

                                                SHA1

                                                e5877c8029ac47dbb399cc69b8c31a38f55a46e9

                                                SHA256

                                                da1a3ac3bb04045daa89f4c28c3ca632ed1642ea08ef31687c53e147adfc762c

                                                SHA512

                                                3f524b294b224e6ee290c5b433e80d3a2f291a053b0e3a27a063bd0dbc0cd957069960586cad317f694942d4d0d6acb5be68e22135f4a9a3ab1b4b11f7a80e2b

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000007

                                                Filesize

                                                90B

                                                MD5

                                                b6d5d86412551e2d21c97af6f00d20c3

                                                SHA1

                                                543302ae0c758954e222399987bb5e364be89029

                                                SHA256

                                                e0b2fdc217d9c571a35f41c21ed2596309f3f00a7297a8d1ded05f54f0e68191

                                                SHA512

                                                5b56ae73a61add9e26f77d95c9b823f82a7fcdc75eed64b388fb4967f5c6c42cb0796b0b99dc25c89f38952786176c10d173dec7862a8a5ce5f820280f72d665

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13352838203460800

                                                Filesize

                                                4KB

                                                MD5

                                                24d960a267989fe87dbd992368b838b8

                                                SHA1

                                                34bf800501ba0420455838109e611f1c3754fa24

                                                SHA256

                                                f8e1d63710a8130d698cba77dd11317579b516b6b6247bfe40b5355ab01b0f26

                                                SHA512

                                                fa2927a53eac3e5adcc695f743a7d024376fa4c21a4f979dc7403e1953641095658bb58e7b35053ab81539af7298625ee88fd3f2d6b18a29535a7e282a1f31f8

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\CURRENT

                                                Filesize

                                                16B

                                                MD5

                                                18e723571b00fb1694a3bad6c78e4054

                                                SHA1

                                                afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                                SHA256

                                                8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                                SHA512

                                                43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

                                                Filesize

                                                136B

                                                MD5

                                                b3a81c650d6fa0316a6b17a40dd4e52f

                                                SHA1

                                                aa2d7731d7450665038a8892652ae633b33853bf

                                                SHA256

                                                c471b2106b3edf730b80df620ed6879278fdc340969713abf039a4b9b808ff3b

                                                SHA512

                                                419a0cf0b66335c998c2010a947fdf804ffae36956bef9bef1e99227a2fb5f0931acf5ad312990fc26a9ce7211b3abfe6b87d189f5708e23e4450c9830e8c152

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\MANIFEST-000007

                                                Filesize

                                                107B

                                                MD5

                                                22b937965712bdbc90f3c4e5cd2a8950

                                                SHA1

                                                25a5df32156e12134996410c5f7d9e59b1d6c155

                                                SHA256

                                                cad3bbec41899ea5205612fc1494fa7ba88847fb75437a2def22211a4003e2eb

                                                SHA512

                                                931427ad4609ab4ca12b2ee852d4965680f58602b00c182a2d340acf3163d888be6cfad87ca089f2b47929ddfa66be03ab13a6d24922397334d6997d4c8ede3b

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000009.dbtmp

                                                Filesize

                                                16B

                                                MD5

                                                979c29c2917bed63ccf520ece1d18cda

                                                SHA1

                                                65cd81cdce0be04c74222b54d0881d3fdfe4736c

                                                SHA256

                                                b3524365a633ee6d1fa9953638d2867946c515218c497a5ec2dbef7dc44a7c53

                                                SHA512

                                                e38f694fd6ab9f678ae156528230d7a8bfb7b59a13b227f59f9c38ab5617db11ebb6be1276323a905d09c4066a3fe820cf58077ab48bf201f3c467a98516ee7a

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG

                                                Filesize

                                                136B

                                                MD5

                                                6c2f475929e3232b4dfbdd62154ba426

                                                SHA1

                                                bbcf3c506511c73116cc184ee1b0f1914389c4cf

                                                SHA256

                                                9ee353f69c262fd6480f974ea7e5ff5aec6cf2f932e325cf94f0a7fac1336383

                                                SHA512

                                                a38c34c47e42150d2679a746aa4498b394b1d9fcf4c3a61b0ab7494d1d8b84d1ebb9868346a83f2354fe2f79ca2a18110ee74486c105bca6923488f024bbc6b5

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000007

                                                Filesize

                                                117B

                                                MD5

                                                2ac0494b5c4c6d605281ee87339a0cc7

                                                SHA1

                                                6ea0fd5480bd086ed4110d0622388574f0222666

                                                SHA256

                                                53161ecf97484ce07e22fbed3f642f3c1daec51a22b84be407522e5d38d2afbd

                                                SHA512

                                                77c6a0422b17b90dcc84094e184020613bfc7f71f07bb6fe15a68f48330e7b374c5228d65606341248983e3ec17c9b30a61e31ebdfac73f7e6abeb9d2b5f8f7e

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000008.ldb

                                                Filesize

                                                485B

                                                MD5

                                                9733c5ccb6e2cb25ccc92d3f977d545c

                                                SHA1

                                                6c8a8b3673e4eb4742f1dceeed07f9fe39a97d07

                                                SHA256

                                                7a1d151baf9ff270f94e43f4186da8755b189ab4df78c8b01b2337e9d2385623

                                                SHA512

                                                65615e9a3ae56fb8daeac2480c35c43498ff7a0a894cfd66c67428e09e1d292a103793346f733f9dd62512e426f8c89a814009d7109283915f7525e0dafa7a0e

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000009.log

                                                Filesize

                                                190B

                                                MD5

                                                66bac6ff4af11ca531a7358691fbc8c3

                                                SHA1

                                                606a2dace951b0c415608de31a89ccaad09943d5

                                                SHA256

                                                ff53b51d3ac14a11f1103df9e8af70ab13185973fc9a3746557870e36549f4d0

                                                SHA512

                                                403582af027a50ba92e66d522f7351b8956129e2d2fe3df6a3ca5cd375ba299f89e9f1789fa3d4eacfae30e4a4f4403295ff1128a3e16dbfc1b9d261a24ac143

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000010.dbtmp

                                                Filesize

                                                16B

                                                MD5

                                                60e3f691077715586b918375dd23c6b0

                                                SHA1

                                                476d3eab15649c40c6aebfb6ac2366db50283d1b

                                                SHA256

                                                e91d13722e31f9b06c5df3582cad1ea5b73547ce3dc08b12ed461f095aad48ee

                                                SHA512

                                                d1c146d27bbf19362d6571e2865bb472ce4fe43dc535305615d92d6a2366f98533747a8a70a578d1f00199f716a61ce39fac5cab9dd67e9c044bc49e7343130e

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG

                                                Filesize

                                                249B

                                                MD5

                                                5f8658df291a3fbf3169e5af58c9f5f7

                                                SHA1

                                                6d930be7fb80fcc3482396d742cefa51176eec4b

                                                SHA256

                                                e359ba9ec4e9866b629da7776cd3105f25eb5640a8269ffb5f70d563e9b2d884

                                                SHA512

                                                4481aa3b4e37619b1ae6bb6cef137253e7580e56f6201332d36ac842c6746c9cb10e59207491bb17e095d0f8aa74a82497d8422d2124d6ed660c796b944f571a

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\MANIFEST-000007

                                                Filesize

                                                98B

                                                MD5

                                                1c0c23649f958fa25b0407c289db12da

                                                SHA1

                                                5f6b10cd5a39fe8c30353bcf4cd4e4a60ef35574

                                                SHA256

                                                d5134b804a775cfb79c6166d15b5721d38ffc2da11948a6c1263595d6c2941cf

                                                SHA512

                                                b691e882018833a108bd286bc76c55a140d00d5a266617a3a381af1ceff01aefaef17acef29d14dec931d7051455726cde8974cd04cc07302f1c3cc452fe2f52

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000008.ldb

                                                Filesize

                                                318B

                                                MD5

                                                b6b7271b06e225a11b3f02c62b1323d8

                                                SHA1

                                                29442c0a7b9cb7712f086fc3f8fe2e87b5c69281

                                                SHA256

                                                47faed838ccba9a1b5a7524f60d78cb3bf37f27e01c106a3bf2d9fc6ed8963b9

                                                SHA512

                                                953df2302fa052f389c3391a8f127822e14a2cc1616bcabdea3c36d9ec2c2ebcae8d835cbe71827621f95f04ffbb49ea01880b3f087fda4202710ffe1db4eea6

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000009.log

                                                Filesize

                                                34B

                                                MD5

                                                fe62c64b5b3d092170445d5f5230524e

                                                SHA1

                                                0e27b930da78fce26933c18129430816827b66d3

                                                SHA256

                                                1e1a9ca70503efd8c607f9bc7131f08aba0476d75f2586dadb4da5485a5315d4

                                                SHA512

                                                924daccfbfb0c0464b4c5fd769e01a8f2e96fe28b635aa27ab4cd91766b05b03bbf941af14c017436107673f01bad815ce1fac2a649e745c76b3c736994b4fd2

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG

                                                Filesize

                                                249B

                                                MD5

                                                9bf973d317b1b86e4887de6b4dd67474

                                                SHA1

                                                763088ba25592a8d13ae8781cfcf951c951bf9f7

                                                SHA256

                                                777b627ace70f1fb5694849d1dcce1cb78c74eeda7a8263713b0a85a3ba647cb

                                                SHA512

                                                38ad413e022c271afbb69b8793d68e0e532583ff9eb2a0c64b421c447c023cbf46d21b73697904f63829123062b09d2696e230756ff154154c64ff74e8afc3ee

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\MANIFEST-000007

                                                Filesize

                                                118B

                                                MD5

                                                93c1b99a4b241cf35d8f30e5bae1df5b

                                                SHA1

                                                1abf5139d1ec1a99dedfdeec784e21d1ab91cbee

                                                SHA256

                                                71d685a0815d4448ed04900527d79e826049eb8d16d3ec6937905e4d29c2c310

                                                SHA512

                                                346563e4f19941faf9345b64069449527c023c6a11f9ba3bbdb62649dd050801e98b1170dfd897ac1c87bbbd1fe042f19a86c26c16ef2bc0acd88e1c5655d8df

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Browser

                                                Filesize

                                                106B

                                                MD5

                                                de9ef0c5bcc012a3a1131988dee272d8

                                                SHA1

                                                fa9ccbdc969ac9e1474fce773234b28d50951cd8

                                                SHA256

                                                3615498fbef408a96bf30e01c318dac2d5451b054998119080e7faac5995f590

                                                SHA512

                                                cea946ebeadfe6be65e33edff6c68953a84ec2e2410884e12f406cac1e6c8a0793180433a7ef7ce097b24ea78a1fdbb4e3b3d9cdf1a827ab6ff5605da3691724

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

                                                Filesize

                                                14B

                                                MD5

                                                9eae63c7a967fc314dd311d9f46a45b7

                                                SHA1

                                                caba9c2c93acfe0b9ceb9ab19b992b0fc19c71cf

                                                SHA256

                                                4288925b0cf871c7458c22c46936efb0e903802feb991a0e1803be94ca6c251d

                                                SHA512

                                                bed924bff236bf5b6ce1df1db82e86c935e5830a20d9d24697efd82ca331e30604db8d04b0d692ec8541ec6deb2225bcc7d805b79f2db5726642198ecf6348b8

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                Filesize

                                                240KB

                                                MD5

                                                cc428ae9888a7fbcf19a28cd7fcc71d6

                                                SHA1

                                                7f702595bb57c4cbf50249655244ea513ff97c42

                                                SHA256

                                                d920fd4efa9916e3fca8c21271dfbb8fb61cd1ed4ca56e3fb3726778a943aa93

                                                SHA512

                                                6ab0460985f6f449dd4835932f4e6d21e7a05dbbf012ed6f6d7da473195b121f2f5c331d1219486bbb681a85bdb910c06294f922a654f4ec7cec98af0e69e2a1

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

                                                Filesize

                                                70KB

                                                MD5

                                                9c306d07e56c9230cfed243185dc914e

                                                SHA1

                                                136976c3bfa6d3625b92cb55f92f4f8eecd53ac5

                                                SHA256

                                                fdbf239ba3de65ecae877399f981005e4354bbae8cb4cf98cd1f6f9526be364d

                                                SHA512

                                                3dc2b67239b1e9c7aad8ecb93688705a299d13ec69bee5873a60236e0e510540636669360a64a79ee16f2119d66ae262a5f7877e91acdcb6b8eac56605d0da6a

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

                                                Filesize

                                                264KB

                                                MD5

                                                f50f89a0a91564d0b8a211f8921aa7de

                                                SHA1

                                                112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                SHA256

                                                b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                SHA512

                                                bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

                                                Filesize

                                                86B

                                                MD5

                                                961e3604f228b0d10541ebf921500c86

                                                SHA1

                                                6e00570d9f78d9cfebe67d4da5efe546543949a7

                                                SHA256

                                                f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed

                                                SHA512

                                                535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt

                                                Filesize

                                                4B

                                                MD5

                                                5a375f9f5463c3726735d8874a890494

                                                SHA1

                                                4fd6112260f9deb794ce09be14ead92cab9b588c

                                                SHA256

                                                9b61ec41144ce2a69853cd53840b9ddf0c39a3dcda70664172dca69c6a8f344e

                                                SHA512

                                                7656be34c92000a488f37cad819a81c9fb5e69381911aa57136c48a68c5c6c5eb21ba3925f1730dba69ab67f20792e49cdd761353bbcb5db882cf5e8918263bc

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\e8cedc7b-7a02-4dca-a8cd-0f1db9c8cbd7.tmp

                                                Filesize

                                                240KB

                                                MD5

                                                604e6f70b699df8c799a223eae7465a2

                                                SHA1

                                                f9c4196c604192c6771d96df42b92aa5d9d22d0c

                                                SHA256

                                                80418ec954423170914369f6d7f1130ff8e48d5271881a09cd679fc7e019d9df

                                                SHA512

                                                87f72b437c30ba82d8687b10384004bbc1da27ebcb9a82d7a7a744604e14ff7ca0dfdfa40af9e961f85cafd5842b0aae441330ce016aa64d34a7201b7ddbf0c5

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

                                                Filesize

                                                2B

                                                MD5

                                                99914b932bd37a50b983c5e7c90ae93b

                                                SHA1

                                                bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                                                SHA256

                                                44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                                                SHA512

                                                27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                                              • memory/2644-11-0x000007FEF5600000-0x000007FEF5F9D000-memory.dmp

                                                Filesize

                                                9.6MB

                                              • memory/2644-8-0x000007FEF5600000-0x000007FEF5F9D000-memory.dmp

                                                Filesize

                                                9.6MB

                                              • memory/2644-9-0x0000000002940000-0x00000000029C0000-memory.dmp

                                                Filesize

                                                512KB

                                              • memory/2644-7-0x0000000002940000-0x00000000029C0000-memory.dmp

                                                Filesize

                                                512KB

                                              • memory/2644-6-0x000007FEF5600000-0x000007FEF5F9D000-memory.dmp

                                                Filesize

                                                9.6MB

                                              • memory/2644-5-0x00000000022A0000-0x00000000022A8000-memory.dmp

                                                Filesize

                                                32KB

                                              • memory/2644-10-0x0000000002940000-0x00000000029C0000-memory.dmp

                                                Filesize

                                                512KB

                                              • memory/2644-4-0x000000001B3F0000-0x000000001B6D2000-memory.dmp

                                                Filesize

                                                2.9MB