hxxps://gamejolt[.]com/games/raldicrackhouse/769103

Resubmissions

08-03-2024 20:07

240308-yv5hxsfa72 1

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08-03-2024 20:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://gamejolt.com/games/raldicrackhouse/769103

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133544020739588795"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3736	chrome.exe
3736	chrome.exe
8816	chrome.exe
8816	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 52 IoCs

pid	Process
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3736 wrote to memory of 1604	3736	chrome.exe	87
PID 3736 wrote to memory of 1604	3736	chrome.exe	87
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 2788	3736	chrome.exe	89
PID 3736 wrote to memory of 936	3736	chrome.exe	90
PID 3736 wrote to memory of 936	3736	chrome.exe	90
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91
PID 3736 wrote to memory of 2328	3736	chrome.exe	91

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gamejolt.com/games/raldicrackhouse/769103
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaba609758,0x7ffaba609768,0x7ffaba609778
  2⤵
  PID:1604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1776 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:2
  2⤵
  PID:2788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:8
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2216 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2976 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3008 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5076 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:8
  2⤵
  PID:336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5344 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5136 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5824 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5796 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3684 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5520 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3832 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=6012 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=6404 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=6440 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=6452 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:5352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5984 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=6408 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:5784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=744 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:5952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=6936 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=7596 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=6988 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=4752 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=7896 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=7564 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6768 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:8
  2⤵
  PID:6336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=8368 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=8552 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=8576 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=8692 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=8928 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=8964 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=8980 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=8988 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=9004 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=9268 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=9560 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=9572 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=9588 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=9604 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=10196 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=10504 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=11648 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:7704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=9964 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:8040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=11300 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:8048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=10936 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:8056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=12028 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:8064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=12152 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:8072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=12284 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:8080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=12856 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:8400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11428 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:8
  2⤵
  PID:8588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=12520 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=12112 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:9004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=11952 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=8904 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:9020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=9228 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:7764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=12236 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:6636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=9132 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:1
  2⤵
  PID:9152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1608 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:8
  2⤵
  PID:5260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=9024 --field-trial-handle=1860,i,3856511148830821825,389447161979811496,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8816

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3992

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x41c 0x498
1⤵
PID:6644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

Filesize
1KB

MD5
55540a230bdab55187a841cfe1aa1545

SHA1
363e4734f757bdeb89868efe94907774a327695e

SHA256
d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

SHA512
c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005a

Filesize
19KB

MD5
3d9202c4e883b932f774e7ed9aac6822

SHA1
b75393a77a4cfa887a3928d4a9acc61d3f0ab639

SHA256
5c1e258a3d35b07832f7be159fbe35d4e46eca8962f17e81f990e5a87f324f71

SHA512
a31fe3bd5d22969c782ddf17b0070fd99546bdd6c36f85ff0b69ea797d67bd668edadc0d6f70ef88b8ef22b82d3abf63979b4f2706fa981fef71975e82859572

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
0ffe55dbaf94ced820d5a702753d35ac

SHA1
2a0a6017ac1367e65ca96b452b70cbc79b2c61c3

SHA256
9e3822d63a935c8632d39e85b6485a128f11fadfa2625cb4af063de6c6208dd5

SHA512
86b222be4c53a5b0f86224727cd5b447dc8b7c5f2494b4004aa264460fc84fdb81c2f44ddf1146fd5af0d0a67ca090dcedc3584cf0a6364f3450d064a06353e6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
3db7799cbe499c44051b0d4871270718

SHA1
0675f6e98540f1687dfe39afb8732f66d40b7be7

SHA256
a4a1d7c0d1e9c81c0ece2d3fd451eaedfc08f9ecedd972ca996f947f71828b6f

SHA512
39f7461f465150b578afecbd91aa89a91c62467482abfd63cf8d41793725bea15caf731a10fd024128c3c053a818ab5ed5940e5270fcc3b89dfd160c853eb5c1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_27fb20341fad3d71867f751b74f3246e.safeframe.googlesyndication.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_27fb20341fad3d71867f751b74f3246e.safeframe.googlesyndication.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
10KB

MD5
e6544c27e89011adfb539e4aceedc2c1

SHA1
63dca2639d1ed24bad6a92d4d57aac06f6e609a5

SHA256
353bbc1148f6a280e652625c786ed460078a13b689da67bba29b7e288fba8028

SHA512
16e7570933c451b5a4a582992873eb0911a738b9d17779df87acfa244df379746789680b168e9429230f23fda2b8dd6b0e3cae5fda51e2083bb9eea7129c3187

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
21KB

MD5
2011313cc3ff15498b0e626aafcbcc96

SHA1
5905f3dbad639787fb2deb4de8aefc523769914e

SHA256
e3d3c17d88fe3b4e41b7238c693bc11c94175e628eb551b0592166fcec151b3c

SHA512
9f3d9b4f858960f88454affbf7ac3905abfb5e3933bb10de2db6b01b45d239c4640a211541c988da18ac489dcfa7a58477c08ff10d12c074caab347a288a69f3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
f05895bfd67978a0fb525f7008e8c549

SHA1
e3560225084c69965a9c0d849cee45caa3e0b31e

SHA256
b06baa2124d4ee8909445da82f3ae498a7f8e8e41c74d62e769034b04811c966

SHA512
6624c82cd14e36901b6f8646cfee9b28227c0213440ac2aa5d850fde6f4f49b4b69355bcbbb48e1899a480ca456d0af17c9a99ca4cc4e8e55a0b74ab431e3e49

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
787bcbf6d93d76fcc817c2037f3ad1b2

SHA1
3cafdd503fb69da5e4cf675d1101d121ff9c4922

SHA256
e18b3e1dc0c3f7bbfec65b0d8d99d6928dbcca47322bc4fb323cf88511f300a2

SHA512
5611ccdb9e36331051a5f4c89917c8ac8d503c6c127fd2804cb8baf1d93338e745ded1ab162e12d695d4bc55ab8ad7bf42f0dd4d6f9dbbdcaacbcbb77d59c13f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
a8240a49d41c1bde41496bc8c5b628f8

SHA1
d7236132749602e352298af461c139700ba282ee

SHA256
c3e5905937dd6c6802b4dfca5dc2183cda41ae7827fbaf25f52218d2ad2b9c6e

SHA512
52b2a9e184761440a9a6914e4a228431d604ab100f07a5a9afa18d7eb96caa019ddd0e202043bda6c7ce8731b4ac2b2b62deceb5d3cf4e275d18e7c77fd6a1db

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
dadb209916331553ca1669fc2521c162

SHA1
f32b541c28b6a3c71d24a4d9c2ea0900b7bc55a6

SHA256
065aaf7fadae22335bb373b8e1e765e7037c30ea4ea77f7f614a61c5b1053cb8

SHA512
bbf3a93734d259dca57cf5f218aed08ff098e34c5ff6cd56df23fbea512823518ff19e2ac24f302d9b5d415d04cb5499798f553a19f2afaf12583b1ec2a64db3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
3d9a9a63758247b56044e65a1d67cf50

SHA1
e633ff2cc68b16731093d8b15e7728f89657f9f0

SHA256
eaa0e5f16bdf52643262751d199558ae3053c124352489f17e390c9b52a26737

SHA512
5a6adeda623a375ba1170b3be1a1a929e2bc2a1c09653420ebf11fdb14e7aaa89cb7d91f0e8f3194ce11534afa4232c730abf08fbbf09bbb97291359e3dbcb92

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
c1f9440f6239db20a9eb6cf05dbaf064

SHA1
2f527d1a1d886466b53171e3d00f94d56794c697

SHA256
d753154642c17fe2557095fed8f1f2a944f23e7185a7d4b06dfaed66b5cfbdc1

SHA512
b95d1e2978f0f43b614cce09d42bb849895858d2a03b9748fdebc65e35c6e4fbdde037b51060aa2d447fe73948d7912e3c25f40cb33590553d9f59176f5fcb8e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
126cbd9fe6e29362152af6f22124e4f9

SHA1
5a90a0f92f0a692d37bde09ca755ecb535d2973b

SHA256
dc628c479c3250d5becadd295e6f86f2b5c807e5b75196fa07d832ad85beb72b

SHA512
cd302637a65a6c8fe639e2c9ba081c8a518cfaa8f06fb9ab9b5baad35cabb2869cc5ad69eb5b8dfc2176ac1308a4f37947645a6d1bb7001f151a293e002f0f16

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
fa454edd207ec88df444741f7137379e

SHA1
4a5959e92959be630526a90e0f058f65c50446ab

SHA256
d2edff0dea863916ad78b35b30a94ee1651410732cf64bdf3d3015252683babb

SHA512
ee76be185b518a6d8e277e3c9e2f398eafc5885d67f5d29ddfc10025db8794768211893e5a6118efd1f812ba1c2fd087353f103685b546a2c38fce9b9992d644

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
280e459f2fece7ee41c1d0bfe1896ba6

SHA1
5badd6eec41fa061d156c234f1c727edf36c7286

SHA256
8a7e7b278928bd8d5931fd35af28468d49a54b7d57733d3257cdf425c1772130

SHA512
d2b55c6b80f3ebee86e16abdb86646ddc28cbe178402dc8313fee4dd26e9d927d710f5dc152961351035197bc816c432305a61527c7be73bee48d4c1cd30fe76

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d7b6d3a798dd8e955e43648b3549ed86

SHA1
ae16dfea75f184cd861477c425e124c91bee87e8

SHA256
c9484c1625420a9313f585c2abee01e9f3e7d88abee6fed2269a88434f7e033f

SHA512
b15dad5835bb8c1ac807cedbb40838982312af4bf11918c19b17115430f7701fbfcd5f39e40a05f38eb9c36bff3d5ff6fbf227b19aed0600733ba65b13e3afe8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
c0226c58b887a4d77be731d51de2b3f4

SHA1
b872923f068f87cded45a73b46d776120e76e4e2

SHA256
7d6ccdefe59f2060d584e14d5122cd7e82065a17bddade6e04d56307db1f289e

SHA512
f7702b63ffeb6bc43fb46cc4279620f424092da25f35da6d952401ce2e811b57cca13a3aceae8c9b0d77ba055ffe7aec4917bca6f07e025bd5f97d23dcd397ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
14d14010932c5e46df7bd10f08a1de87

SHA1
233c1a1214e567e1b031a07028045f936b6f4314

SHA256
d98e4ab0f37521b99100a40dd2cf7cdedfb43773b6ae428ad7678ca0b7c9d318

SHA512
a2c39b61e542ad4eb2d5a52c381f73cd12e2b7ce04c4ad40ccd84ec70e95926124763fbc2215ed8192bd7f48a83390e27bf9431aafb81d1cb68a40da53352234

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
378a4449e3c5f97adfc42987c8a2dba1

SHA1
2260de6a8139f2a8f12ae858cfcbb81440e13da9

SHA256
e91d19b798578d55dcb9684f0bda92d7d8e50f06cb50624cd2f75eb586a9d52f

SHA512
b838c43071b52284ecf5e325ec473e08bae327156e07ccbe9ec604d47463227dd55c5d8cf4cc17089c59915b4cc47d9a083af1be54c8093896b5c40f3ee67adf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
110KB

MD5
3156fa390a28931b1e1b4d3dd67b2375

SHA1
5a9ccb1e8dc1225dcd0146bbfd4f6061d3ec8f5d

SHA256
45889fd0cfb23b207c992fecbca1116ad76fcb6f8da7f924c2656f3a45820779

SHA512
d227e1e5f9967933fe7b79ac4c3fda74583568bb3ddc277abcee888cb84b85ae2844f13c49789df9f6845cee639db501a37049330ab98562a20d0e565ce7ee97

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
110KB

MD5
43d0df0d3302cb7eb5b0b5b8e8e3d708

SHA1
283d0c0e712eea4f3ebb198a788dce9ae635275f

SHA256
2da537e7f663dd4b6d7bc18ec870ef3a2733dba4aed2408b4e7808ed80c99831

SHA512
37668fb26b69e9981e03762be8cfa8b8e4b45ee2b73bc8152190bd1eb5e5a2226daf166ae935b9025ad85b056c8405a4e9fe8ab2edbe8408d593b3a3e3d8970b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58dd99.TMP

Filesize
101KB

MD5
4353673386877ab836b3cda11a589fd0

SHA1
d6c25cba0e45ad31e4af373121c25d556786567e

SHA256
f6d9ede7492303da1e0eb985f2b90cafbedfb7243bdfd7ffbdb32d99d83f3af4

SHA512
4bb65db17cdf4e9bef61764bff80ea66ca67008af099e3b2fdc3006b02333c301a23840fd4d2607e1c253e6e80e3b9675a11be5d0dd1844002509bb78f5ea9d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit