Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1799s
  • max time network
    1800s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    30/06/2024, 18:15

General

  • Target

    CTBrowserSetup_tb24gG2Gfb.exe

  • Size

    2.7MB

  • MD5

    a0fab21c52fb92a79bc492d2eb91d1d6

  • SHA1

    03d14da347c554669916d60e24bee1b540c2822e

  • SHA256

    e10f9d22cdbc39874ce875fd8031c3db26f58daf20ee8ae6a82de9ed2dfc7863

  • SHA512

    e37d3d09eef103bfe043c74921296c0b8195a3e43a3801340a9953f44f512e81acbc2051f0305a3a3f41bb98cd4587bb65c3b3a96d702b048199d24a120b446e

  • SSDEEP

    49152:VaFSMmQsOZgebSEjpj24R76kPmDzgsnQnddt4FwR+Viv6WwJrY701QnE60:VOCJEnj26ukshQnnYVWcy0GE60

Malware Config

Signatures

  • UPX packed file 8 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 10 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs
  • Executes dropped EXE 58 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 4 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 13 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 62 IoCs
  • Suspicious use of SendNotifyMessage 49 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CTBrowserSetup_tb24gG2Gfb.exe
    "C:\Users\Admin\AppData\Local\Temp\CTBrowserSetup_tb24gG2Gfb.exe"
    1⤵
    • Modifies system certificate store
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1296
    • C:\Users\Admin\AppData\Local\Temp\ctu6D95.tmp
      "C:\Users\Admin\AppData\Local\Temp\ctu6D95.tmp" --verbose-logging --system-level --enable-autorun
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1908
      • C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\setup.exe
        "C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\CHROME.PACKED.7Z" --verbose-logging --system-level --enable-autorun
        3⤵
        • Adds Run key to start application
        • Boot or Logon Autostart Execution: Active Setup
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2988
        • C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\setup.exe
          C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --annotation=plat=Win64 "--annotation=prod=CryptoTab Browser" --annotation=ver=125.0.6422.113 --initial-client-data=0x230,0x234,0x238,0x20c,0x23c,0x7ff64f2249c0,0x7ff64f2249cc,0x7ff64f2249d8
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          PID:4876
        • C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\setup.exe
          "C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\setup.exe" --system-level --verbose-logging --create-shortcuts=0 --install-level=1
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:2288
          • C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\setup.exe
            C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --annotation=plat=Win64 "--annotation=prod=CryptoTab Browser" --annotation=ver=125.0.6422.113 --initial-client-data=0x228,0x22c,0x230,0x204,0x234,0x7ff64f2249c0,0x7ff64f2249cc,0x7ff64f2249d8
            5⤵
            • Executes dropped EXE
            PID:2672
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --from-installer
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:1048
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Crashpad" --annotation=plat=Win64 "--annotation=prod=CryptoTab Browser" --annotation=ver=125.0.6422.113 --initial-client-data=0xe0,0xe4,0xe8,0xbc,0xec,0x7ffd42d3fbf0,0x7ffd42d3fbfc,0x7ffd42d3fc08
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3596
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=gpu-process --no-pre-read-main-dll --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1592,i,5027790120090668135,9637922867493507196,262144 --field-trial-handle=2152,i,13836880558302914178,13031781531085800683,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:2
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4328
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --start-stack-profiler --metrics-shmem-handle=1640,i,567889977849095827,9605265121552706529,524288 --field-trial-handle=2284,i,13836880558302914178,13031781531085800683,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:3
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3444
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --metrics-shmem-handle=1888,i,450133542632821513,1032227040199314803,524288 --field-trial-handle=2300,i,13836880558302914178,13031781531085800683,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2772
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3132,i,4143961855352258402,8789002980037024309,2097152 --field-trial-handle=3184,i,13836880558302914178,13031781531085800683,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:1
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2920
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3140,i,17686245413404700920,9583443992440301596,2097152 --field-trial-handle=3348,i,13836880558302914178,13031781531085800683,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:1
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4432
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3636,i,13622748183509867400,14819184326056695264,2097152 --field-trial-handle=3672,i,13836880558302914178,13031781531085800683,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4704
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --extension-process --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4432,i,8087354840500423913,16690227311119812312,2097152 --field-trial-handle=4456,i,13836880558302914178,13031781531085800683,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:2
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3088
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --metrics-shmem-handle=4824,i,4946258987799345935,4041050592783898470,524288 --field-trial-handle=4840,i,13836880558302914178,13031781531085800683,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1036
          • C:\Program Files\CryptoTab Browser\Application\125.0.6422.113\Installer\chrmstp.exe
            "C:\Program Files\CryptoTab Browser\Application\125.0.6422.113\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
            5⤵
            • Executes dropped EXE
            PID:5084
            • C:\Program Files\CryptoTab Browser\Application\125.0.6422.113\Installer\chrmstp.exe
              "C:\Program Files\CryptoTab Browser\Application\125.0.6422.113\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --annotation=plat=Win64 "--annotation=prod=CryptoTab Browser" --annotation=ver=125.0.6422.113 --initial-client-data=0x228,0x22c,0x230,0x204,0x234,0x7ff7b39d49c0,0x7ff7b39d49cc,0x7ff7b39d49d8
              6⤵
              • Executes dropped EXE
              PID:1284
            • C:\Program Files\CryptoTab Browser\Application\125.0.6422.113\Installer\chrmstp.exe
              "C:\Program Files\CryptoTab Browser\Application\125.0.6422.113\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\CryptoTab Browser\Application\master_preferences" --create-shortcuts=1 --install-level=0
              6⤵
              • Executes dropped EXE
              PID:2740
              • C:\Program Files\CryptoTab Browser\Application\125.0.6422.113\Installer\chrmstp.exe
                "C:\Program Files\CryptoTab Browser\Application\125.0.6422.113\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --annotation=plat=Win64 "--annotation=prod=CryptoTab Browser" --annotation=ver=125.0.6422.113 --initial-client-data=0x228,0x22c,0x230,0x204,0x234,0x7ff7b39d49c0,0x7ff7b39d49cc,0x7ff7b39d49d8
                7⤵
                • Executes dropped EXE
                PID:4784
          • C:\Program Files\CryptoTab Browser\Application\browser.exe
            "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3244,i,8668767860804552063,12707289478560471734,2097152 --field-trial-handle=4316,i,13836880558302914178,13031781531085800683,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3120
    • C:\Program Files\CryptoTab Browser\Application\CryptoTabUpdater.exe
      "C:\Program Files\CryptoTab Browser\Application\CryptoTabUpdater.exe" --install
      2⤵
      • Executes dropped EXE
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:1264
  • \??\c:\windows\system32\svchost.exe
    c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NgcSvc
    1⤵
      PID:2132
    • \??\c:\windows\system32\svchost.exe
      c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService
      1⤵
        PID:3616
      • \??\c:\windows\system32\svchost.exe
        c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s NgcCtnrSvc
        1⤵
        • Modifies data under HKEY_USERS
        PID:4240
      • C:\Program Files\CryptoTab Browser\Application\browser.exe
        "C:\Program Files\CryptoTab Browser\Application\browser.exe"
        1⤵
        • Checks computer location settings
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:2940
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Crashpad" --annotation=plat=Win64 "--annotation=prod=CryptoTab Browser" --annotation=ver=125.0.6422.113 --initial-client-data=0xe4,0xe8,0xec,0xc0,0xf0,0x7ffd42d3fbf0,0x7ffd42d3fbfc,0x7ffd42d3fc08
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1136
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=gpu-process --no-pre-read-main-dll --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1596,i,11641820040811336626,2450207561333538276,262144 --field-trial-handle=1900,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=1864 /prefetch:2
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4268
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --start-stack-profiler --metrics-shmem-handle=1820,i,1609765127132362002,4054201837184523069,524288 --field-trial-handle=2036,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=1936 /prefetch:3
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4584
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --metrics-shmem-handle=2120,i,14066189458332546010,15083234155227656607,524288 --field-trial-handle=2144,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3644
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3088,i,4423644632451852529,254227717059336838,2097152 --field-trial-handle=3100,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:1
          2⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4548
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3380,i,15241299104187180815,7653994217253469589,2097152 --field-trial-handle=3404,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:1
          2⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4132
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --extension-process --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4180,i,3296844828011852947,6805108795838655351,2097152 --field-trial-handle=4208,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:2
          2⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3236
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4652,i,17293390752494936146,8223493954060779537,2097152 --field-trial-handle=4612,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:1
          2⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4932
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=4800,i,8715112883941059662,16464080622055551488,524288 --field-trial-handle=4808,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:204
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=4764,i,3795299696164080697,11377554146155056596,524288 --field-trial-handle=4876,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2792
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=4896,i,17655930822269324925,337478667445579046,524288 --field-trial-handle=4924,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2272
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=4956,i,8781758167909867265,421056202768199184,524288 --field-trial-handle=5200,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5040
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5360,i,7614631936858732456,15435272909077148478,524288 --field-trial-handle=5376,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:652
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5404,i,2677888768203331056,15008740548819263497,524288 --field-trial-handle=5608,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1304
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5512,i,13521466502165340024,3712109605383353143,524288 --field-trial-handle=5208,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:64
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5504,i,15636880586365718661,14707779616376258734,524288 --field-trial-handle=5604,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4452
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5692,i,13907259244739829746,3675940569696581748,524288 --field-trial-handle=5624,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:688
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5648,i,18403896203291911963,4770629441648825975,2097152 --field-trial-handle=5644,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:1
          2⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3692
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5732,i,12713929238995637304,12351624036107531730,2097152 --field-trial-handle=6100,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:1
          2⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4752
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=6048,i,1043281932102250792,8007163026732731309,524288 --field-trial-handle=5812,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4988
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=4584,i,12121285377817697640,14296027246139062528,524288 --field-trial-handle=5456,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4564
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5364,i,345876847253705880,2416869419349876448,524288 --field-trial-handle=6388,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2488
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5948,i,17546126695860622242,7899804067353333861,524288 --field-trial-handle=5804,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1036
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=6220,i,1207352170674531617,8957499906690981199,524288 --field-trial-handle=5752,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:3524
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=6276,i,3421730440700558285,1473933260263891543,524288 --field-trial-handle=6636,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:648
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5792,i,4415346007662158511,5165179756284620518,524288 --field-trial-handle=6612,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:2628
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=6620,i,1809501632127425718,14498082243540108445,524288 --field-trial-handle=6844,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:6020
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=848,i,13153454108804280345,15836267711763491434,524288 --field-trial-handle=4664,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:5716
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=3460,i,7460616893834253611,14244365465368426651,524288 --field-trial-handle=3520,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:5988
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=4740,i,14039416699150950458,7535252966748101230,524288 --field-trial-handle=4228,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:1832
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --no-pre-read-main-dll --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4568,i,14512917501957849491,14146526934727073381,262144 --field-trial-handle=3096,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:8
          2⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:9340
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=188,i,12967520161072107259,3385205506081717434,524288 --field-trial-handle=5400,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=3116 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:9988
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6976,i,1418471058728819047,7301543901620573781,2097152 --field-trial-handle=6768,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:1
          2⤵
          • Checks computer location settings
          • Executes dropped EXE
          PID:2860
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=renderer --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6444,i,2988022929066572917,11242292343551560875,2097152 --field-trial-handle=6200,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:1
          2⤵
          • Checks computer location settings
          • Executes dropped EXE
          PID:1068
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=6800,i,3503804181916204190,11679991985523418948,524288 --field-trial-handle=6176,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:4932
        • C:\Program Files\CryptoTab Browser\Application\browser.exe
          "C:\Program Files\CryptoTab Browser\Application\browser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --metrics-shmem-handle=5484,i,1029129426125630533,905050782989798657,524288 --field-trial-handle=5224,i,6493440514968558712,3812033927793382977,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
          2⤵
          • Executes dropped EXE
          PID:1948
      • C:\Windows\system32\taskmgr.exe
        "C:\Windows\system32\taskmgr.exe" /7
        1⤵
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:9796

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Program Files\Crashpad\settings.dat

        Filesize

        40B

        MD5

        4e7d41631a04bb1301587d3f1210abab

        SHA1

        fd85629c28fbf0575be55c18d732a3a3f0c33b5e

        SHA256

        0764ef69fdb3de49442832a71253ec9307e256bd6d79fa06c2150ae9286d0ca7

        SHA512

        ddc6cab9ad1c0c466aff25f531271e701a52915fe9258b8098457ca0be934fadda1e227206b10392710c95e521efd2d716da3fbc923342b89bddc5b9c175b8c3

      • C:\Program Files\CryptoTab Browser\Application\CryptoTabUpdater.exe

        Filesize

        6.8MB

        MD5

        ebe4b586f9522bd5996a0fb75757d401

        SHA1

        3bcec28ff27b12a06b78be90da063bfdd9d0a69a

        SHA256

        1a660a53857899038219c969bd8382aa9b83b66e40dc519b18f93d9410c96840

        SHA512

        57fd70bfe99cfb75cd5c45fc9ec629d130b5aa4801c1ef2b2623aebe8bdbb728bb4eb0bfc75c511081743682d487ffc1c8f9ff35322310ed5865d1826f9e8a16

      • C:\Program Files\CryptoTab Browser\Application\SetupMetrics\2288_13364245119078720.pma

        Filesize

        520B

        MD5

        d7bdecbddac6262e516e22a4d6f24f0b

        SHA1

        1a633ee43641fa78fbe959d13fa18654fd4a90be

        SHA256

        db3be7c6d81b2387c39b32d15c096173022cccee1015571dd3e09f2a69b508a9

        SHA512

        1e72db18de776fe264db3052ce9a842c9766a720a9119fc6605f795c36d4c7bf8f77680c5564f36e591368ccd354104a7412f267c4157f04c4926bce51aeeaa1

      • C:\Program Files\CryptoTab Browser\Application\SetupMetrics\2988_13364245119203703.pma

        Filesize

        1KB

        MD5

        1266ba6d9253dc262db0470fab911b56

        SHA1

        94cc788ea11a1afa6f1b6a9697f9d861bd4507ee

        SHA256

        cd6248f1eaef477d911f962aa0e725a5fbece58e33e36dd5061e6a04c97ea0da

        SHA512

        77ed608c3c1b3b568586a85ea0fc65972fce1a7ad73a52c03bca008d0fb70507279be521b8a8b7d99f299404f061b7e810a09565cd819c0bc8240c700933b9c3

      • C:\Program Files\CryptoTab Browser\Application\browser.exe

        Filesize

        2.5MB

        MD5

        7eef2c91c094d8e2202d88c017ccb011

        SHA1

        cff829edab6e451202b028c6950743df98d3ae48

        SHA256

        43ae4e23e51df31d6f8ac4cce3cdcf06243b38048ad6d2b43a8749fcb8fc9b6f

        SHA512

        6412927c2466869d5ca9fcbfaa42d9ba24a05923ee5557f18281fb99c6dbb08d9e7f66f467531e6f4ccce1319bf8423e08987e5090fc21e3053968dc4d75a41b

      • C:\Program Files\chrome_Unpacker_BeginUnzipping2940_1313855754\manifest.json

        Filesize

        97B

        MD5

        43429f0e7e068e95015e3a8dc2e8b55b

        SHA1

        027e95305b999f97f492b5c43a0a50d378956494

        SHA256

        5a52b9e02c69e28fd7493d37b44d5a9bd94d2c886fe11adb638b40e23950c834

        SHA512

        2e4992932f17ea7cdd4b1c43b83794b58c77553ee61c2d34877a246219c5fdedf8ad182694488020505e98989b1b6151f8406f41d4c3576a7566268a4b2f26ed

      • C:\Program Files\chrome_Unpacker_BeginUnzipping2940_1334688439\manifest.json

        Filesize

        97B

        MD5

        7be571978dcca144e0a82b0fdd342a3b

        SHA1

        64ebabb63f61c9910b9ae5624d16b5eced909b77

        SHA256

        c1fe4b381c8d6b3b31dd98b1147d7186610a8e0f9c609316b4663842c9e534c1

        SHA512

        42d9cefea4c01c4ed8e47a0df63895ed7edbd82ec221926ff3c2b3a769409518e06ba915eda80524942cfdc426dbbb4de8eff86d4f1ecf358afd59c71248a163

      • C:\Program Files\chrome_Unpacker_BeginUnzipping2940_1759095678\manifest.json

        Filesize

        87B

        MD5

        6fd051baafa69ce15467974188504d15

        SHA1

        4843c486d66d62d0436c165ff53be11f0fcb3382

        SHA256

        305cb7e7ef2a266ce073d9c9d033452d8a1b1654bf59410d0bb288c3c206143b

        SHA512

        8178feb0bfeb8820ab8e52093bb617f6e309186571f642fdaa0a44d3577b79722b4af600a1b662c090674607d1a290f6464f93e47a45da0038f72e20b185e9c3

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

        Filesize

        717B

        MD5

        822467b728b7a66b081c91795373789a

        SHA1

        d8f2f02e1eef62485a9feffd59ce837511749865

        SHA256

        af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

        SHA512

        bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A0FA1F65064CF150DE396085518F123B

        Filesize

        503B

        MD5

        e1bc2db687d75f88567e9e648d58bc95

        SHA1

        7c89f847a0fae615215c368a5397cf06fe6d7268

        SHA256

        25239bb62e80b243dacd64719dce7157a1f536cfea6ba540540f28fceccc2343

        SHA512

        ddc23848641f268d0a4b5cb15888bc85177c6bfa125858bab9645665e1117f8cd281c9ecbb1e8db98a62c03018dffd02967f5870672a391c14b018029228a456

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

        Filesize

        192B

        MD5

        39042eba0406c7bba30cc4e0e0d136a0

        SHA1

        46518cb1796054910c9ad46f2f72d3b1129b70cb

        SHA256

        03e69daee6b900c91478544bbaedfc49638f646428f96c948e060cc38f911670

        SHA512

        a83a053088864952547c0b3870b210c520ee94d3ee2dd5376b27263c0170440d23283a6f638992e6f834e442e18f325a7bbe2b04422dfd36073d1061e22d30a5

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A0FA1F65064CF150DE396085518F123B

        Filesize

        548B

        MD5

        3cda6256717404d25a84aa6824f874eb

        SHA1

        efefb20dd41fbe271f689cece3e587cd288b4519

        SHA256

        d47d126a8546fb69648494db45561d8c59e65cce3a7133d85913632617427a39

        SHA512

        62a03950f6a0badf90ec642e27ae9c5d7d8c5ceb7c29bf560394768adbb0d73cb7ffcc8c531ef312babd7321f101f1a849b55e6a034efb8c187a85dc208e347d

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\17e9657d-8608-44d7-b0c8-8a79fcbf48f2.tmp

        Filesize

        159KB

        MD5

        df1bc8829fd30b73d6a0ab3850525070

        SHA1

        6af1613364007ec1cbe5a319fe7ef653d90f00ad

        SHA256

        a0dca4dcd7d38817d09c47fbf61fd55d1ef1ca559e8d9405ccb2b897da9301df

        SHA512

        48cacadbccf7b3ae11977328898a57c58922ffc6c578500b5742cf89f077c6a7bb4262095d668d3ef609a4c1674b56da301a0cb553846c3f8d83120ab79e419a

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Code Cache\js\index-dir\temp-index

        Filesize

        48B

        MD5

        5c57a33d69f076c6de4c3f3717219cf2

        SHA1

        856abe3727a39e760ff2d486fb8ee4a389d6dbdc

        SHA256

        bf43381ef870865b40aee28f069e7a01250ef6c2b2f60925c2a9f57ff3b966b4

        SHA512

        c60c9b29320ec9e41f50753a656516e28023d135195cf857882f6f999c32b1f1ac9a34129053bb0a8fba595bb09b4ebb7747511c6f401f2c4fe7732017607061

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

        Filesize

        216B

        MD5

        24458a2240e41d3c200aaa456929c7e8

        SHA1

        26cd4a92d6b2e23ad0b8c9bef72f0ee228187a12

        SHA256

        6fb1c0f16d391aaf6c8bc2f5483c461de48187ca8f818c623db874f85f0aeb47

        SHA512

        b920c31bc37cac9636590edbfe6edb996a60bbb886deeea746ac50cf77cd622f312e63d621475870ee793afc5f3c4dcc08abed186207e4e46530a521ab78f400

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

        Filesize

        264B

        MD5

        9e5072ff8187ef1a97a9b2770dbd2915

        SHA1

        64f0d0940e13dfc9d1cea0228f8e5e212bad6073

        SHA256

        bfac0e7c053d8f123cb27779784e05154a72121ac67f772147ad0ab3e8433199

        SHA512

        28629112fde07f13415041595cdbed7e2a9d5129c2462321da781e86fe98a624d6d5e461842f4bcd2fcca2989ce9f0c6e25df58a995aad50938cd8a90aa4ae27

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

        Filesize

        528B

        MD5

        8b7c12f256d66a54d2f81fc8413878d3

        SHA1

        8fb4bc3f90c3fb272f08e3770fd16ff0b41e76dc

        SHA256

        1013002718386487a2b70dc8bd69c4c69caa7460100152ca005c07ac61c5105a

        SHA512

        81984f95bfb10584228060e173e8ff215a03ce0eeba342c1c2be79dba6ef39a3b0d0e77c11d8e2580e2b5d8121ec3aa6bdee13dfc0081e40795a41215354ae7e

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

        Filesize

        288B

        MD5

        e5c9593c8f615a736467d2543a36f362

        SHA1

        3711d5fd392a20fb84c837910f3926b947abe3f1

        SHA256

        1122613ae068d9a9758c502b842ae88945df5d43a5a76e064aa2df1630a23a29

        SHA512

        9b0e565d94660a93ca6030940026c9eec51199b68173404654859bb38d092e37583d6496db85ce5ba365a17ce5eeb6002d6774be417e7d30569508ccf607ce55

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

        Filesize

        552B

        MD5

        0a177b6f3663394a741e89caf81ad16e

        SHA1

        5890933ec9e90f25ef41c3d7d61afadc195cbdbc

        SHA256

        4e6e0ed555bc98d015031d83cbbed6226474566d6ca3f61a6d9caf2bf110d90f

        SHA512

        18758b7d3144f933b29d36f18eee28adca13b737ea30aa395c8fabfe30b5941cd0140f62b08b8fd3f293e8d248d987022fa770fe1df0bd94f4f1310291a4aff2

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Code Cache\webui_js\index-dir\the-real-index

        Filesize

        696B

        MD5

        1ae57875625446a0717cfc445505e4ba

        SHA1

        c87c61c0f3911c619bba14ccb69eccdda94dc843

        SHA256

        cb5a98037c31c52d1cc1ccd941ca58414fdfe2902898d67c0811918a3957eaa0

        SHA512

        010df1faeb24d5e66c39e35e9231b19329a95c3f3608c230df01d2e83b8ab5b24b647a9cb2c0ad3be3adb90e94dfc2f9c27e1c7a4c16d6ac2d7cdc4b4c820676

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Extension Rules\MANIFEST-000001

        Filesize

        41B

        MD5

        5af87dfd673ba2115e2fcf5cfdb727ab

        SHA1

        d5b5bbf396dc291274584ef71f444f420b6056f1

        SHA256

        f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

        SHA512

        de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\GPUCache\index

        Filesize

        256KB

        MD5

        f696b18f61703b7a95fd5cb264435bb0

        SHA1

        e85291824b41f13aa819be20c9e451e73d0e37ef

        SHA256

        81db5d238c63d418434546498b03c8831853d64ba0c670ae7922cdc85696c157

        SHA512

        e5026aadf2060c6e8a69a646445aa077e58143c2f8dcce09b4c6837fdb9dcc8057bb1978411476756d70a7a91671ca5e553e9267fc8dafe075a4dfd8b7ae1d84

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\Network Persistent State

        Filesize

        5KB

        MD5

        1e5120fecac98730317245f576decbc9

        SHA1

        b4a0111327a32bd1db959e4f49105e6f235eb31d

        SHA256

        77acdacb7b136c760f0169fcc9eec36c302340bd1f7dc3d8f267a42e33504510

        SHA512

        33b4bdf02d065957c0055a4f4ec0349ff46fc6e868641bc53ede47a3c054e9c0855b14d6aa8d65bff6f0d7b852ec08cdf683fdb6e62017e0937fd3387b450194

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\Network Persistent State

        Filesize

        5KB

        MD5

        750832b836bd4b09eeaaf1b958ac6510

        SHA1

        1c772f274bec83a679e0b202634975c903721bc4

        SHA256

        00694fa9c9c1054ddb72074ac692b8623008de1494e37ff29ee8b74c17a854a5

        SHA512

        7d1a2f57c1e5bb22abe641826f1e7e26ca22f8d4983dc6883778cedb687f875c09d36ecc34aacddd070fa12e7dffa2b6f189c8cc47a366bc7cdc62733f7d2cd6

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\Network Persistent State

        Filesize

        6KB

        MD5

        a2a04885bbe1775571934ef960bc721c

        SHA1

        c2dd526539ce2c4ac0307a1cb3cf2e4ace426c92

        SHA256

        5d16a920688af1c61e152a2ce8ee12a6cfaa0c225660e12c3b0076766c48419d

        SHA512

        e83b24653d530e5040caad4be8e5c333e53e47140b701a815288a890b10ffbe72558d2c949ce34e67ca57f55c4bbad425af3bacd272c18d0cd338f5256d2c34d

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\Network Persistent State

        Filesize

        7KB

        MD5

        832ff52489cd907d38c7f562389d3f89

        SHA1

        1b977541658f9b4c445d25623d82c15139c5a3c5

        SHA256

        d31a9abc20d460324309aa1112c79eba705974ff5303406f93953deb1d6b553a

        SHA512

        3fd05701a0564d29e28fba62136e8928d7f30a5e51764bfe4bb90e2198af54f509c08b848b4cae1b71582fb59fd5f5ded1ca28b8393563a8096b91573821ea95

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\Network Persistent State

        Filesize

        5KB

        MD5

        517a421b0a41327863b4b8ae86f63019

        SHA1

        04cceefdedb8470802bfe2cb5f8476f9b12590b4

        SHA256

        4941bfb6fedee37fed710dcdf6f625a6fb4da6dd8d5529d9f3469650fa4cedc0

        SHA512

        d9b07ed52d15bb196b3dc815528592abf4ba9a7be4063e806646f1d9b01ded65e381be74aeddd3f0f32a0e47b094e04111f7ec2c7488d9e4f2b4272c2dcdae1b

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\Network Persistent State~RFe5c37e0.TMP

        Filesize

        59B

        MD5

        2800881c775077e1c4b6e06bf4676de4

        SHA1

        2873631068c8b3b9495638c865915be822442c8b

        SHA256

        226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

        SHA512

        e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\SCT Auditing Pending Reports

        Filesize

        2B

        MD5

        d751713988987e9331980363e24189ce

        SHA1

        97d170e1550eee4afc0af065b78cda302a97674c

        SHA256

        4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

        SHA512

        b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        c65256564384bddd98ced17225f758b7

        SHA1

        c1d29ab95173222d5799ea461ee39802daa5453c

        SHA256

        23700ab5f97453b4fe471700bb74dd566724ad6b752ddaccf3f332f9fbb069e8

        SHA512

        c24d6f2402b505cb74005f9851b4c4ebfe1e29c8cc7d5a74173b1ce5e96754a01c269b604faae93248ef8e92c2697eb15f58147abc56e3cb25dd2b1e287b7d5c

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        8dd60bcb782b0a31f3a62adb08a392a2

        SHA1

        74c1392d516c95af5ad4172c81f7763239efc133

        SHA256

        2e1a6413eae94391a3a339d84c91ec3b6a62cc57133d203f502ad7342a0135d8

        SHA512

        8eeedc9b08e509ed264b8375c6facf4f5932112b5684d258488c25b2e0a6f45109529124530f4ed38b647932ad33698a9e69a1772a23c850ee17d41c309fdbfe

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        09f7bc632fb9251165ff73e0498c36a2

        SHA1

        ea2b0d4a47dfebce84ebe7d90dd7b8d785776d3c

        SHA256

        6d737c3fe49a8cedf315041c6b8b4e8b55d44d15328c5e81eea7eb4d8fe78990

        SHA512

        1ee8488ada7ba3b528e4f2faa3dcd66a7d0eeb09da6cab2a63518050733d9d8f6c7c52ae2fc701391bd90f5267f8f14680dfd3f90ca33a4bc4b4fa286f5a29f1

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        727c86ae079cdcf287152b349ca2ff7a

        SHA1

        b20d4bd2e35e85a7677336f3c45222c38afc7c9e

        SHA256

        90f77fc17b437dc9a80a22c3c9fa6b1c275ee97ad65877d49afc50781c3b3f19

        SHA512

        4e1dbaaf9f4034eb13c9b926bcd3d034e0427fd32e01e5b3665e60dec5b26415394510d026d1d47cc570c9374007683ef2b02f5d7d80ffe0d980d68d9dd786ba

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        8ea24bdd6b8810bc4740b550f47d2520

        SHA1

        6c42154131c2191ec85e5049ab164374cc774154

        SHA256

        0e5f1d812bc1f864a321ecb849b55f1552cb84a0814542ff15c970fc43768295

        SHA512

        b5cc1ce0a3a0109b02b020f93e742f3ac6ac3ec50f74d27d2c5dfb0493600748ab6f7e961ed94f489d1f016215bc6de32c5bfdac4625291bc066b503a87ca182

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        dcc6f7bb153370db2972b0d19f0d00d9

        SHA1

        620fb28564d9ed914ec82a7f91eb7f5cfde094a0

        SHA256

        5f0b7cce03ceecd95a6f7078ef0d73653659e865ed48ddac11eacb920400d4e2

        SHA512

        d16a1b7123138717dff19837e7e2402da7cb68169b7f7d564b1070b57e82498daafeb482a901ea328e3217dd850974742f202933b543ef50c164ca36ced85d22

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        8c804b0a5800316a60faa0df6415284f

        SHA1

        942e2e20e659c3b940dd02d9232f56257636bb2a

        SHA256

        7cb186955d56658a69e703c5734ee810d80dde67dff84a7638b4ad3ae5a07e20

        SHA512

        2fea80f28d14d968c3898004c38a9f609badabdfd96de9de4a05efd0e941b5feee349e2a78b174bfbc78d839137f89a488fcb3f74a5de1bc54d8684e471c4afb

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        d4aa99a3104a51171fb3e0a2ed5d9bde

        SHA1

        2a8e3ac5328e65eb8cca7afb9080f122b9a6e469

        SHA256

        2424082010ca9c920edc38f3dc2b70d6c900c83e91558570dc7df662a3d23b85

        SHA512

        ad341ad4d5da6364a0e18502044a2e2e454b0500cbfee96e95e609869c755ca35928d849a00863cc72d4298700a1eb5ba1299c9e8f5ab39dc709b2479ed87650

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        3d01d653a75f3a1e6cf88a40fb5352bf

        SHA1

        2c94182d16dd4b6c5ae4f2573ddef92ab0045c8b

        SHA256

        0d3aeff9c3c9f18f74da33ea461e0dfee28c8f16e0c9bc4e01b12ce2696ee91a

        SHA512

        902a4a037792e5e43e4afa32ef92cd0cb74b0da4d71818247fbb089008607b45db8bdeeef831232d186666940a96d75110544ce90a04f2e5b02fbfde8fe95415

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        b120cb99fc4962fe785de74fdd2d971d

        SHA1

        3d0f562e5d38849afa4f37eb6b765e7172f77a5e

        SHA256

        f60bd72c19c80a5421554eba9d9dcb176788d611242b739f748c8ce8183914b0

        SHA512

        0781a6b787aa6c0d85db7677c23b5d5afb5aa1ff9a0fe537e6fb2babf59a0131b2738a03d3e979eeb2913ff932886340963a668cf9d449cc6d8c4e6a233780c0

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        25b44d540027ec18c5e414d83a1b9a2f

        SHA1

        64ebd08a3182ee8b25721234fbbe3c175c77007d

        SHA256

        26e1dd6ad966ceda4400e08cef494d5764b5f9382639059bcb71636149ee1e46

        SHA512

        e792ed725a3f189b7ed346dfadb74ff3b917cebeb742ae4b586345dee1ae06bbf596813da0f3e861b07de96cac5a79b6fe79e7e26bd8d13738e718369fd259de

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        bbed44ef5d1082da5932c81bd200f28d

        SHA1

        f09e49a327fdd8e56c98a22b763be8e422c6ce55

        SHA256

        70aee44cff1d11252a1aa7abb65a6a385ca281bd25bbde534696972b5e193f1c

        SHA512

        2c4163d3017c339f6039714139522cb71afaf9a94a9015b620c56818bce41033100a6b3162b286c369c6838fe19b988d4a8c91ca70e4aff57ec92f15ecb40cbb

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        8566d5f5f0edfb18ebd2190bd2f66aaa

        SHA1

        45bd7b443ce602ad2ccf1082b6e2c0f8fe0e2fcb

        SHA256

        410075d36d759bdea540dfa1f46e9d79ceeddc542bed2743eb55efaf1a214417

        SHA512

        b8d1bfd265cfaf8154f68461d9c6feb2c4fc843f12006538f7958f5e51a79341e1311b2323b3f2ec9b1135f263ae4fe5b7e0a27974f070ea051c2bf9f84cf910

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        5631eab93fb0386099168e01478f12c2

        SHA1

        358e23a94f841e6665af27cc84ac2415baffca1a

        SHA256

        a48cadfc434d6ba134cb76fb698d20058b4d1a6b5492f15215496a6b10b5828c

        SHA512

        47b5233d94d87b692766dbecc4d507145ca619dd2018324ba92bcfa1037c0b7c494c86f0d5ffc1771086ca20454ef95c6c7f9878bd318bfde1791575f350e309

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        8b161cc503aab0804cdbb29a772dfbed

        SHA1

        76cea6f368c6fe00996efa1fb6ba8e9d9fbc735a

        SHA256

        6b31b67a5e814f7de028e7ea69f646331a2b737e1405ff984a5df6063b426dee

        SHA512

        15e50e2458594160f8a050f28be147db7da0c333aa8327e44ba0953f207b2392a8696afade1f0884a8b95f9677c094bd4b9d8339cadcb7c28e03eacec9db4dc3

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        191e47705cc22c5cfaeb86bde2a55a74

        SHA1

        1f16121ca783b49fc221ad5c4007595e03a88464

        SHA256

        296db4817544e305e26019ddd9b5175df51c42bec91fa24ca5a7496f848385ab

        SHA512

        440d4f27f7360e8e012a10f8b4b7edd607149569d43e099018ff98aa9dfb7930ed46dfb83d5b52bcf6e1a33109c516ccdf946cca1c6dba6ea56529d075924276

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        428348f2b96e7b59809c2796e5b5ae65

        SHA1

        e87c46896b2b2a01bf41afd2271fd6493aa520c6

        SHA256

        1ea9cf463bc9593782a2f93c51fe6601624c338aa347d9ca2b43378e4d86a790

        SHA512

        93ae6252efb4de34a310007368147af12c40e72dff43aea66bf8a5b8da180d2100ee5f8afb55b89497f968b7f4bf7c98e2edf3e5d4a5437dbce4ad44d68d6fe3

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        f41c7de2b14e2aad98782e97cbe2c7d2

        SHA1

        d7b152079774ad3eb1a68271d4681083afacb52f

        SHA256

        544db74a815caa62fd4e3c66a2958a7e6d8c6f61d9df7b5979b2f92887a05d08

        SHA512

        a45c3f52fcc17f7d0e9b8342d21190a64fca55c4261a46442e3f218cbeb1e6ac2716b7866273e1bd1fe7cc04f3a5def9e5307022101d227b96530f73a8e99c38

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        73e19d4dbeb17d7f92bb0d826d516c25

        SHA1

        872863a463851a63ef82d80de0849514499c05d0

        SHA256

        fee67006b7ef3723ec5777e25d7149109370549b48fbed2517adaaeece3140a6

        SHA512

        e05044f75b52a9e0c97b7779e37ed61ff2e356e44e6382287b33741894b02b51d22a132f9f8ec1cfc361051fb28cf998acc005dd00a86d4d21efb9a024363650

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        d586f3e1644f310d6e7029a7916f6e63

        SHA1

        9f4e36ee3094c9633a784a0482fc06de079a0696

        SHA256

        d08ffc718f97ac06b2a434a7335ac94652368820148c4bb4f82bd021624c02f6

        SHA512

        0f23f86f0ee1676b189026da623166480871a6feae59a4ea7b96517458fee8ec5b83981be809510c9a44f78cc6f30a3570a1397765b48fbef4caedd704d7b70c

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        62d68f00dbbec2c377ddc14a20f8ef78

        SHA1

        e622eb3cc3a21f339de8873836d5bb7a7941b7e2

        SHA256

        e954acbccb8e99b52ae084ce5da6d6d98468140cb0b3a9949a6aeb4c089b948f

        SHA512

        6591d881c422a75d57a111358e082c4114b656ff5fa1db697dc4fff8ce4e70a556db8b9303859b0cd511429cfb5cabdab8e47fa41c076ed2a43189fed55a7aa6

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        095879915e29bf522e8e6573e675a498

        SHA1

        d2373cc42ca935ce8793f0ed9cfa68289b26cead

        SHA256

        7d23119bd4f2ff15d88e995087772fee99734b9c948ae165bea918fbc0b1546c

        SHA512

        88762eaf630814ade619b86f31c6783990873ba90deb6d34756ded8d95f13e1fb9a6629473da01bb26a2ee0fcd923234d9c26685aafb8d663afd63f67e3cb537

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        2603e418981f57f3a2b68eac202540d6

        SHA1

        384256c4e2f148e33b0c029d14acc39818c07792

        SHA256

        3b323fd0d9f507187145c4e5e7d8867c3f6dcf0c22829b37b85095d4a6e7117c

        SHA512

        f62c26585eaf5045dceebac2a547df8fa43117e8ae637597b23a1ca9bc5b26831b062af5f08c36487f41f9873d92cee746ba1b24e93c5c7ec43a1c81ae881835

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        5ece75edb75741c049cf39f544b06197

        SHA1

        20f0953222e5e7dc181214c935ea718dcab87fb9

        SHA256

        db6711b7b1f3eef2f76c42a895e3626cb89ccaed74198cee993371db77689779

        SHA512

        d03aead85596b84be08953a4d93fe6916da5d70254ce19dbcaeb6059aa3d249444705ba2bdea4f0b8dfd62ae4f3ddb89a20187c84bb1e0dcc0caeeeee43a43ec

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        1f369a9af0d7cd19d20b7fa1793c2a77

        SHA1

        38efb95c39cf8f62439f1998de2f0d6b6b79cdee

        SHA256

        74ab68618cf9ac4d7c6e16a2a0cb505d6da95b3da1acb095ca05c9451126276d

        SHA512

        4f8985b2591d8f399cb43b35b804a9c784937769333836b07122c4288aeeb648a0a0b4fb6d3007675a2011c58d99a4b70b6d06f3f9d69c8630cee55871aff104

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        6e38d73c3f88886a3e470b76b7373728

        SHA1

        def0b334154bfa6857a2f10979f605295f0432fe

        SHA256

        c7b87ee974234f3c2f5ab1429b1671941aa5b01db239ecf2a9ec818cc4d36a5e

        SHA512

        d3d284ef3b3b05422411b5e959f9b2da9fe22811b0fc5950f185fb4cbdd655d5755416e94b995ce7490c94084d0693ada961d447c60d47aed238f89ea4207b5b

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        64b235b0695e7fa520157c4eb208f486

        SHA1

        31e79c009963df38186bf7b0fc6a9405c5c920a0

        SHA256

        3bfd5b0d025f5b3925fb4143763059207f2cb482d402d22ada9990493bd13f96

        SHA512

        ed06d45db60661430b0c341d3a3fb8688adcbcc90ce53970a5e2887699b2dcdea4a2623a856e8ef7fffb72834245c074e49bc2446b938b9ed6cc89e4a9ad7fa9

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        9479620b6746a8fed81a0eb8f1705a50

        SHA1

        5c750a4aff12f2d1e02d957d5ff4f7491dbd7583

        SHA256

        f51f609b11fc1a505e76a3f05822a8f055d6c9b01700b16f65e7b6868abfbbb5

        SHA512

        e8fd5008ecd56584688ee9c1d3211e88e6263c3cf435a87dd0e31fe8abe578e1feade5c74046137cdd5d62279a9c5ff1f2ed378ddc6d9553d68494942c3ba5ae

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        63c483dfe359e557279ddd60b4adf6c2

        SHA1

        c1945e87de85057b4f69735b3a195649a27ca400

        SHA256

        208b328e522924d7f2123bc74ef5452c3db8748ccd912b3cfbeb0f4aa5b6fae4

        SHA512

        62b12a1d0b667b3b18c2f0d876e733ae64f4045cc50394a0d02242c4351cdb7e764517448ba77ba2117339a4fdebdd2f0a83649641c555c372bcdabcd1674ed1

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity

        Filesize

        1KB

        MD5

        1f404ab29863c8362596c033ab8f99d9

        SHA1

        aaa24e77426799b5899ae73ae1d7dd012b50585e

        SHA256

        64c4b5c4660b1e74e6c9d6f1860d09d3c64ea2ad02541371b8c0a8d97678200d

        SHA512

        e4b092c843d6c04695be8722deca5a51d75a71d3d2286506c18008eb7eaac409933bcacde2609fc8521c6e4b1e73636b2afa0cca09716d6718f40ce71650fb6f

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Network\TransportSecurity~RFe5b8818.TMP

        Filesize

        1KB

        MD5

        b044276a1372e648fc62bc49eada1a0f

        SHA1

        881afa08b2f80cbcd9bd0c0bb4489cf957d67976

        SHA256

        269408ff1ff918a6110e1bb0cedb7aec00d3ceb1b18dce9eb57c80e4ae338653

        SHA512

        50449093e9c1ab19ba7221e881e689915d7b839ba545d4b651219aa6d36fba9dcbf7e8035f574c5af75a556a9cbd640f97fa9c9fcc7966566aefe467123cd6f7

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        7KB

        MD5

        94744fad87a58afb38495bf84a0136d2

        SHA1

        a3eed56b3d80cb8916453496bef1b42b14f6128a

        SHA256

        551f2274f2451f60db5684467e6ef790a532ed196e5146d8fcb48c10d5cd2871

        SHA512

        0fa7987bdecce15db5cb9ad12c8b76737c253c68deca27cc3268be84d5b4056a978085be1f90274fdbc9a329a7faf97593bfdd127311ace2b62b91fe72f8697a

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        7KB

        MD5

        e993d03d02a2b463cdac3940c02b9e1a

        SHA1

        39c03ae90ed5705062f755fd003cba6862b9bb65

        SHA256

        40787166a91299f7fe80122e51b1d953f6716657d1a959524a17bab1f2ee1ae6

        SHA512

        13ae5da94e2f301f8492a16b6026490adb5def15fc8d55903293d89226be3ad975e722aa93332728a022ef30e9e8dd888896b54de6ad85e04b4d901242471dd8

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        afe0757022b8b3f065d926f26efd6758

        SHA1

        94419582ac210234a5849d004de00a3ffe0e183f

        SHA256

        991f60add236ea9021594cc2b9af9dfc0852f031353f8a4649022f37ec4daf5a

        SHA512

        27d14a73e9aabd96966f1bfa32d6fb0f13fb34efb09dcb28c3fbf427b021c57ee91ce4413ef741616ccd6fa6691171ef78b8d4735feb639b1cc03f36283a8c26

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        7KB

        MD5

        2012dd1d501c90306e22ad6bbeae12f8

        SHA1

        c431fda8464674a858d78a502bf100049a00471e

        SHA256

        9149089df541a73d171bfe188f723f03df66fc6d4021bee96f850c6ea975e7d5

        SHA512

        9878f9c370260758a1c1a5ea4cea395b5fec8b7feff8f3fca297ecfd595f176f5f3ac367e2984624f7e02c7c838b02fd540a054c8945c4eae1d1e191797349dc

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        2a34029b6857f5683701465c7da87378

        SHA1

        a6b7dfd2124f9f20a8275f20c664d5b7d2fc3874

        SHA256

        e7cd8aeade3e39b180518fb8378845d6d0e456f40d27e21382a72f008ee4b390

        SHA512

        02d1cdaec843bf80ff629ca2f0df67f3f7a57f59ea652c746bd144e6152aa3cf9f10a99db7a5d25d757b651c38546f63c8012d49b45e851b2e6aaa40ab68b374

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        b1b27177981668cbb68efc7a5fd01b96

        SHA1

        f03f5e8a55b26e2219f4cdc3067653179b979d75

        SHA256

        a44a888ce58bf325b50c2cb7d85781ab49da51aeb7868ed4a4c507eed6fa41dc

        SHA512

        816f9a9b08fed1aabd5a6e14e2bfff2e81630d4f0311062d73475836d833fdfcb9c2c4fed67d0b0d62a6c2a6c2ed33c410a8db801c55e8a66688931929da80b0

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        df01ce7e40d506476e961fc0062ebeaa

        SHA1

        390ccbbc21ac85add193ce0b01c1a63fb9bd8d23

        SHA256

        266bce80f08a69ce69f4c540b8fd6896a6d370acb6f53b5af5099a27aad8a6e2

        SHA512

        30d5e83938cfc753589b946e619e7b0b57f5db5e254b7e2025bcdbba20e769991332584a4d22ef5d38a3087ddf99ab8fbb57439090c8e82deeb44797a12a5229

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        d370a7c2a9279766160be1770d9a6899

        SHA1

        520456469b268b03b271a26259d175274ae3fc76

        SHA256

        8e1fc67d701c36f42dc7d250ff2e84cbc2d734400796a79571f486a8dff5455a

        SHA512

        57171823dac3ac659ff7f622033eef69dbe4f2324cdb6e4d9ec4096c41a2c0e7d3a22932d9947c3bdf9b1b9fefaa1c773e989c961c78f816c4be4102c2d85ab0

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        a9d6431c032fd604071f0401feef728d

        SHA1

        119addc5110cc1b74de775549fce94247df4d448

        SHA256

        c73b2677dfd67aff474976936000bbb05e47b8931bd1d632e2836e4cc0d29897

        SHA512

        ea5b46636982c111351da666b4617f9f906375b81e002896768b5d8ea599b0a2d920099e865806cad7baee75c473898fefd1069bced346d68b755bf013db5487

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        fd876f79828e8ff4c0a98af5550b3de6

        SHA1

        c4e970f20653c2b45785f7ff9663c332cb2f1313

        SHA256

        34a23a68721f39a5ce13844b5804e91a469183fe706ac884ebe7f8e0e4f89c7a

        SHA512

        b55054aa48cec4510da3e37422ecadadd90e3c3c8e7c32cf0cc4b3b4b31501a948fac0812f6c11846ee1707e3b3f81457302bbce97d153b1cae03ad2e949d197

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        9KB

        MD5

        77077284a67697fde1a1cb15b6e1628b

        SHA1

        1384cc41c6d30e1435aeec6b07e623a156e96fa4

        SHA256

        f18d84b59a82bfddeacee7742a844007f2ea79517eac9336c1a998dd3f65d9ef

        SHA512

        f6cad154241dc54ce52033bc4df0f4d66cd37c66746b05929879f84df6cb519aa4f47349900b736245062d28b9a0a10559924877888357372936c00d0aff4310

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        a4f2895e32993ef11530a03598265269

        SHA1

        5a55e9beaa90d587e80fd08a3d7bbb6f53eb2797

        SHA256

        570fcd538c26e12027f7c9b4b657f8647b1e2c399d9d4b878fb172b8c829d93c

        SHA512

        526d4f5a5209649a6ad594b9c4121d89c09fd3c589f601399801f415606dfe46220ef0dbc9760e65fac87bed8f9a12d76e6dc37c61e93c0c2aec2e2239aec084

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        845468961f547134d3ce98e940d7e29f

        SHA1

        a28d6f56396b8b4f86b43fa8c94f4d46bbfd6e67

        SHA256

        44668acf4eef3c618a518a5317bd6a89f92af5db47d69c71bd1090dc7d042705

        SHA512

        118e6ad7bab13cd15867bfd7d350eb8696355c1b0cf0102e3ccf49de1ebb0bc279f2240aaeae1b4550e0b4a4bbc6df42b41fd4788b7a422309f4d21f2869e7d5

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        6caabd85cf7db046effc3eda4a1df445

        SHA1

        30551d4fcae25b9244cb46f14ba50aa79e03fc47

        SHA256

        00e27ad53e31d0d95bea900ac90099b8816b30ef0d97179ef5dde34e7f4f4387

        SHA512

        8c5483b23bbad380b20d7243a48ab1ce71f6d7ded7361789a7ddd6bc31a9ffb2c7260fe313fcdb0e5559ab8a53d91b3b0caae2d568c58cef5bc54300f5b18543

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        806604e27934c539d064e87cf4af517a

        SHA1

        1d4a3e03673f5508c3bb5ff3cb9d59ff6a8f2e62

        SHA256

        b97b79a508c421d20b12aec96d3a8a39fb7039c1130289ab52f104313dd60f83

        SHA512

        139e70826f8ff73c44be516cc810347f72889bceed304cc04f2e80dac3d9e74c4b4f6374554dc88ec906415d0a3a2ea80755cac5c3736069ea51b6a3ee10fe87

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        9KB

        MD5

        6c688b5a7298cb9940c080325b3434c3

        SHA1

        a7f3c463c40eafadbe21b749385ea177a5cea523

        SHA256

        a2475e7b52b56e8c6476271d4f280bd7df64bd0f8c629ccb6b01e7b76e4d764f

        SHA512

        2d649305cb9d192dbafccb8ca1ac21d9492756be20ad1602662fe73c3502efe9c52f7d068c399ae53bda90885debe5a76d454f4b6dc378a5929ac409058788cf

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        8KB

        MD5

        988eff851044bfc28f9e17c088fe29d3

        SHA1

        16a54fa71826d60c13fbb01da8fddc249da15f34

        SHA256

        5932c63f92c39a4423b7b65ca90be87d7053414c2c087cacf14a221ef0f3dec8

        SHA512

        dd2d05f1af86ec44c45e013608009120ccecfa2335f03edd59f82e60c66eacc0367df80379bee25e0bcd4906aa15414cb8340df1473250c7af78dd057dcbcb46

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences

        Filesize

        9KB

        MD5

        93552efa09fc306dd3ba95366d1b6ae2

        SHA1

        5fbada1795abf46f4e3effc6b48e15307083e59f

        SHA256

        4bcf24e33be3eb505dea4be8ae1b8723a61dcfde55e965c05a854488e5824dcc

        SHA512

        0f606dee16ec82bc4ce2a1600dd44dddaf580a74c9c5df8bd7011b7f8a02130f3fbc4c917e8465bab4e43ec7a34b35e8d3ca04c42fc767c9431f234f160183f5

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Preferences~RFe5a2982.TMP

        Filesize

        7KB

        MD5

        46d845d26d42f654ceb1d9a44ffd3b74

        SHA1

        1e8ad8a0a7a6caae9881b95cd3a20a2a027639f0

        SHA256

        0693d50d6f8064c2034003f4e1d84b268a2d41210ec463cb6b46ba6098def915

        SHA512

        775391afa1a7838f283a571366cea1106f371aca22c89b2629be0e625e4020a1237e8399cad3ae32c8dd4b6fe4b5f1da924bc651c4598f3a7e1c3276d90899f0

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Secure Preferences

        Filesize

        7KB

        MD5

        208b736a9388dd1f10741e9b8d8e76b3

        SHA1

        c90f3cffefb4a2e2defd684c6fbce05ba3624412

        SHA256

        b979066492e0c77e9f0026221d1c8d77038907ae1ac50152e147e7aeb3110999

        SHA512

        1f0f0bbb7790fc7d9b0bf82d4629e4f40e58f9bc753a00d5d8b1987758c64d2fb02ff3b2a801f895613863231d39e5dd4323cf435dca21086e9cb2788281fa81

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

        Filesize

        72B

        MD5

        1134c8a8dd106d35c61f68011825da69

        SHA1

        7d450f69e91eb99717e6a9fc77cc1a526874971e

        SHA256

        324f5162e0fa82525d08be031c682bb40a7beaae6e34883498fc9d3a02a8edb9

        SHA512

        aeb9f0c70985ddda04a183d0d47d08dffbbf013b998a8b8ee0ba13b9f15d0a63e6a64849b2a4002e2224f30d72a4ce43b698d10b670e04bfc029b74dba90d621

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

        Filesize

        72B

        MD5

        d943122cb04044b6cda8abe7bf2f148d

        SHA1

        f38bdd987895c6e1560a1fc5f5aae93365b54b12

        SHA256

        754c6f46d997a668e6e8fab5f494a6eaaf4e954c9b8158e3c559c1cd3bea91c2

        SHA512

        17dfa403c699525209c6ca371ec04492363d2275cb6d0ec54b5f4ddd8b07fc5e79de56c3ceef946b206ee97f2b6101dbc6007852ee057f9ade7b253432fb5c2f

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a160a.TMP

        Filesize

        72B

        MD5

        6850fd3911660e8129e73690b70ef5e9

        SHA1

        c3b05cd2fad607b807cd2e2d59e4ac01e37e11fc

        SHA256

        847455c03bf68f5b82dac789c9f22a881619294eae054c77dbcacd1b85830fc2

        SHA512

        288ad5bfaf63651dbc1d26516e03d83e13813819efe8a54c8802a7f89995daf580e8b55a8610ea80a0cd73ee031ae30562d087d826e877ba1856dc22bcda4ee4

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Shared Dictionary\cache\index

        Filesize

        24B

        MD5

        54cb446f628b2ea4a5bce5769910512e

        SHA1

        c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

        SHA256

        fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

        SHA512

        8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\Site Characteristics Database\CURRENT

        Filesize

        16B

        MD5

        46295cac801e5d4857d09837238a6394

        SHA1

        44e0fa1b517dbf802b18faf0785eeea6ac51594b

        SHA256

        0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

        SHA512

        8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Default\cea0be65-31ac-4046-afaa-92a1a4a50ee7.tmp

        Filesize

        6KB

        MD5

        f7d378a84c8759d406e175bf7f80cf0e

        SHA1

        cc6df15c72214e8ae9190b2fb7d7e59cb251286c

        SHA256

        b8eb14fb8349d36fc842e94ca0e662795d84b2ec66a55f527b0ff52330ef48bb

        SHA512

        181afbd993903e7115ffc158f76c6902ad4f1c28f2df153e2a2abf0cf6483fdbcab4c68832601558a03cd293efac711d3d3add8c5a629211e9e2d2114bf1cb83

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Last Version

        Filesize

        14B

        MD5

        b10e4b89549e7d0ad58bf6e8f4f7f83f

        SHA1

        9fe3dde41a969c694f3e7c8cf6dea1f1570dbc9c

        SHA256

        82c022975c6c225dff66b921078511cf3640cdcc3fbc528bf4fa07e5eebdf377

        SHA512

        20aa7021a811b77f2e13261e26125056a11d5a02377a02c252e39f5618cb32efb64e7218b8fcdbfb90185aa732e7c5bd644a28852926ad5f922e5e9dab633bc3

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State

        Filesize

        3KB

        MD5

        51b5b58105f1a586b6153e46022138d3

        SHA1

        febe709f75662618389815503efc90ec400ffeab

        SHA256

        54392b76aa3772a655fa42ceee8bbad1b139ff2559b446e377d8a50a2767411e

        SHA512

        5adfa533faa94cf8560df9f1bd70f365cf698227453eabca12ec3f7206de212288bdde670e33be80cead4e1009a13195cc4f93b7bdb9522b6df34b0c559676aa

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State

        Filesize

        2KB

        MD5

        a56bea22948966f3b5f88e141407f629

        SHA1

        344c6f66b121ec76aa50f5c3a76fd1f9de680ab7

        SHA256

        0b80f9a9da808904330a1c865f8b1a7c88f710c310d9c972e0a292ca66431b8a

        SHA512

        5e649f4ebf2ff80c08fe28ea74c3c1642cbf2d8033f7a180eec9d0b159871cf86e650edca064711e67f0420529936d403e6f7030ea399fdadf6bb1396a2fff76

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State

        Filesize

        3KB

        MD5

        1a6eace8e03c70999a874db0682d74b9

        SHA1

        b9e8c832bb03d64af485b1b0dc11da69a0fd46c6

        SHA256

        6bc66df6b18624f6c47d3507e228b2c96efa55d1c45a4fb7f2d12403e0ac866e

        SHA512

        73c38175637230cbd737a79be82da455a337eea52d5715be5735b94e228db238d0a0f0a80c349aa6de37462ab95c21aff1954aa7594f64b2e23e73bc7ce5e7f0

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State

        Filesize

        1KB

        MD5

        90e00376477e1bfd1bf892effc64170e

        SHA1

        b6da9f5ca386c05f06ed2bc9a01b25515f2d089f

        SHA256

        7d215128960fe3c1eed4b43ca61ffb96b506dae67f1c199a555598c1b842db5b

        SHA512

        ab8bc336cfc18e780205947246d88a825a3c6068f278e4089fdb450644034e38105431a0c2e535e04509d6284723349c857fe09adb5224ee261a4aae5501af80

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State

        Filesize

        2KB

        MD5

        7cba6737101628373c8d5820198933f2

        SHA1

        aab0a954f68f8c79303a35db36e29c3dfd9bf50c

        SHA256

        41a198af68f3dd5e8cd6f1638ac3128f762bb76e0c9001445859da27b21b42dd

        SHA512

        5598e88f663f00f434809e726830ca31cab82f80f9870fd69facf551c43dc638ed189442d64503de069bbebb51c0b4f8ecdd3d1d67026a91ea87d74be696e3e0

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State

        Filesize

        6KB

        MD5

        974f9ce86662f303edd0cf04f978ad4c

        SHA1

        8f09350050de378022e2689dc9cb83d6832d9749

        SHA256

        5c112332b2d18d5e1168ba2e45a57bf2fe611ca5c0d71ddfbe3820983ede917f

        SHA512

        8fc064affa9b6aa116669062d1193b856652d0cf5f4b2797dd098f3c0e3f6a90c151d85e6360ee7e149f202f57baab6f17e3de3cb21e58a73ac9c29f01b4df51

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State

        Filesize

        3KB

        MD5

        080cfb91598c1c4aec5b017ae806a496

        SHA1

        b61b02676eb52040e61302b633d9cf7c676f6619

        SHA256

        cbbaa8329ad074045cb4ebc15a0e16e4a329f1cad5727339905a8bca93ec07ed

        SHA512

        a0da3c6a9cc028d16f614a4604bd720255391fec01aaf1cf2d1cebbaee7a0965c750d41041adb260bf315412c342d19dce8ed69061559275aefac8b34b7cda2e

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State

        Filesize

        6KB

        MD5

        99a580b9f32acd2dca7ebfbfb212cd41

        SHA1

        c6038bfaf00d9ffe1a06d2d241cf4bf9e8225d1d

        SHA256

        91e1fc0c5c5e71006c7e14c77b10a87a680e11e1439972df872321516cf13cc6

        SHA512

        fd31e677230eb511e28d99bdb60c1fa82d5c51a013abefd29252534816527b1c935f925bbbecea18f3068fdf35da5bd73161ba2b4bb6ad4716933b19b3ac0158

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State

        Filesize

        6KB

        MD5

        528038a7a81644488020529dc3954075

        SHA1

        458c61d7192cd91cb3ebae13b8bb378d9e64d0ad

        SHA256

        88c64f6d889b71dce6abdf8d2efd5add2fcd6f27ea28704fff1f73d4ecf986de

        SHA512

        b851a94907febc9654ed0c4ffc25bb5a9bb8d9676d5231334b119cddbe0040ce48d53440a9ddcab17b4b98e19421108170136ac242a5a71894bfc05d29aae185

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Local State~RFe59c3e3.TMP

        Filesize

        870B

        MD5

        a4b43b29b152e9476d48cf9e66e5387e

        SHA1

        8d9bbbf6ba1baaca8fc3d567b5bb4edb7f0a175e

        SHA256

        28afed3ffab36ff2959ee0d434c1eb50a81b0ae4812512f11c1d7c0d7cc9f8de

        SHA512

        ddb34050663304bdcac5fecb3188e624875fa6f60c941d16aa1f5287c94f3103a1ed3c37d167344e32c0de1b22fb36ac8e448ee0c288d62c6ef46c05646dc46e

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\ShaderCache\data_0

        Filesize

        8KB

        MD5

        cf89d16bb9107c631daabf0c0ee58efb

        SHA1

        3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

        SHA256

        d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

        SHA512

        8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\ShaderCache\data_1

        Filesize

        264KB

        MD5

        c862afec4c18e9f1260fc1cbeb1fbf66

        SHA1

        00e51cf3066fdee2b30e2476a3a1167864eb0ff0

        SHA256

        fda9668897d4aa0e66a69e0452b046731f436f6f076b405fcfc509b9f6c3793d

        SHA512

        5a5f3b2ee293dc17bb4573c515565407154c323ff27404d2fb076275a89461fadb33c3cb9871b896d8856c60f15b78e431e631665ca12c580829ad91fc9e0766

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\ShaderCache\data_2

        Filesize

        8KB

        MD5

        0962291d6d367570bee5454721c17e11

        SHA1

        59d10a893ef321a706a9255176761366115bedcb

        SHA256

        ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

        SHA512

        f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\ShaderCache\data_3

        Filesize

        8KB

        MD5

        41876349cb12d6db992f1309f22df3f0

        SHA1

        5cf26b3420fc0302cd0a71e8d029739b8765be27

        SHA256

        e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

        SHA512

        e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\ShaderCache\index

        Filesize

        256KB

        MD5

        0c1198e9bd8229bf8a5afad7e0765753

        SHA1

        c3ff1a6d7c05dfbe6636323a3e89b807f4e3df8c

        SHA256

        9d56e08f82dc382edc446538021f7a90e9da0e6903ee39bd28b386721db98bdb

        SHA512

        b545aa3baceca5dcd06ba265531f91d67900cf82ee4454f72a545d67d26d59612fd8b17c18a4e102f9c13e233f980b0362033ef30b767308373afdea88a63b27

      • C:\Users\Admin\AppData\Local\CryptoTab Browser\User Data\Variations

        Filesize

        85B

        MD5

        bc6142469cd7dadf107be9ad87ea4753

        SHA1

        72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c

        SHA256

        b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557

        SHA512

        47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

      • C:\Users\Admin\AppData\Local\Temp\2a1ba058-dbc5-4a2f-b5fe-337c81e10359.tmp

        Filesize

        10.2MB

        MD5

        f1c0095c9ace3a5fffc92fa25c1c4e2c

        SHA1

        5ef9375c2ca71373a6c0c5dbb72853e1b9c1c3a2

        SHA256

        0b1d13193f4076c610151d1359da446cc20700ceba1fdcdbcb4533ed9c34ec6c

        SHA512

        bebb8ae2feeae5a4d9a701d52180c595f1fc9a36476bd7d83a3323a3bffc361a93230183fcbe9147a3c70de481a1d9a608504afa988aa303b34022e9e8b8abf9

      • C:\Users\Admin\AppData\Local\Temp\CR_91A21.tmp\setup.exe

        Filesize

        2.7MB

        MD5

        d0ee8fe65c952eb0de52fc56ac6546f2

        SHA1

        2b2958188f7f29e0895595c887b6bf1b8096f0a3

        SHA256

        a7b15d1cf755afe0ad43620979aa2ee8b627aeebd9a216428eb019828279fedc

        SHA512

        58185690501af3482efbcd80fe67dbb5a891a00d62f4f65b3e7fef8ededa88101528ae7feec2876fd88b1516dade027f3a16768d56bfbd31716433950e3127fb

      • C:\Users\Admin\AppData\Local\Temp\chromium_installer.log

        Filesize

        39KB

        MD5

        4a20fab3c4e4f2d13d6f50bfac4597fe

        SHA1

        ca6dde32b0b118e0ec307404095ec2b138ff05d0

        SHA256

        605b786f447a232aa422c9ca34e071d180d5d4dfe68c976e29032a834550d614

        SHA512

        12aa5d43c1040a0cf3ce4bd76e224475ac865e15083335c0281bfc8b67775cd12774d8906cc58252d01b756332c48e09a4ae9e529beb7ed3e6e70417c8b1e5fd

      • C:\Users\Admin\AppData\Local\Temp\chromium_installer.log

        Filesize

        40KB

        MD5

        89249e00b2de25ec6b8fc236cda868bc

        SHA1

        9688875f6123be0d094da02caa8774e9ad265ecc

        SHA256

        36a46802d1015d7f12c19668227bb7c47ed502aee1731af97fa497210d965656

        SHA512

        fb160731bbc188d2ac87770a10ac18db79f090b766844b41d149be0393cfe3083472014038e6b8f8c110102e1a7f9d93f15a35fc913ada4fcf671b2efed983d6

      • C:\Users\Admin\AppData\Local\Temp\chromium_installer.log

        Filesize

        20KB

        MD5

        46531fef352a2201ac20104a6d661ccf

        SHA1

        d1747671504ab1da80fcaeeac23ac40c3b706bec

        SHA256

        a08b8a532459f59b09a9fc2684efcceea12565be12c69badcab80c2db4251007

        SHA512

        d057adf892d9fcf6576622648d1d9414d7c64bdad68e066228e0c33e0d01baae3f9fef774376995054eec46d76f9bdf0831bf82e1625f96185e970e78d5de929

      • C:\Users\Admin\AppData\Local\Temp\ffaffdbf-96e6-442d-b13b-b0591c4c43cf.tmp

        Filesize

        1B

        MD5

        5058f1af8388633f609cadb75a75dc9d

        SHA1

        3a52ce780950d4d969792a2559cd519d7ee8c727

        SHA256

        cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

        SHA512

        0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\_locales\bg\messages.json

        Filesize

        796B

        MD5

        6f8e288a9ad5b1ed8633b430e2b4d4ca

        SHA1

        f671d3d4befa431d1946d706f4192d44e29b6f08

        SHA256

        a114e2783d0e9b12155017323ba70838f0f82a71c7ee8dc1f115ae36991241f8

        SHA512

        0f87f3f0d115b872288949e59acd3cd41b1fbc64a622d8fda6d71fafc5a900d92adfbb0e7eb926f2a8759bbaa0896d48728fb719bbf5ef54ac21027328f7700c

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\_locales\ca\messages.json

        Filesize

        675B

        MD5

        1fdafc926391bd580b655fbaf46ed260

        SHA1

        c95743c3f43b2b099febebc5bd850f0c20e820ac

        SHA256

        c67898b67f9c9209eafda6532b62d5789863cfb855998dd6a70e7775316cec20

        SHA512

        39d95d45c5746da3baa7ae6a3344ea17d7a7c3569c2a56959ff119261da08c747a320fcf701ac72b8dbdbf8bf06fd8b239017a282cdda444f3826d4ec672cbb4

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\_locales\en_GB\messages.json

        Filesize

        593B

        MD5

        91f5bc87fd478a007ec68c4e8adf11ac

        SHA1

        d07dd49e4ef3b36dad7d038b7e999ae850c5bef6

        SHA256

        92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9

        SHA512

        fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\_metadata\verified_contents.json

        Filesize

        7KB

        MD5

        0834821960cb5c6e9d477aef649cb2e4

        SHA1

        7d25f027d7cee9e94e9cbdee1f9220c8d20a1588

        SHA256

        52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69

        SHA512

        9aeafc3ece295678242d81d71804e370900a6d4c6a618c5a81cacd869b84346feac92189e01718a7bb5c8226e9be88b063d2ece7cb0c84f17bb1af3c5b1a3fc4

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\craw_background.js

        Filesize

        531KB

        MD5

        6eebed29e6a6301e92a9b8b347807f5f

        SHA1

        65dfb69b650560551110b33dcba50b25e5b876de

        SHA256

        04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697

        SHA512

        fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\craw_window.js

        Filesize

        255KB

        MD5

        1709b6f00a136241185161aa3df46a06

        SHA1

        33da7d262ffed1a5c2d85b7390e9dbc830cbe494

        SHA256

        5721a4b3f8e09c869a629effd350b51c9d46f0ac136717d4db6265c0ee6f9ac8

        SHA512

        26835b4c050f53ad2ddb84469df9a84bbb2786a655ab52dfc20b54bedcb81d1ecd789198d5b7d8b940242e5ceac818a177444d402397ae82c203438c4b1d19cb

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\css\craw_window.css

        Filesize

        1KB

        MD5

        67bf9aabe17541852f9ddff8245096cd

        SHA1

        a4ac74dd258e8e0689034faa1b15a5c7c56dc3bb

        SHA256

        10dfbd2d98950b79ee12f6b8e3885aabe31543048de56ad4fc0a5e34d0d9d4ec

        SHA512

        298fa132c6f122798fdb9bc6de8024915147adc20355b56a92f0ed9acce4549be6e7f42212e07dca166e31624d4e66e299565845d4ba1c51ca935050641b61fe

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\html\craw_window.html

        Filesize

        810B

        MD5

        34a839bc40debc746bbd181d9ef9310c

        SHA1

        8b4eaa74d31eed5b0baba3ca5460201f6b10da46

        SHA256

        bb8742615e4cd996ae5d0200e443ae6a6f0b473255f03affdb8fb4660de4554d

        SHA512

        ee81e5509cbc2cb2b6c834224688c1e1b1aa9aa3866c52f8eaed040d5c390653c52d8d681e2e2cf62906643962abac823d5b622385b983b21e0dccafdf281eff

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\images\flapper.gif

        Filesize

        68KB

        MD5

        398abb308eebc355da70bce907b22e29

        SHA1

        cffb77b8a1724b8f81d98c6d6ad0071d10162252

        SHA256

        2b73533f47a99ffea9cc405ffafa9c4c53623f62487aebfba415945120b22040

        SHA512

        fc7a56fc8a61a582161874b54adbad30a84840190008edb0b6fbf84f91393ca58e988e3fe446f11a0c3c691c18249b93aec2904b3d0c4f0857d79034f662385a

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\images\icon_128.png

        Filesize

        4KB

        MD5

        e34329b273cbe85e198a217e8137a640

        SHA1

        bed1fd21dd25a886572008fd26272ee0f7f1ef2d

        SHA256

        51cbc777e2000209fc82053f59ed4c2350ac8f5403fc1327e4b8c72033f1c5d1

        SHA512

        e4575a6ff7036bb8b7f147ee9ef1105b59d2dbe81fd54cfb8ed15b2f4bc0d829bf8c62060a9d0d1d98fc27593c97512ac0669c420a776a03294f680c0e587665

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\images\icon_16.png

        Filesize

        558B

        MD5

        fb9c46ea81ad3e456d90d58697c12c06

        SHA1

        5fc450f7d73ccfac8f0d818cb3392ba4d91b69de

        SHA256

        016ca659ba080e194fbfc0929602b16506ed60aa6019faa51410c4fd93b583e8

        SHA512

        add810ee9eb7caec505b5fd90a1f184ce39d8f8c689dcc240f188fe353b9575489492e07d572a3b1c11a1555ce66afca5134903e4c1aa3d54bc7c5ed3e65b50c

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\images\topbar_floating_button.png

        Filesize

        160B

        MD5

        8803665a6328d23cc1014a7b0e9be295

        SHA1

        9da6ee729d5a6e9f30658b8ec954710f107a641f

        SHA256

        d5f9234dc36e7ffa85f35b2359a4f82276f8395efa76e4553507ea990b27fc6c

        SHA512

        ecd9e71b8ba1ed8bd4ca5a0936cb66a83611c4abcbda76c250f4cdf4ad80320212e8f5eeb79a38910718f8346ecc1ad580a3fa835ec2b22be497f36899fb5930

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\images\topbar_floating_button_close.png

        Filesize

        252B

        MD5

        0599dfd9107c7647f27e69331b0a7d75

        SHA1

        3198c0a5f34db67f91a0035dbc297354cbc95525

        SHA256

        131817cd9311c03df22d769dd2ad7fa2e6e9558863a89f7e5e1657424031a937

        SHA512

        0076acb9d6a886bd987876e49495038f9388b292a9efe5c9093cca64ca3692e3a5d24e35172c7697f6aae34b86ca217ee59c003423e46d9499bd27ec7d77a649

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\images\topbar_floating_button_hover.png

        Filesize

        160B

        MD5

        7cb6b9dc1a30f63b8bd976924b75ad96

        SHA1

        0c40b0c496d2f2b5f2021c117ec8610ac03ab469

        SHA256

        721b7aaa9a42a54a349881615a12e3a26983aca48e173fd2f66e66aa0d725735

        SHA512

        4764937364e355956b242b84010ac56102536d2aacbe4227f0e88e4de7ab468571957ea6c33012539156e5349ae4f777115615ae3361f60addf9cd227424f76a

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\images\topbar_floating_button_maximize.png

        Filesize

        166B

        MD5

        232ce72808b60cbe0f4fa788a76523df

        SHA1

        721a9c98c835d2cd734153bbe07833c6637ecd68

        SHA256

        afa4ea944cbdec8543242e627ef46d5bfd3766dcac664e7e50cdeef2b352740c

        SHA512

        4048eea5a78dd569521c488c4ce4f7b77ac0454c92ee9107a81a1b3af91a4ee036039ac1a0a6b8dd26b12e7f1595db80b7faa7b6a25d9032bf385528a81a8654

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\images\topbar_floating_button_pressed.png

        Filesize

        160B

        MD5

        e0862317407f2d54c85e12945799413b

        SHA1

        fa557f8f761a04c41c9a4ba81994e43c6c275dbb

        SHA256

        5c10ce0589eb115600f77381130b70ae0b7b3752614d86d4c89e857658aa222b

        SHA512

        07cb69327961fd0019bef8ef7590b5524905ac373a815f73f6d9e0b26840929f919a96caa977d4b5656704dacd0f352d568fb3997f80ee6bb94c95b58839dbfe

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\manifest.json

        Filesize

        1KB

        MD5

        6ca25f3ef585b63f01bcdf8635120704

        SHA1

        00c063811e31ea5f9a00f175a71ea25e7821f621

        SHA256

        49d9de983f7436ba786e6e04a5a20c10f41687ae06b266b1b6553f696719563d

        SHA512

        566bfd9badbd8951ee52e5911eb68b51e86286989096d32de6e32a2523761b0e0afca251ef3bea36b5d51fb8354a5fca567772a02c3f3b9d8dfe529609fa0430

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_1196502420\CRX_INSTALL\manifest.json

        Filesize

        1KB

        MD5

        01334fb9d092af2aa46c4185e405c627

        SHA1

        47ad3c0e82362ffe5b881df8d71d6f79ab7f5796

        SHA256

        f52714812d68c577a445169d11e84df6751c2d6886bc429643072bb5d61c6c27

        SHA512

        888d96adb7a847abe472145258c8c46950eb2fa3ba7d596c2e90a17c8fb06fd0155c56cc8aba5d076d89368417464bcb2d236f9e40e53241950a01f9f8ed548f

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_174310514\5729fcea-8ba4-47f2-8b6d-54db3e63277a.tmp

        Filesize

        242KB

        MD5

        541f52e24fe1ef9f8e12377a6ccae0c0

        SHA1

        189898bb2dcae7d5a6057bc2d98b8b450afaebb6

        SHA256

        81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82

        SHA512

        d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88

      • C:\Users\Admin\AppData\Local\Temp\scoped_dir2940_174310514\CRX_INSTALL\_locales\en\messages.json

        Filesize

        450B

        MD5

        dbedf86fa9afb3a23dbb126674f166d2

        SHA1

        5628affbcf6f897b9d7fd9c17deb9aa75036f1cc

        SHA256

        c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe

        SHA512

        931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071

      • C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CryptoTab Browser.lnk

        Filesize

        2KB

        MD5

        9b01e901f7d9ce9bd2257bd337dffa6d

        SHA1

        fd7f6ae07a9bbc327610330e3fca28ea49ee292f

        SHA256

        9393726cde69e104e242cd4acb40c996ba7ac6d016434c6dd5dd7e862633ff20

        SHA512

        20342051411aa96a9ece1e88e14337ceed228baef0cafe26c74ef9259736055faa35a41972697cff0c4afc6599ef71de19267ecd99cd03c776a911d87ea64949

      • \Program Files\CryptoTab Browser\Application\125.0.6422.113\chrome_elf.dll

        Filesize

        1.2MB

        MD5

        f8ce6d0d06b4e1d5cbe33335ac17c21e

        SHA1

        b2d02dfc886aa183193974106abadcc25d3413ae

        SHA256

        d2628322119b52e72abe00ea9c2cae76a2bba972f798c3f925144c4397c0948e

        SHA512

        d3ecd8abe7a67df49608815ad805eeb5f9d25c18477ef564776aa94b8650599551933fc084dc3595e1823ace3b51d2d00274537ded831b0e027e6c6e695ccf8d

      • memory/1296-87-0x0000000001070000-0x00000000019F7000-memory.dmp

        Filesize

        9.5MB

      • memory/1296-0-0x0000000001070000-0x00000000019F7000-memory.dmp

        Filesize

        9.5MB

      • memory/1296-1-0x0000000001070000-0x00000000019F7000-memory.dmp

        Filesize

        9.5MB

      • memory/1296-285-0x0000000001070000-0x00000000019F7000-memory.dmp

        Filesize

        9.5MB

      • memory/1296-314-0x0000000001070000-0x00000000019F7000-memory.dmp

        Filesize

        9.5MB

      • memory/1296-24-0x0000000001070000-0x00000000019F7000-memory.dmp

        Filesize

        9.5MB

      • memory/1296-33-0x0000000001070000-0x00000000019F7000-memory.dmp

        Filesize

        9.5MB

      • memory/1296-299-0x0000000001070000-0x00000000019F7000-memory.dmp

        Filesize

        9.5MB

      • memory/3644-562-0x00007FFD4B2E0000-0x00007FFD4B2E1000-memory.dmp

        Filesize

        4KB

      • memory/3644-561-0x00007FFD4AE90000-0x00007FFD4AE91000-memory.dmp

        Filesize

        4KB

      • memory/4268-4586-0x0000025A9AD50000-0x0000025A9AD60000-memory.dmp

        Filesize

        64KB

      • memory/4268-4591-0x0000025A9AD50000-0x0000025A9AD60000-memory.dmp

        Filesize

        64KB

      • memory/4268-4587-0x0000025A9AD50000-0x0000025A9AD60000-memory.dmp

        Filesize

        64KB

      • memory/4268-4590-0x0000025A9AD50000-0x0000025A9AD60000-memory.dmp

        Filesize

        64KB

      • memory/4268-4589-0x0000025A9AD50000-0x0000025A9AD60000-memory.dmp

        Filesize

        64KB

      • memory/4268-4588-0x0000025A9AD50000-0x0000025A9AD60000-memory.dmp

        Filesize

        64KB