Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    473s
  • max time network
    471s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/07/2024, 20:01

General

  • Target

    https://acrobat.adobe.com/id/urn:aaid:sc:va6c2:e16fccdc-3f14-4665-a52e-40162b35d4af

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 4 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in System32 directory 2 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://acrobat.adobe.com/id/urn:aaid:sc:va6c2:e16fccdc-3f14-4665-a52e-40162b35d4af
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2804
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa6630cc40,0x7ffa6630cc4c,0x7ffa6630cc58
      2⤵
        PID:4156
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1884,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=1880 /prefetch:2
        2⤵
          PID:3940
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2100,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=2120 /prefetch:3
          2⤵
            PID:3312
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2204,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=2388 /prefetch:8
            2⤵
              PID:2404
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3108,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=3132 /prefetch:1
              2⤵
                PID:1040
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3116,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=3180 /prefetch:1
                2⤵
                  PID:4440
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4784,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5000 /prefetch:8
                  2⤵
                    PID:1908
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4860,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4688 /prefetch:1
                    2⤵
                      PID:1736
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=5096,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=3316 /prefetch:1
                      2⤵
                        PID:3436
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5360,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5348 /prefetch:1
                        2⤵
                          PID:4944
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=5288,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5376 /prefetch:1
                          2⤵
                            PID:3520
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5264,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5112 /prefetch:8
                            2⤵
                            • Drops file in System32 directory
                            • Suspicious behavior: EnumeratesProcesses
                            PID:388
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=1440,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=724 /prefetch:1
                            2⤵
                              PID:3400
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=1452,i,14382773319628553784,1719142883768760448,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5356 /prefetch:1
                              2⤵
                                PID:1084
                            • C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
                              "C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
                              1⤵
                                PID:4420
                              • C:\Windows\system32\svchost.exe
                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                1⤵
                                  PID:904

                                Network

                                MITRE ATT&CK Enterprise v15

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                                  Filesize

                                  649B

                                  MD5

                                  8cbd695e75c0e1a7df09514d3a2be424

                                  SHA1

                                  a24e7fff44cad46e7c04e014949f471ee0d14b16

                                  SHA256

                                  aca1f64e980d1fc81827fb8b361ef68bd612a328e4c0d7b36df423b975c2e854

                                  SHA512

                                  1dd0daf982027bc3695a7e62ecb579cd47fe0163e1628e184f54efb897f48444d28a680f0927a8b9c06c107bffb91acc41dfe47bfb352093c8965c33b579d6df

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000063

                                  Filesize

                                  288KB

                                  MD5

                                  526165ce7dea3ffaacffb21b782d33ee

                                  SHA1

                                  c39fddb5b7b93d3d43b3335d4acbfbd50a865e39

                                  SHA256

                                  bed9f50bde264cb3425fddc8fb071adcfa8666a881b778067ddc502213c653e9

                                  SHA512

                                  ba44b7ffa0fa49d98198c497136bf313ca0c9f497c6b168efa07e160a8f733ac5d4298d23b17d186eeb6b5be6e79924f3956fd4dd69b5a4b8f08b3b9f33feea1

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

                                  Filesize

                                  3KB

                                  MD5

                                  188a75ecaeb8a28ff841d7d06d9e40b2

                                  SHA1

                                  c68fc1bbe87738301917042baa026b2ab3fb052c

                                  SHA256

                                  a3d55de8348d6ed9dc565fab1fecbdbeaf1c67e84702e1753b4fe269b4f45498

                                  SHA512

                                  2c9c129f475110b7907625612dcbb7fdfcfb6d7182c0f0efb8abedbcec53a20f6b76f13503f1c48491e630801afdb8707810bcb3d5fb037ea41709bd5616abfd

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                  Filesize

                                  3KB

                                  MD5

                                  0965236c839e5d425a9310dfff605026

                                  SHA1

                                  37f2f1bb1cd362c3477ff94d3057ebabbf6ba059

                                  SHA256

                                  ee4cde70cf1a964acddf8ead25f82e8b91b69fb4f44cd653fd6e8b81af703f59

                                  SHA512

                                  a5bb797b22b9b1913d58af5ad040933656052edf206e25e31470284f51f6487dd5a4e84f4603346363c224c8127f2b6954ce163e411184c297174d7999005a7f

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT

                                  Filesize

                                  16B

                                  MD5

                                  46295cac801e5d4857d09837238a6394

                                  SHA1

                                  44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                  SHA256

                                  0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                  SHA512

                                  8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_acrobat.adobe.com_0.indexeddb.leveldb\LOG.old

                                  Filesize

                                  393B

                                  MD5

                                  b4236d0ee3c0e784044f9df98468fda6

                                  SHA1

                                  3a07754f1dd9e4a0d7b602fe94fab355001e159d

                                  SHA256

                                  cca9e1ea64a9320b6fb7313b967991a603cc5f3b145ec89abb21855d4b54d1ee

                                  SHA512

                                  9af398a583a7dd9a025bd54bd59514dcd193125f7fd8771656cb349e5c98614b2794e63947249994bd8cc8eae71dec2fd515ba2f29438a47cf4a9de6362c1528

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_acrobat.adobe.com_0.indexeddb.leveldb\LOG.old

                                  Filesize

                                  393B

                                  MD5

                                  02c269a09cbb5fdde218e985d66645b4

                                  SHA1

                                  22f6363cfaf8b1cd88e57cbc3ff32cacd9a5f7d7

                                  SHA256

                                  bb98510417a1a92ff9d38a6aab8af2ec843a6343f79628c23f453eb09033e7f3

                                  SHA512

                                  5a2e3ba3ca4e1f7a0d633d3ba1926220fe48fab1aca0288921fab2d7653c4723c4374c17589d308f32a1a86ac0d9daab15fdc5d1f641817feb9fa2775f2a5e1e

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_acrobat.adobe.com_0.indexeddb.leveldb\LOG.old~RFe5aed40.TMP

                                  Filesize

                                  353B

                                  MD5

                                  b7ec7dadd772b5ffe78aa0cd1803edf9

                                  SHA1

                                  41e69190b08b90a59852111557a1f23d7657f7c9

                                  SHA256

                                  57ee4aa3259411409294bac46db8380f5230c562774fa93f5db3c98f57d8f963

                                  SHA512

                                  53467d3a243e8b4d6d0b9d0ba18e72f3f2b4febe7c8a9948c718717bb7cf41771e5f4664e6638fbc7354390f72a85380c08482591af17dfe94dfd5b49366a0dd

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_acrobat.adobe.com_0.indexeddb.leveldb\MANIFEST-000001

                                  Filesize

                                  23B

                                  MD5

                                  3fd11ff447c1ee23538dc4d9724427a3

                                  SHA1

                                  1335e6f71cc4e3cf7025233523b4760f8893e9c9

                                  SHA256

                                  720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

                                  SHA512

                                  10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                  Filesize

                                  8KB

                                  MD5

                                  99f5c69d35646f2bc2d43f9fc33892a3

                                  SHA1

                                  4523d85a21e2e31b778458a7071a2467c128dc9c

                                  SHA256

                                  7d147f556d86a64959c4748eb2901670627e3308f1e2576dcff1c535e7de1f60

                                  SHA512

                                  9e5980b2b29a1ecfd8768c8a63c4e43982f930f82291231ab71b775f0edfe4428258b88e4be1cd285f607fc27d6af64ab2a2fcae84d441bc57c83584683a268f

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                  Filesize

                                  2B

                                  MD5

                                  d751713988987e9331980363e24189ce

                                  SHA1

                                  97d170e1550eee4afc0af065b78cda302a97674c

                                  SHA256

                                  4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                  SHA512

                                  b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                  Filesize

                                  3KB

                                  MD5

                                  4c58d59087a973298d2c8a4cb2ffbd01

                                  SHA1

                                  d557b297f753776f93f27185b1789014640f47f3

                                  SHA256

                                  828f40a495b5b0c1a6ca136b165f6445772de8231e3d8d5bcb6c136a5e726e3d

                                  SHA512

                                  394b6e7fd26249e95ebf870376c6fe82b4171767e5e2c9844867bafa0fe501c8c3e23d9e26e479b2071865e012cd1180a117df8ea72672f1c0bfc314e6ff4359

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                  Filesize

                                  3KB

                                  MD5

                                  e92e70a4b54428b5e1c0f260b7e7a475

                                  SHA1

                                  b0022c5cb69237650a01b1e16261b36c063742ea

                                  SHA256

                                  9f0c7138df8098afe816d0a32ed35650bc8338bc01f2dfa1792bfd68d067dcfe

                                  SHA512

                                  7bc44c6a9007509fbd68cc3a00331022cce659ea6ea92f8c0cc09e31bff57e26090d360cb9255a38c3a6a199d155bd3714aa0a21a7acefba1a539b636d617da4

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                  Filesize

                                  3KB

                                  MD5

                                  43bc38c07f4f4af80309c2ae28e6613b

                                  SHA1

                                  ef29173c8e44a946434f62f96d681432293b338a

                                  SHA256

                                  0384873ff6ad2ce803ad395991e9c37f5e3f1c61164dcfc7b1895d5e0468f29f

                                  SHA512

                                  0c1ee7b121ef40199a5e013bbc560d9a5cd54ea18d653feee86126e7db07ea1a99254515a46322206ab643b74b8d0c74e9e604c07ed3e6f8d447e2260afadfb9

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                  Filesize

                                  4KB

                                  MD5

                                  da506f5f60a24938c37cff635184bbbc

                                  SHA1

                                  795ab77fc0b3f5542b780b21c7ee9af584c9543d

                                  SHA256

                                  fe6afaecfd75a558b4acaccb778c174acff2154aaf3fd54cbb3d1d5be98ccc5e

                                  SHA512

                                  abe628e5213bf722bdcf012fada4acd71be37d31d7947292828a8054af477847b68b4dcd26cd351b6e26f7a11a96609cee05678c7fb05b7706de9b6f9dece15f

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                  Filesize

                                  3KB

                                  MD5

                                  424eca97e1c2fd3fb00111f4be385ecd

                                  SHA1

                                  fe2007cc9836189afdfea40f67bd5b1885822ae9

                                  SHA256

                                  f666b904f3dbeb35285eb8293f2fb43b715e67a6e55a1f46d163b47bf8b07c26

                                  SHA512

                                  18ddf822984763141ca6ac76e3efc3beb6b70a91390b645c8e7a1b10f628b4ca8d8765a08c343f8f07e92fc6d2079d7b377dc88486edfcf99e1594279414b66a

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                  Filesize

                                  4KB

                                  MD5

                                  15f41a558ada8a8c8d432c67fa7dd07a

                                  SHA1

                                  d951ac6963eecbaea41d4a43ff89fe96c75207c3

                                  SHA256

                                  04a3687ca7f9d4f6f4a20ce1c6f04ef6e3754bda1e650b797ba0c89e410bd11a

                                  SHA512

                                  7a6b0356435d5a6a5b09235ebdad92c08423cd9ab8ce6fc1e83ea3757466773166fd2dabea07f386a6e7eeaf669baf78598dfdf977df2509529c6fc0c13dc72a

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                  Filesize

                                  4KB

                                  MD5

                                  ce20906b0b7f26bd6c343494717f4923

                                  SHA1

                                  d0f272aa65db4f5642cf4cd39b3cc6ff503d1459

                                  SHA256

                                  fb3decf6011e8841b555cbf95dd489b58b8ca769de03f00a4096b0926f9a9b60

                                  SHA512

                                  258bd55561b1492160b8a152e9950991d4b0527b880fbce6e44bc42a04bb0bf44d9f70013e5206d3e68fcef0df24e6629a47cb6a1672242940b7a7735af4bcc9

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                  Filesize

                                  4KB

                                  MD5

                                  f1977447d2ad76c786c2698ed37f0756

                                  SHA1

                                  fdfb751be99fa88f7d6d3bf452baa04ab110c155

                                  SHA256

                                  725d61d26bb43f49b039383c41dd42bb79eb374d645b8713b88d027ab975fb29

                                  SHA512

                                  6c2acc2506df8bedc4f65a114210a654b5fee760590f2e96a566ae6a80e196559c031dcb023f7d6f03f7c0a452831cf1f348134089d76656e64dc14ecda8478a

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                  Filesize

                                  4KB

                                  MD5

                                  74a37c802c91956ac4c1b358001a592f

                                  SHA1

                                  02f17220787901f4c73489dac353585409a25ac4

                                  SHA256

                                  e92aa5e7fbf5706344cb9f35f282d4a8213e1eb54821f537575297a6a9e379f1

                                  SHA512

                                  84a90029fa358c2addfa045342485605d9a28daabac6c8a168dbbc4491b900c8c6154b627110b7242266a95c6f404f78f09abf4b28847e1eba4ce8929bd744d0

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  f9d9db81f410bb6efba0f334ddd8ec0b

                                  SHA1

                                  cf6c41373ff40ea1f202d2c96134eadd50e7fee3

                                  SHA256

                                  8468b46a3b4cddf09943b460f9fc7e605b414f9e27a610769c12e3647ef91e48

                                  SHA512

                                  3c696ea5dd5a45bc8f9db7c62aed1b3094839c69699e8a4c7cc79b94566f60a96b89f074d2e9910d791959b5c708675d4a019d683df00c2a6c9dce63bde2887a

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  dc6c80f1d614861377ef06bdb3c11398

                                  SHA1

                                  288fd619f7aef0a043c14f6963366d1b9fb1f814

                                  SHA256

                                  5a4bd3f19bb1cdc049964dfa4232731e07616e8d1fa8a299ee892e5dd4df9002

                                  SHA512

                                  b7b12ef7d4452f24be0e891ad7898468bbe600dd84d37efa247095060653a56dd0a718904c36283422cbe638d08e4c88e904c434466714212ba8bd7e33bc561b

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  3d94b6c630f4bf18479b8a12bcf249c9

                                  SHA1

                                  7f09bc7a1e7fe7f455e58ea782e5ebe95b9f4ebc

                                  SHA256

                                  dbfbe6967da485fc402a4b6ca0abcc389d63ee28748ad11347fb234d25d2a29f

                                  SHA512

                                  67c41b26f129bea75cec41b8310c15f11f6fc12c3543d12dc30ec4963f15d78f27f7c5f87a7b196b4710e30036903a9c29ea2a2ddafdfb95ea8fc7fd94a20ebf

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  9KB

                                  MD5

                                  e71e3e36d9493faf89f3c5c23937815b

                                  SHA1

                                  6ff12edfaa89b395b53d1a2bb50133ea5a4a4624

                                  SHA256

                                  42c2e87dd15b21bdf76c2ec04e6e62d891c73cc979f2d0eb1d9b91028a43eaef

                                  SHA512

                                  c8101851a2fbc29e7df84bfae55f404ccc92c92f850d6408718b0cd90787baf565c29248cb763ed3ff9a25b8b68b5f78bd0b95744454433a71e37fedb01c3ded

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  01343918c35151c6399e75a38360f10f

                                  SHA1

                                  5602f6bf6bbd4c1d12ffab35a346f94ace370e5f

                                  SHA256

                                  f2c2cf5e9ebbaaf0e643050f2410f42f0116ee93c27df5dc0be85f5b4a7fcd12

                                  SHA512

                                  cacdff25f45f0ad1b7d9935007f7b5e35529465d3172f1287d16c62599d6b22fc30fed2dd94ae17159599b6764dd71966b90ffb088928b2c267fafdae0f17863

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  e135ff0f37102aadfe92dd99852dcf2c

                                  SHA1

                                  3e2ef58168593293af87711b8715c60e5ea120b5

                                  SHA256

                                  4b7934b9f0f93e877e7b415e8b2ef571b88863271468ca39917ba38482a6282e

                                  SHA512

                                  0ab31188c61740d703cb9091ad8b659a27307c3ea22f7db775d41e8e96ccaabff7a278d0e6e4e423535f9b6662b36e5151fd8e6844eef48449c4697b2c73c37e

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  8fc278144df64ca2feaa0ed9baef3192

                                  SHA1

                                  72fee23c65aefc7d2424d033c5c90f7fdcf1babb

                                  SHA256

                                  4a2c91608ac2cb48cdc2cac4fa1cfd6c3731ba4a292b388cee6e37e7a0943ab7

                                  SHA512

                                  cbc4a33c3aa20c72554b1264faefbf3ed1c37ca64cc7ca68de69cd41902cf6fbfdd4339af3c03ef8f21baa6b10538bceeb318ea55f845b03791f64c37d021d0b

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  7ec533fdccd05cfef9c14339abe4bd6c

                                  SHA1

                                  f58810c99ae9665b7dffe596f7f79ee6261926bb

                                  SHA256

                                  ea54ae9b90bbb16978366032999b96804d88c08081d33a49856acab0c484640d

                                  SHA512

                                  5e1d3927724f9dc9635adcbf73f974a2f2b6db8adb0c845a318f8457a140a19059e17730b1a3f7b4fd06314f719909ebbc6ac309cca1a709e7851c59799cc49e

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  09afadc392bc062dfb95e0b6d5954548

                                  SHA1

                                  b36c1930209bf8f172396726a1e73d9292648e54

                                  SHA256

                                  0dc9dd2ad69cc4a5b6734609ed3c66f7fc4b78fb355678844bd2d0189d8a8fdd

                                  SHA512

                                  19f9f3c1dfe501a74cfa778442cd3003798a1dcc7fc6760d68ca45b6a8f4ae45e5ba16efb00d609c770e7d14f4199eb8e59faa46c472660779a376821d8773ee

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  77347646dc7f3e1c6215570cf0709f19

                                  SHA1

                                  50856a59481765ae5dff4894c6d30b58cee66f1c

                                  SHA256

                                  2ee28b06a5bb4af90ae42093e139d057a86ecb70a697681e0a7831f8fc975a8a

                                  SHA512

                                  d77f0512838ca6c36a2471b0a30a251ddd2ab765774419a11e7ccfc856f2fa8b8574865b0769951955fe512b2189b14d163c7117400141f183824d85afd99178

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  7a8addbc6a5bbb48a38a174e57b4c21c

                                  SHA1

                                  5109bf1723d38197171f4f56bc81e14db9a39b3b

                                  SHA256

                                  52d0b5a15f8cbaa205bddfa4c570df618a9591d445f1c1b39c34d2a19b8b7a1a

                                  SHA512

                                  9fd5257d4a6dc80b79f8cf770f9322201b62495b0c1f89113f573f70dbb896d97bf1075585e7ac3bf79246c5b41989702b37ce345614f3617bc05b9ffcc72a39

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  14KB

                                  MD5

                                  977096505926c844e0205487a0c8f04d

                                  SHA1

                                  8633aa39f18d536f19affb14923fce8273ee1439

                                  SHA256

                                  fd3b794586c2efc5ac4124bb8a27acfc7ff92fbd4cb25e382a2224069423a6fd

                                  SHA512

                                  79170d50191ed4a18baece40f434cc8ba57f7213176328199baef2064316868ada1123880f0ec73c4e48d2daf759469fa5328568ae98f0d405932b5ba095fb3a

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  10KB

                                  MD5

                                  7bb04b52e395ce85f02be1f6bbb3d5e9

                                  SHA1

                                  321f87926cd7bbd4bed819260a46b263a1241466

                                  SHA256

                                  1826dd294efba44566eb712fbdeac7e6b928475ecd65b2e5986157c78b586e48

                                  SHA512

                                  18b94ac16456039afb433c347202d6e6dff11f121145d72070172b184c91da787027285806026ee7795a86a9e91cb6ec0df2a93c45fcde9a0b177c301f5d9008

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  9KB

                                  MD5

                                  4560ae28d498d1a6edc19dabacba4796

                                  SHA1

                                  4acc108d0e145733cfd2aa693030fe6df5cc93c0

                                  SHA256

                                  2d3e3ca066246b71ac5f5bead19802ac38450262c413811c1f7a405f873ae139

                                  SHA512

                                  2e803abce44828796998f527e31a894f24aacfc88b3146192d3cc5cacc75c06ea20985d2f4135db48e7547038f3793f7a9401a4f01c37fde40b246bb3daba3f2

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  14KB

                                  MD5

                                  fd0516c353a2c1f0ca7b146b7e827b28

                                  SHA1

                                  3fb5863d4e90c29ca23496fb2d65d28addcafd05

                                  SHA256

                                  0483adeb1c01d8418a57620b836d5633a6e43c0feed09dba2b00a0d5a8da3aa3

                                  SHA512

                                  fc2570ace6535c185dbcf4413b6907752b491bb1d2ad302c31924e9d9bdc1aa799f2b8d821d93ccd2e5654cc6639efdcd57f14c83aa7164fafbcbacee58a8d53

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\0060687c-7998-4f8a-989b-9c0402651399\index-dir\the-real-index

                                  Filesize

                                  72B

                                  MD5

                                  11bb8bb31c72abf29e9a7eeb1d263831

                                  SHA1

                                  51671dbcabd3e3f822f6314631c91aff1151e63b

                                  SHA256

                                  ce00a84ee9857a3ae01e7b22e3d4a46414ab6564a033d91ed71229b95965ae5c

                                  SHA512

                                  9aa3eccf0fc82e6560110a53ee50de7717a1d8e74c28a6dcebf1fcadce1a67c4008066e7732c66d01ac9b005af0c00a5e9381441905a0f7977dbb80eb85727bd

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\0060687c-7998-4f8a-989b-9c0402651399\index-dir\the-real-index~RFe581306.TMP

                                  Filesize

                                  48B

                                  MD5

                                  be6e94affd55265af1b8145c890f44e1

                                  SHA1

                                  157d097f898ce9adec45b4725d8b0f45da0683df

                                  SHA256

                                  cb288361b965534a7aa2418946ce3682aab81cbb56c7d94d194107dc54884f9a

                                  SHA512

                                  8b8ecfd820db5ab43ee1c8dcfd18bcb50e08f4b19496e18773ec48ea5df67a9e191db20b88a584d5f1f0da25ebfea12364db9243494d74e85988fb16e670f8ca

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\index.txt

                                  Filesize

                                  155B

                                  MD5

                                  94f0da91dc77a6b57b2adc7a247f5190

                                  SHA1

                                  87ae584d59ecb765558b692848151c68a2df3471

                                  SHA256

                                  bbba9c357ad7b5533937996696dd8184ab42eb6a6815e0e20ceb176531366f44

                                  SHA512

                                  8134f3a1e4ef238573c1c12c348aacd5d31ca4d239cfa29116ba5988e05fcc507a290f4fef6128592532699ee0fb6812ae2e72c8633e265349467464a6e0f1b1

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\index.txt~RFe581335.TMP

                                  Filesize

                                  161B

                                  MD5

                                  47ae5f393f33f8ed7375438ba0818c92

                                  SHA1

                                  2c850fdf14e0fcbb85dd30c068087a04dfa1eae1

                                  SHA256

                                  fe41d3716315a8ca8c1ed027032131fa881c01f7aa2e4c770f10d10113f1fc90

                                  SHA512

                                  639371ab0bac42bb9a62fc6b567b35531492847381e4c3ee445efe33b83ec0b936e1111db69e39d6c71726565049f315e46129af67874c7b61744baa00416fc0

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0

                                  Filesize

                                  34KB

                                  MD5

                                  a83b48951c3461c0b947940f3351ae6c

                                  SHA1

                                  032e764d1fdc6d6ef527899a1afcd4dab2828bb4

                                  SHA256

                                  d6b484beca51c74bfa0e7b0cf63289eb9e1087004526d1e48ffac9a1fe10c708

                                  SHA512

                                  d93d65f06a95b7d4ea7be95002cec785a9eca234718fc9af284f8bdfafc79c15e304d506f401e9ee740774f942e34514334a4faa9372d67c6d2b8dbeb0626707

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                  Filesize

                                  96B

                                  MD5

                                  20c58d8b2f45e9107f0a6fcf1b90d9aa

                                  SHA1

                                  3c2b9d8d3f59c93f352e4b06d880c04eb36c6561

                                  SHA256

                                  94e4092511afedf0c05aa8a8c950dbefd8c2270e70c63a13a8db9fb3016aae50

                                  SHA512

                                  d2a2f4575f9cc3dab9900b0b29ee94e8ffb01d53b376c219a05701e8f71d583d81801e1e504d7f5662488cb31b89da70e4ca29040f15e0aac6ea1250685c1ab3

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                  Filesize

                                  92KB

                                  MD5

                                  2e0929e2186124b6294e419bd05a8d1d

                                  SHA1

                                  85d50070400c88ae0b3253dbd3bc84e314dbb1b6

                                  SHA256

                                  29e3c9559f7c915c23454dee4433fa97cae57d984ee272945f009a68d7aa763e

                                  SHA512

                                  6324495184cf2d7bdaa6313e42a4b2bac585d188227a6a8620c34571618b45bbda4eec89938fc9cfebd5468a1fcba7a8be11282a0a88345d18223ec414610328

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                  Filesize

                                  92KB

                                  MD5

                                  5d67a69dec449c1522360321d2018e33

                                  SHA1

                                  5503b650a9f87235d1f88043c86a5b83423bb9a1

                                  SHA256

                                  6033276834cf2e5c2557adb8a8f7a82c1b90770bce002ae221d6bc201e091d57

                                  SHA512

                                  72c8130af8234acc82429fa3ef80d044820a0222faac290272eb120a551080d98d96f92318837c412ecd0f9dc9b715d45ef9ed330ed77d09dbb86b7575577c09

                                • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                  Filesize

                                  2B

                                  MD5

                                  f3b25701fe362ec84616a93a45ce9998

                                  SHA1

                                  d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                  SHA256

                                  b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                  SHA512

                                  98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84