Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-es -
resource tags
arch:x64arch:x86image:win10v2004-20240226-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
08-03-2024 19:54
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://google.com
Resource
win10v2004-20240226-es
General
-
Target
http://google.com
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133544012881697332" chrome.exe -
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-399997616-3400990511-967324271-1000\{55760FE9-02BA-4660-BF37-C3AC24A5D9AE} chrome.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2256 chrome.exe 2256 chrome.exe 2192 chrome.exe 2192 chrome.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
pid Process 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe Token: SeShutdownPrivilege 2256 chrome.exe Token: SeCreatePagefilePrivilege 2256 chrome.exe -
Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe 2256 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2256 wrote to memory of 2428 2256 chrome.exe 88 PID 2256 wrote to memory of 2428 2256 chrome.exe 88 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 1672 2256 chrome.exe 90 PID 2256 wrote to memory of 608 2256 chrome.exe 91 PID 2256 wrote to memory of 608 2256 chrome.exe 91 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92 PID 2256 wrote to memory of 2240 2256 chrome.exe 92
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2256 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffa1ec9758,0x7fffa1ec9768,0x7fffa1ec97782⤵PID:2428
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1712 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:22⤵PID:1672
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:608
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2212 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:2240
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2932 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:2900
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2944 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:3540
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4680 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:2800
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3212 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:4352
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3948 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:2360
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5116 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:2288
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=2964 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:3152
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5144 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:4920
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5480 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:2732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5548 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:3512
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5992 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:3816
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3716 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:1660
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3752 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:5032
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5988 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:3540
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5308 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:848
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5904 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵
- Modifies registry class
PID:2648
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=880 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:3432
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4720 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:12⤵PID:2824
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5240 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:82⤵PID:3620
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5636 --field-trial-handle=1676,i,2643356458390222480,7421105494525869285,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:2192
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:3260
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x398 0x49c1⤵PID:2972
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
194KB
MD5f5b4137b040ec6bd884feee514f7c176
SHA17897677377a9ced759be35a66fdee34b391ab0ff
SHA256845aa24ba38524f33f097b0d9bae7d9112b01fa35c443be5ec1f7b0da23513e6
SHA512813b764a5650e4e3d1574172dd5d6a26f72c0ba5c8af7b0d676c62bc1b245e4563952bf33663bffc02089127b76a67f9977b0a8f18eaef22d9b4aa3abaaa7c40
-
Filesize
24KB
MD5b82ca47ee5d42100e589bdd94e57936e
SHA10dad0cd7d0472248b9b409b02122d13bab513b4c
SHA256d3c59060e591b3839ec59cad150c0a38a2a2a6ba4cc4dc5530f68be54f14ef1d
SHA51258840a773a3a6cb0913e6a542934daecaef9c0eeab626446a29a70cd6d063fdb012229ff2ccfa283e3c05bc2a91a7cac331293965264715bdb9020f162dc7383
-
Filesize
214KB
MD5f854d47139a61106b794a959c05ea372
SHA14ebfa6876cbc7173a325b75aa3ad298a3e36d15c
SHA2567c8bbd1aa64384057ab33a5b4640a08087cca8bcf993a9a73e94a2a7969dba5c
SHA512889c1e4d69c1a57ccf534920da6e7fda439e352b2494ff5d5049932982c9d7331b9d8b8fada61ea4f00cc6f32743793de9989a32affc2ccb6053630f08bdb021
-
Filesize
46KB
MD552abed8933fbc1aac4ca67e5c62e6ee3
SHA1c2b131ca86e318d466393df17f7db8756dc57e32
SHA256daa9d70bc5038f5dffe46808f7e338438b7e0a85f856a62b825c56d01b294293
SHA5123a2be52db901116922eb6e829dda6c9d85250c6031a56e8808705b9d97493dbb1a4ceb9280d1d7e0318099f88b198f3c5190d12adb22cbb92284db6aad5600db
-
Filesize
744B
MD5d85b0927a8ec4c311b70dd4cc7fd7389
SHA1a2fdd7a8378d1850a84a793ff0f3e786ae94ed6e
SHA256a5759f485c0097c3d9ae76a11a811d0f083408341a9d9b5e4976af43c465f6b3
SHA5128ee7cef07007e299a9b39db1fe3278554003d0c71d763bafa2e432640c8f1c874cec08b73dbd687da9199f44417238cb77a7916c4d00063ec07225a62dd5d787
-
Filesize
1KB
MD55f28af9769058cd0f70f02121567e539
SHA111cc8d7ab4804dae8085ce1d4889b4bb83da7674
SHA256717608d9c434082604eef4f39bd5a84cf926b87a5f73e92a9cd3babe3c137c61
SHA51268e42fab393293164925de1e4eca826c6c7ab63a4133b7d4db2c0e8846ff1a56457fb1bc651315ff7177017c90c8707ce300f51aa3f86e7f88810d1ffae4807b
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Filesize16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Filesize23B
MD53fd11ff447c1ee23538dc4d9724427a3
SHA11335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA51210a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
-
Filesize
5KB
MD58ab28bf13a807d79a5a1b7a775bbe9f2
SHA1c4205b9db89034af92b2b34ea9f43dc289f7ab53
SHA2565060eaceb9fc0f21c6e30f94e721e94bdb203a03a344e06b08d81f84e9d26333
SHA5125532d06611ab0030fef21efdc9ecfd6996fe7084b70426469e63709ae2d0f798b9a5744b1b9eb5dbae77ed554a32667d27c0e4f3c0db09663a5b4c7c0db0fbc4
-
Filesize
2KB
MD5242953616fd320b2cffeff057abe76f4
SHA1dc1e51bebacae830904bfc8e5a8673b5b0afa0e4
SHA256714739088d4736b0a7fcce40838728034dde9de4bf963b056d268607a8b08a5c
SHA5122308e9a4cdb02a0fe6426b68eaa3a11225ddb0412aaf4df0a1d2e4c6f60dcf8aa2412fece501e1df7ebab3ea8c21f50b78b667306d6f5f265090ee10da7ef98f
-
Filesize
371B
MD5df616428336dbf9d6b662ad8fbdd2137
SHA1de71bca4e977a4f6153d645072afffebe0b65197
SHA256ba8185f8fe51fae2775e215dd276acf8db0924fbc0926f3dbc171d8e07b3a802
SHA512404903f4d1119a908c3e9ca12397d84a6ba9d4bed6f6c11f2ab3a56dce8e5409438e6ff123c7356c3abc6948b9e2116c7f9c613771e58719f499828f710d3dd6
-
Filesize
1KB
MD5b47a54e711b1ae23e25e53bf64c7e839
SHA12706ddcfa0fb226cf3fc71b3e11af3ba2ca9a1b7
SHA25635a7313b5469bdaefc46ff1d2c4a20dccc495c24da239fc2c4b5424addff4108
SHA512c2ea73c7e735c849fb2474531f1f360875eaf4193930f129fe307f96f573ce7a178e9425ed63b7fd2e929e42d155e1132de73a5c671e34e1b82681232f707a6c
-
Filesize
1KB
MD5fd0159c912c21cb88a7cb66f96e6e250
SHA16322049971c7fa94fcd26bdc54ccf001fcdeb8aa
SHA256e2f5f34089b9d74e5928ce8e8989e5f6b755f541f6a3e5b79f0916756f275d36
SHA5129bef925d89c72cef21a49dc8a4c8f5677da96e0eeaa92d882bcfc589b858ff514efa75c99093fcde70ff74dac566a1255bbf34aaf4ef7df9daf4c9cfdd935d10
-
Filesize
1KB
MD59e8eb5c5e4b976e07adf75244fbb3d1e
SHA168d08c74cdbe7a20764bdd0c90afbd2c4df23c70
SHA2568d02b9b31cf25e5a1268a0c3918ca8656038c3d2798462826f2e9f1276dfd565
SHA512945b33243c06c0a2fd4d29258d521f759a985bce7092c9a6c80604b6dfcf21a15ce2ab8ec159f292d950e5018bbb9225ff385e2ea059483bab7c6c83a1af84ed
-
Filesize
1KB
MD53d29e242af4629f67062febeff0dd073
SHA183c477945b934fb41264bda55d3ad7443dac03bb
SHA256a87ee6c3853b6a3d1932f4f410ca83cf4c28fb9ad483d8acbdfade96389aafe5
SHA512c98978875897a5f7348e92548bd4d867de3086cfc9f999e7e666b61cd0f1240313add661b6b1c5ec104980b7b68b04929b009d72c9e9d49b012ee4262388ccc4
-
Filesize
1KB
MD54da0ed20261bab792e0199b0c0cafbdf
SHA1b82f55265c0a342544b40c1f44d505b9d01e083d
SHA2564ee9f2794010d2257e2df3e5149ae952600b391e0db179c15d079d1fba9dbb0d
SHA51279172c6d134abb07cfde496fc18cd218228a743e0bf9e8e18b4faace13e7b61b06a7adadbab3e420b593820b5a1012e7b52c7b774980e9f786392c049214f6e9
-
Filesize
7KB
MD510fe5e705195bc8687e22f187a451e8f
SHA18f46bffb0788f7a58a4ef9a176b6394114701bf9
SHA2561b0d0b62a1674228db36864ca758256904284bec63e3eab5807ca7088cc652a5
SHA51228f9c7c9451268d50565e3026305a58d539b14c50492100602912be243da8a5d75bc3be020eed20bbdb90b43ccd054ef1fc5f58f38a5353f5369ff13d85c1dce
-
Filesize
7KB
MD5137511c4e1716925855b65c49305f4e8
SHA128f3237da66ec5b31c6c66c3b55ac0615bcf4fc7
SHA2560dece51a96ef817f09796daa752268b9934616ab1a760abe8cab5b10b781333c
SHA51204c991508dce8dea3ed508aae925d2319f384b57abcad8a0122f0275f66252e0d050b5d0a69e49d2f56e7f829a3c8fef41e737569f1239e81ef01730673620a7
-
Filesize
7KB
MD5912e8005c3803852a9268ca349148740
SHA1c1bfc0cf5497dac1165740eb7f9186684e53f33a
SHA2566c7b57e5938a4563a26845dd9613bab6f0d18b139e63d2d2711e04d3aed2de38
SHA5123c0a465f82bbbd034745f532fd2ab2ed1d940e6ac96a27fa2a3f724044d426ab6ae65b481d8a251efd0a8a8998a47f2e0bc3a28f395128285496471e33b17354
-
Filesize
8KB
MD58ccc335a0e97f51a51362c2cc09952e1
SHA1a179a3e3d7a2b57ce61dd8a07d48a46fa7ca71c7
SHA2562a111f706ad6fbbbaf4983ad75207cf321c34ffbb7ce6e39cdc3eda2eba73ca6
SHA512f6c822d081eb3a4ff09bdb34cdf1802537b1c20dea5c947c907813e3e22fd4d96aa005380380c6030ba96acedbf099086cd156dff13812d489d187df6f1f3634
-
Filesize
6KB
MD5b9a4444f0936c685b14fc9a1123e5f78
SHA1fe7bf6e1e6ced65a09fb18778510c981f2e79dd4
SHA2563f5901bd6d466f4b1ef0293b15e88b33790a17a1935a1b063949a65719913545
SHA5124bd81643e21284c45abf8ddb701210bc5901f4f161e8e70ecc666805c0542f6ba93ba45429c0e4c507bfd6e4320f2b3b6664cbfab1095dce66cb6e6a365d04bc
-
Filesize
6KB
MD5ce16f6f1422ab252151a2d64d0279654
SHA145eab3910015c0a1c10a69924b5122fcf28e0ce1
SHA25607cb6e0bc36c2387faf34f3e0e47a88b55ff22fd0b564b0f32b02b79fa405c26
SHA512784e4c42b0b3a84877cb3e0ba315a037e0fdf9ff869aa647819b7593f05cfc29576fdda77931cda3ed664573f0d5ca4ca50133d46521fdc9e58ff8761df2c0e3
-
Filesize
7KB
MD5f403f5af820b5c4fc9151e81a6084f66
SHA1adb5ff1209cc898ce49c2d17dbfd66542ae73b6a
SHA2567623f0310f3c5ae6edc6b975bb6f56b897b0c12973dc5401db435d01d34fe228
SHA512cd4a2d803a0f15503c3f8bca7a268983a444610223e65622be7785b96004d1a18ef91ed76f0330fac412b06dc94b489c741e75507678fd6812d4d041ec3d4a6a
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\536be53b-bf26-4df4-9609-859fad37123a\index-dir\the-real-index
Filesize624B
MD54ed5a48e3805051f48fe4b522e112bbd
SHA109384063a040bcd0efdc459ac717e5d21b7c337f
SHA2560419d622a5c9db4a9fe2246c178e7629f23a33fc40dec203f965a6c941f17581
SHA512cd10cb0479745c1f55b772b7a8cc2b0cf6ff3a1c916506a86df6fafdc5dc2ec0a76ff0b2eee801cfc9ddc80feeb4f3b20c1eef7178e1efb1725f8d7bbb78869f
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\536be53b-bf26-4df4-9609-859fad37123a\index-dir\the-real-index~RFe593399.TMP
Filesize48B
MD5c691b53bb3e61d971febbba02fe70d79
SHA19b7d3a6c16139e4d0792dc38387bc83c9f14bc98
SHA256cbbc168fa77ec2d49da6ae2eeb359a1824ab64491cd64913d5bd561928db6936
SHA5129b697a645f0eec5e2401d0fb161956490238d7e9758aefde0d5dfd4aa36ec78a1bcb387360c3c01449d91ab5e0b5ee90794c130ddcbe145750f20d513773f121
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fca5d7c2-9d9b-411d-9dfc-810c86d73b28\index-dir\the-real-index
Filesize2KB
MD5ff478c5a5ee104d601cd0f16ff1fe988
SHA109bcd5939449b765c318e6c1eb316753898680cb
SHA256653c0952a4b2a90f2f72df04a249a5ba788d66247755ea4cc591f50e329f5601
SHA5120f89bd346e48174eb8ad6f988e26f76f6180b6a96238a711833e968376a7e0c99b56310067433fd673ed9ecf5b9b155684f93d7b278a238ce1fac5221807dc5c
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fca5d7c2-9d9b-411d-9dfc-810c86d73b28\index-dir\the-real-index
Filesize2KB
MD5cdac47f9a795472b4a59522281b3195f
SHA16eeb6faf0d6990a0d1cf81bef1bacbf33e089ff5
SHA256091436c835160ecbc2612c3a65c2b85a37abed86212231571ef4e9da66672e84
SHA512685f99e106ffe91d55acac120a761c648dd9dd77e4d6bb48e9907a08bc6b783fd1f0eb3553ad71146bd82935a1498f5056dbca1c76ca3ebe88f079f3ad8f6fb4
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fca5d7c2-9d9b-411d-9dfc-810c86d73b28\index-dir\the-real-index~RFe58d06a.TMP
Filesize48B
MD5a6f884e3737b32127db9c1aed9f6529a
SHA113b58ae22e908ff4f8ea0bab49e0d2cef33e7cb1
SHA25641550e3c247eb7807d984595dcba1ba8f24c8f821e85fdc641de514d1cab731e
SHA51262eb0275e2beedb5be0107351d876d8e430eb1c00b6e312a154fbabd1190759b9809989b884c9450de468547c3285bd55f3b9a17772a533edb9014c4d4835385
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fee19497-bd28-4cd9-9c13-2e325d2194b0\index
Filesize24B
MD554cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize176B
MD5c98ade018f1f566fa3c32df63ac2e25c
SHA1ee55592291f655e6122416380c02a2cd68afaf26
SHA2560547a779c3abefc334e76c4eca1bac09f2d6b94e59da916a49c609080cba4d0f
SHA512f0ec7958ebb266f55abb8620b6a8183caeb4a7e11dc4da1f6e9a9b0de402a307a82b84114ff3c7e5dab51dd1bb7c7f27bc27ca227379aaa67cb641cacdcb5d90
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize112B
MD5d8736586eddb33f934ae95b2bea80c47
SHA1cc74ff1514eb0e0a631fc802255976bce7df2f78
SHA256a9d2c84a277efdf21823f63df179fe86885b33775eb3d7feda8a77b1491858dd
SHA5121f769a8c3f4e32f22104903c68b94ba85b53b362f4c8e9b01881778dbedd04ccc31d11b7024961984a03011db40b4c04dafac28e2fd0e7f43a524e7ac82405c4
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize178B
MD56aed418d32716f7e00ffa238e52a82c7
SHA194dc76dac3c0672f24bf8a11016435925237c91c
SHA25640560825a62737634fb0bdd82233dde37795f496e1f7c41ffc7a6478913c246e
SHA512ea542fcfb436861a339c8909abdf209e37e2993a08e6e6ab8dd5efd5d2e6a9f195aa4af04a9bc02ab038251f55eb3982036d017f2ee047229d1d113fe39cb5bb
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize187B
MD5b7326d4f1c2e7f3d4fd20a8c10b27cd3
SHA194cd9ff4f2ca6ad2ac35b15b00954521f479078e
SHA25663aa1a8419a15310e9aead88cbbc86f96d7accb2807e948ac47dd41ad94503b8
SHA5126559d00802321a4a9085659f6866ae8552be67357c8d937a369937bb814f9994154a018ae08a0f523d7e24b59c78832fdca297987b265d6423eb00f3cc57aa12
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize114B
MD5c5e5615ed584c6bc21c885408dc90d0b
SHA1b6f3fc7f97081e627c25b33dbaf6d9d79b1e93d0
SHA25645701243743ee254d745a764bb948d647d2b62aaab819b123b313033b5286e3d
SHA512d9220fcd28ddf3746b91b89d1075112a31d0d728c4e9b56760bde23c2618ffda0ba21f23ef9597cdd3fcb8a044c503a19a316b845c987027d32855b48583f6bb
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize183B
MD5e8dcaee9cbb5e1b78a5c6217cdf78f44
SHA1581e3daedd01e63185e32b6ec01826a80495f294
SHA256161bae6f22bdd939f4c5c9dbc5a9e17993febc025bfcf56682b4acaefbdef8e0
SHA512488646c8e794654359d6aa35dd32e1bd8200d9d015e452d0a84cfe2bc6c872819bf3af209ea3f95b3c88ddbba2b916aac57ccacf78d9f085bc6cbaec684faf3c
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58b7f1.TMP
Filesize119B
MD5f817fabf7851ec3bf6fe69fc14807882
SHA1a11de122d023cec275e1a11312f5254f30caa595
SHA256026772d73a46b948e319146c5995230b22073d369b6a7760d4ccdbcccba7f885
SHA512f7e14fce9dfd65586e5d076d83cda7cc15ac768ae6b9867842cc721f368ac3677fe13576e1e6416a6656413623406775c196bf2cebc24b73f4d6ab9d5d339404
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize96B
MD524e390ec44dfb032fa01bc85ebc9544d
SHA1488d27ecd648b6285994bbf2c9476bc63d6dc8b7
SHA2564c69ff4131cef56cea585f9833cd49ab5fcd61ed855094ca2cdba9a80ef6324b
SHA512de83515b921cec7130e708eb5209bb7902efd0223f43dd7963c94084fc7ee5aa48e413bc3087e9b9f5cec9781cae5e2254eaeb4cd28eaf94a7de7c92f7e64703
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59291a.TMP
Filesize48B
MD51f5c1d4cc8f212eccbc1ad3a0a758561
SHA13b0df33d559a04442a2c927128a36199d4a0a657
SHA2569d125ad32c736985c4f7f8509db88e05abb853873a70736374bac172597e6efd
SHA51224b2f865138ee57aa154b99cfbac68085a56f9bc3478e148b2b6ffd094ba8ddc2cb988ffa4aa034ef1f46d44bc1f5ba32f4880c1b799f9c815e77f8754bff457
-
Filesize
253KB
MD59c5d428199626912bd2919bebe41e9dc
SHA12a90a1196d16a2f6ca521063afaa7635429df72b
SHA256393afdcbd9f1f6ee06626f5b700895c2d450ff7120d9d4e6bfcdb9534e15869a
SHA51218717f751a40434998f17ee9f0867e45b8d8d642b970e7e245af7b61196f6dbd4141f0ea45d7cd7535e676331ad6a315a248cf942b6ff83fe76a0b403f43221a
-
Filesize
104KB
MD5b397b0d2d1277258f0707ed0bc3c143b
SHA1435067f107ff1468bd47e86bc18ff80cdc4206d3
SHA256dd88396c668bd1f42292237b63eb62f52924cd9a777a31456510ec461056a456
SHA51279183ccc63833c2f7574829c60f113235199431d5a70bfff2d4f89f0660837e29b563335768844aad257b893c02b45dc62435ccd1a85503608f45e1cfda06eec
-
Filesize
103KB
MD5f3854a7173560b014833548732e44964
SHA1f4fff005e9cb6ee665fa95936f5041ca350dd94f
SHA256f4e9ee5d8bc18232b88b65fb663879a1b0d0bed4b20cbe449dea64b6b1e79fed
SHA51234a0b04e6ffb94756b4963690e271b473998c5658a72619c4e003bccc2f9d8c6f09141c5be40e527ca01e3edb95b45c59ad24cfea09e4866e29f623e64fe9e18
-
Filesize
99KB
MD5539d35ec990120e486a88bc773ec9d95
SHA1a890c313224e52e4dc94c9fff2793c8813bcca67
SHA2567655ad5f3da571d4b3e8d0d68e27661d6002bd17693fa66df6085ff1d39642c8
SHA5122c7f7b1bcf36c29a403dcf5f82f16e8539926b5aca1a5b0fffde66baec54a0c81e2d995eaa1968db8112c0214ef4a89cd547b5872c583ecc2924cfa69af5a33c
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd