hxxp://assets[.]watchasync[.]com

Analysis

max time kernel
480s
max time network
468s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/04/2024, 13:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

http://assets.watchasync.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133570565710543304"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4100	chrome.exe
4100	chrome.exe
1932	chrome.exe
1932	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 30 IoCs

pid	Process
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4100 wrote to memory of 5284	4100	chrome.exe	85
PID 4100 wrote to memory of 5284	4100	chrome.exe	85
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 232	4100	chrome.exe	89
PID 4100 wrote to memory of 2872	4100	chrome.exe	90
PID 4100 wrote to memory of 2872	4100	chrome.exe	90
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91
PID 4100 wrote to memory of 1944	4100	chrome.exe	91

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://assets.watchasync.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe08db9758,0x7ffe08db9768,0x7ffe08db9778
  2⤵
  PID:5284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1648 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:2
  2⤵
  PID:232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2196 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2812 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2820 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4132 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3212 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5000 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4124 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4220 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=1824 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5284 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5508 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5536 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1832 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5748 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3964 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5628 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=5656 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=1584 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=2200 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=2960 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=2308 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5436 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=4208 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3208 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=3980 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3148 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5620 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5128 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5028 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=4124 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5736 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:5876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5836 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=3756 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=5152 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:6040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=5620 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=6060 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=5712 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=3160 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5780 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=6112 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:5424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1472 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:2344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4240 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4220 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6208 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=6184 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=3928 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=3156 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=4008 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4768 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=4184 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5320 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6184 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1916 --field-trial-handle=1880,i,17394914718016567134,9083036440491906945,131072 /prefetch:8
  2⤵
  PID:6012

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4648

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x33c 0x2cc
1⤵
PID:3064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000003

Filesize
58KB

MD5
3f9ba896e60e275ace2e46bdbd68517c

SHA1
cc2e0646e6992d58eee3ba885984708d3332489c

SHA256
6b8b9a9d9f9199a3b347e142d17907c83b38603122913745d4f6fa6149c65aa4

SHA512
cd8f6b49c169d430bfc25d8473b96b05d4484a44a8153c4f9f53c1e2064ee2a4fcb1492029f1a3f4d2c3a9a5274447d7e27b83e6c617459598674b43247d0bc5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004

Filesize
39KB

MD5
e3b7c1f55a368984a5ba8cba843ed6b7

SHA1
3362755d9f77b6eb0801ea9b3301a24ee63fb22d

SHA256
7bd1a844aaf30cf44b61e3e9266a2db03f61dad8c851d78b170df9034ceecce5

SHA512
64b0d6689a59da5bf40762169b925eb0dc0d47d0f60c8a83c3cb3696af2c036eba4fb7336e77b99509d9c80ec3b942649c62950c179185ebcbaa132804bb133c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

Filesize
1024KB

MD5
903ef30e59d806d0a83e5e3d8802a3b9

SHA1
4419fe2e34e2718d47b03258d149d436f8c6f13e

SHA256
f22bb326a95799948dbea236ea28a634553896107d511640f5d00e6f224a2e80

SHA512
93663cb4e8d0ab4c89fbc622b1bab97eff25a5792eda9669e937d4ac1cc3ff839fb9ff43690abb76d102a2fbcaad873ef98aa0af605fa5038db553d3471e3b3c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

Filesize
24KB

MD5
19e229a6a016744e668bb303eeecb341

SHA1
9acfff8c26e55140ddada2da6051d61bdd0e1ed1

SHA256
2742dde5b27157efe3180f3eab44b9bc60a4da8f9df3dcd6d29f5db9c2cc1587

SHA512
5a28619c69cc46293fc5e99c0c33b1192a5ffcf5bd743466741cb454712856c371a0ce4d9904ad0493b9aba5717715521e7318bc4ddc00a5c59780318e8a096d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
3d6b16a5706f2641bea2d304ab09018b

SHA1
06087a7c18a16a09af49bc3c57be5ad1b7a8b430

SHA256
45fe689a4db164385f698d7496acb8b8b4bbf3a09d5d0b37effb36f06d1dfca7

SHA512
239b2685a1254bab41b6ae9cb3dc8b6cb947fb77706bc7e90f44961ed4627b355ede186d3d6f16613fbaab8dfaa74ccdfabf5f4b5072718db74f6181c489adf1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
157188922a8424170c60e8b8258f3125

SHA1
3c0a1a5663cd1c191d230c1cad813c93270890b0

SHA256
2aabf8aa081e5764fde5c8b8bc1e20426677713e4aa0f6e7829a1de35b33cdfc

SHA512
cdc6dac49cb809a621bed4bc3cefa506989a300875558f18d80eab6e1ac1ab4b187fe3348a4a35b77c5dab155eb6c5b7181033d4700c5712db7345b6113c5053

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
a93a8c0437f9e72169f54c12a2383c85

SHA1
3f12c35371f8b69cbea2d2f1c62887d03ceb4551

SHA256
e91f25382e39ae4d3c4e277f0ea9b9d578e02be474f8536ec60e8608f27ff71e

SHA512
198526ea1a35d07627827c608bcf222c2ed232e600ceca1152c110f852c06d801010eb80c0c60b1ebefb89663f72dde50649085405a016d8285c3058cec15e55

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
04b422bcd5e9c53d5f269edfd30fc4fd

SHA1
309a0afb3ff577fcf820f0bb2f59cb2c2df4214a

SHA256
d2e779c1abbe5fe210a77c880948cc16f956683a38d2ae6ea93522fc1cc63cad

SHA512
25ed5f383db7debe5351c15c2feba4887bcb522b2c0ce1a0d0774fbeab019f714bd29ce23f5faedfafc6585edeab2858222630f69f9838dd9fa5182fdbba64c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
cb70132283309ab2c91cd5cc67b0d2dd

SHA1
85fe30a51cabdec0fd381a756b41f4a544265939

SHA256
722cda82dc9cdfcd2cc02603b938696b00774b51048c5eb41a21873c37c3158b

SHA512
94428b2e25b2efc996bd2999730245e543b7305bf5e6045eadf84be5ea4c292e47ba394131f2d882c33f0a339e4184ec852598b3081eea06107f734be2ca5d2d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
02a1863ea34d131f6abba949618835bd

SHA1
76fb270fb7c124dd557a5c0a1945fd671ddcba72

SHA256
c0edbd5cfb09751b45c8dfffa6430e19a1ce91d9280535291450d29a677d7a7b

SHA512
2bb2cdbab2c3d1b35d9d280f0bf330d7850574fd764e9adfbdf3f1133d161d366e4f49fe43205549138c05fe61667e04a9b7c4989ffd6cf9c9725dc3df7e3307

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
6feef5971806fdcfc4944788e3e322d8

SHA1
cee6ab01bea233ceadb932e3be112d976aa3ec3f

SHA256
79c940f28a3afb9e15830563c5a054a9432856185c756a956e9698d26759fd41

SHA512
4075db221f1f7419568a19ab2e2c69e26703bd2f09ceaf9681103845b90b8ea75e69ff336f672c24555f4cfcf4d550f4fb928dad4484ce02c0a166a0b181e34b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
8426e4c6f1728790c3ac95281ad5f68f

SHA1
d3ef903912b22bb3ff72293fcb6e1b15818ef6f0

SHA256
0a62efb1304af8540fd048ab2684a0dfa5b5adda0b60cb374d07c26ba5874d4d

SHA512
a783fc13eaf35273b492d16ae41665e0a3be783cb4638598ef85a26dd2eb1f6ae5a587dc3a1927ec8a338013bce9895b7b8c5f097cdade9f5af46e65ba6504cf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
5618953742a1af2477f0c46f740e1ead

SHA1
05c372a1a530e4d8cd43c078506e99c357d495cc

SHA256
b5f563e4bb7b5c4c28cab34267bb7306b944f87fdc90547a0be8aa9d3795ec44

SHA512
cd13c40e7b9368cb2c7da381a44e646b039863b009b94755dfb1d8b2ea7a0d408c36cf6e7d8255d075b5568b9e8eabc162dc9291c2eea2c2c9ae11943273292b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
78270744e47d02a75d856e12d3179aef

SHA1
d6afaf4f7678c01444a7f1e09ae4fdfa024fcfbe

SHA256
fa6e614eccd693dad2b056a627e257519e5e7762ceb0f7d02425f56b9b31b084

SHA512
271b4b7231ea1660a667c4dfed57f844c629917762f3421aec3134d6f02c0da6ee1550f4fd52e9e41474a9ffa3d39505ce696880de7abfa3360b723e4c10904b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
0e0ec6a262b1a241c50f2c558b2a3a34

SHA1
f505da05e02f3bac0cd308d0185dc7cc491b683e

SHA256
9065a37b979c3452fc309ea332b1f1679c627ef5699bf241a32fbebb042e161f

SHA512
29705e0c40471fc789e0ab2d765a4c7249929e65a8c418811bf5a71502d5ff7b8717dd80548f037ef8b773f04a978df29c9a4737a872fa1b55a22390686e3985

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
758b10822030bb4885666f5a097a62c0

SHA1
7575471283d2c041b5f2830a3cb036f2f680d696

SHA256
dbab966c70550af02b60800b5c41e7b609e394c77c08dd8d77d6a904d52969cf

SHA512
cad815dfc38f25bdf2826f2a8e4a2b5557812a3ed0329ad89612cf978afe91be1a398b3f55368df4bebe912f9ea80504cabf0a62998d5ec24b92937a0667b103

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
c2ddaad2a801fb96c9c0dd88d5776263

SHA1
7e1e8c64a458eb095de29dc1aaeb2cfa6d6f69fd

SHA256
7ecbf63e34f4f9766acb849d6f8357b620aea3fd503081929a8b6e1a75a75cc3

SHA512
bad804f3222888805effc5ed588d2c048c74dbad060afb7d38e6b15945c119e7d51843749604a8102a098334f7bfbb177af5345433060c49bddfca1a1d97a2a1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
8f930feb52401538d86f3c00e0932525

SHA1
7ca448d822d86f07337455cdaf6329fbdfbf0251

SHA256
bb9e980335a84bbe5c0e197465d585cc065290dfe78c8b82bcc3a6f471f3d048

SHA512
0a3f69d0e39294f80c053b26eea44dbf4c4fb37a1b65356bb0b3e94d95f0fa9393cde92d425b4b524fafba9eca8638709cad753996a36d30ac60a423ecc2e1c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
abc0f0337d164bebf4e10603cb9c2edb

SHA1
fb2dcfda21edd515762210551190520c1a149d36

SHA256
c66509e3588c9a681b93e968791092a4ca24720bce4452f696e5a77a6c24c491

SHA512
18d44bbaa58248cc8b7aa600dd6c16f6cb2f820b5ed322250a96d397b19a626579c207f733de0e46c8a59ad4816126391be0257438b8c99e2cb892697b35b7a2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
39efce6ffd5a5ce9efdb407084c5a6b1

SHA1
59488fec1fd886d17ebf810acfadfc92dfe7e096

SHA256
d21ab23655e4c243dc621a7180f33b72dee62e933f69b4af932a85fec9839f95

SHA512
40a9ab95647fe3734b7f471e3ea9da38c3583523b27bde6047f849de89dc24e9e66c8ffbff21ba019738dbeb0f521c20c2d2291665429ede4c2d1401c8baafda

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
db09f41a0a5ac0057a346ac9744885fb

SHA1
4b90f546d900d7c673f4c29836fea8d5b9071585

SHA256
4792644b0fa76740ef47ceab0579e91213389674b1f2006daedb2e65f5d7148e

SHA512
516d607fe86593fdfa89209cdadfa46437349d6254dc97b00ae133d3c453cc083c88c7b30844190f6c1d8ac2ae3b7cdc37f355e36c9869e79b5f8084ad16efea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
dda6fe57ec287064ec8c338edbcdbcee

SHA1
26d48059e4d0100c30f5190b8e1f797c753c839b

SHA256
13030bb1e2b9a794d33a502e47300c5043cb1796c1797db579a403db95e7f5fd

SHA512
fe3f0d198eae3ad2fba4fcd3940456a9bada7207afd25c9449c8bec6734d41ef1cea0775f4d443a1bcc95727eaf5350783ea7fa9bcfcf95909b95d82b1971a67

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
e3387af80fce0e90a18f43b99e5552d3

SHA1
9be6fb6200d29c29b072c92a8eae091f3e5a1b33

SHA256
bd03bb19672b86174ac85c8155e0ed093641f2fc6ca068c4065dbac040ab8d17

SHA512
b54f9c3050dd36075abd2d4065eb56d5938eaccf02df64c6f3491775b20abcd70fe924dbbe74ff8516289ab22844b8285d3d0a546e5a08de1eb4ffc552f21e28

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
e4aad1af75c454de19f5b11514040856

SHA1
d00bae77575b017c4a572afb82ae448737100e76

SHA256
f6d2b0e3016893e7ba836b97b4ec26c6344e10a6b4b071640d6df849ec592fd5

SHA512
385a3a6292ce15dcc920e79ea343bab16693d036fa2c309cefa79dfbdf957f848a0953f2901907e4842343542defe00fb5c5880c915c7076bb37d1477ad37f30

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5e7e9455e9061599dd5c89afe7d20087

SHA1
98bc3db429d6f869641f98a9ffb77f30dac2ceb8

SHA256
81f6f7d084ea9b2dd05388ab74ca3d614bb0f584c440cac40dc892b5b8a63410

SHA512
be4bd24334bde0e017f83b742716759b2223bae89f7bb46f8ad690536bae6ada3198688bdf59c8f9ea629557e101b3e9e2b84426334448193a56093921d84e1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
fc254e2d3ce4df20a6cac26a27631eab

SHA1
5255eb451954900b677b9cce1af210ea4ddfcb37

SHA256
8cacba83a100273750c32e7d0f85e852e156526c4932e4f602efe46716be25e0

SHA512
699b4e4fd401f2e2ac96e4b688a98aef9b80f7331be418b7b8baa6c10325a0f6d94d24cfc9c94c59868224834d4e4dd2a4b03bfd13dfe642eae87c394b1e090b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d5b0725c384300077b8839b928d2c67c

SHA1
f8dd9a4d077d89ee70d225c0f7cb92435d1a7772

SHA256
5a30a2bd0d5bf47aa67f911ec3313a64039d13a9b3da86fea23b7edf455abebb

SHA512
8bb7043a94d415f87f4b617460d930e850c0ccb51ad43acc73a91432f7b72f3dfc96f3cb33ae50ef8e48d320d2c45468a72016614279f1bf427f8fe878bd0bb8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
a98f200f69acf865844bb95a22c771b4

SHA1
98b42f0c8d78a6cd942bce58ae6129e4d043b76d

SHA256
be1caac7aa62195b99693e775dc0be7bddbdb1cdff7c9acf74b6a522793acb06

SHA512
31ee431e03417308afec6fd578218c3d219a324a8b207d7e2ee45d268e1124f82af486db80c7cbe872352f46abb52fc8d2613dd8ccd7e10dcfaabfb2f8cdcfb6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Search Logos\logo

Filesize
21KB

MD5
71bdeb4deb50926ae9a96486916c51be

SHA1
c7e884077c0502b6c5ab05472b7f04773f256111

SHA256
1d3bff5c1e1b1b9725d58049b3d433a599e5c20460f8d12ad8f078b01127de73

SHA512
fd582488ddb201994b717d2ec361c2e596ee52effa91567fbfb2f5c51c85583348c04e4cc8bcac68ccdb40a5e35fdd76ef78ff69141fe67e8f4626a3e2ffdca8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
a63699e42f8fc7cba4b83959c9547051

SHA1
af07386f3d281f88b9397007120d6d8ffe2a88a8

SHA256
0687ea331caf5dbca43180f0428522ee9e9e4d056dba31a1c2f603950f4b088c

SHA512
dfa57aee0ec11ce5d55f28f8f65c69ca757acda67b841186cf3d15e7f94ec3550ed7bb1dd59dae09f7f5020374c420d2de25a43e65e8a648eedede177c5f027c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
0a3ffeac21cf4e63b2c2b913c77a1f1f

SHA1
e1075d2a7489018e4b07dfe8f1789bbc63ee26ed

SHA256
0fc133ca4e436f7d654d9e5db4e760c736c103b592394c78a04a8da62a955df8

SHA512
6ca1bc2e5f36bb6f07b98a7cab7c1b1cd3005258ed435bb58f1692450e6d83408d27f5d27a776bfc44cdf975e74360f4a1be0498ca86c0e41370e3cbeea5b8a8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
1da2b9c8db23dde6cdbfe7d6564bacfb

SHA1
9d83dc8a637253ca3327dcc12b0a8e99afe6c3c3

SHA256
b8b676a254d1b5131c1574eaece740b55cb1e9738bfcb1e861cf78a20e4641bf

SHA512
c07b5e84b094bbef52f313d57c05e51b77afc3e0025f4179e5d96f8c9781e8e0fdec7a8268e29d9c43a57f4180b708f7bee2545d38b98d6f3c7250957642b274

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
9e29d03d5d392946a9d66755776c9e12

SHA1
bd4a2af22a77d6895486484a641cff8c94665173

SHA256
6c60c980b37b7283c70feb52131183a8af3f15839f3079f8125c5cda2f7ee6a5

SHA512
f9995914c68b43a61443351fdc4a25fd3dae41e3fb8b6862d37cefe8bd338b2a6d86e94f836b1e4ed604ac85ff7a60efdf2567552a50ccbf3de51b1b736d8fed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
43e816f50475b6046650b5ccd9941785

SHA1
a9ac76532823707e2de3f3aedf7c9df6baa4213f

SHA256
c47eed740d090468fb903b42cef4637ed99535b953c8558707fe700053c45e1a

SHA512
7c6874b2455664d1cf602a6618ac513b7193e12378b52ad30668fb7af989c2c4b16e468d8151c7b49dfbd9d13aa34e9e6ca03ecc7a16dbfec9bacb998d65cd94

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
98KB

MD5
035fb3beb32b63c22b0207dbfb763e7e

SHA1
84b34ff064b165b9e2b79c2ef3d541132920e49c

SHA256
ef159aa75405c6f21972b99b7c0482fdb5007ba4af758993c7a629a963087270

SHA512
b441cb3209596ba1bb6d3fcaaf376a34debb3970b00a7eeb38cd8dc7a625a88e81196f6aeb47d38a6ab3d1456f0172863a6c9e054c7531caf818d573a24d030b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
104KB

MD5
93edec3322cb06fa51b0c35377d71a86

SHA1
d7ffd127becdc4b0d010147421207745e6e73d41

SHA256
d9757f1eb948b781b383708ae275d8dde564c18a183b0d56feca777528d32d4f

SHA512
f4a99d8fdcf96f18e8c9b71ef165629df27d639ab53ceed2dd0dc2dd30797d706e1b18dfd701a76687f443a25e9967a37a24e98ef9c951ab1eeac456f3bcafd7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe59dc6c.TMP

Filesize
97KB

MD5
3eb3c29c458ec1c49e2548af8b8de26b

SHA1
b52e94802f26a9dd896785426f449204216ba364

SHA256
bd94525e3fcd4b8f0c78b95c05bd98ff31931c901344d35818307bce9f7d82ec

SHA512
a3ddde42a2c44b1a1f32bc0670be27e13ecb32aabf6893589785b1e40e9627bd3dc5a3c9f1c88b6f03b78af40fb4212ea67ed3d04d8c9d56eaa6fb14ea39258a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
10KB

MD5
3669847bdd1b917150b96388945476c6

SHA1
0229898083c571a765033fed894e3c950b98275b

SHA256
5cdc6fad008f8b8fbb51444bcfe34f293e0039e08a33d4d65b9a7cd647038ee7

SHA512
6ed09810b93cc99e51d9e88277fe19980592afc81ab4a8908d5beb7b21c86f88de7021d25ecc01e5468558ec69ebff9005a932563cf52b449374ee7007e42034

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
14KB

MD5
cb9a65846d99450f0e782d3758d08c5d

SHA1
208c34015cf1a1e3f3204bf3338888e9c34d245e

SHA256
4da2a7bd43f361e4e85c87b8208c4c46a2d50a2028858434bfd11c68b04032b7

SHA512
dd2c24658a5adb1d49097c6375853d7c7fe4590aa09c97ebf6ff25d9eca54d1f4889ee31c09f1f69b9f620dbfa915bd16b9e479219c2e84daee9a2694a864845

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
10KB

MD5
812c0845cbe5fe2100508075341c3cd8

SHA1
3cdc1c5f9ab5536a3f35985ea7bdb44b22757cac

SHA256
eb475bfaac96917b73b3ff9b1302139bcead6fc923470146e98cd5c87c9c9b77

SHA512
c83d41edc86584c6322bcea46da20cbafd64d21c1a01de376d121d5b3ecc15be57a869ef883bbef89220a3337a7c776273c5dd1a379b2aa311cf3d43bb112758

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
12KB

MD5
8f4d4713547ae089f71acbc0b2af00cd

SHA1
b28ce18fd3be5ece368b6b2eaacb1754efb88168

SHA256
f6425d5dcb6527cb3b082c0fb424998cb1a5a1ff60c23f29c25d4fbb1fb1cfd1

SHA512
96a0c69d53f2607632e756c73673409c4787d3c5ec1dfe5f0c2a929f379edb0b230fbef2f479a06a4c16a01b70121e1dd1cfbe8d55a53c835bbac7f4688477dc

Download Submit