Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

19/07/2024, 20:44

240719-zjapvayenr 5

19/07/2024, 20:13

240719-yzkpba1eme 1

Analysis

  • max time kernel
    600s
  • max time network
    585s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    19/07/2024, 20:44

General

  • Target

    https://forms.office.com/r/9f9pDq7vrh

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 2 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://forms.office.com/r/9f9pDq7vrh
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3364
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbe286cc40,0x7ffbe286cc4c,0x7ffbe286cc58
      2⤵
        PID:3420
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1760,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=1756 /prefetch:2
        2⤵
          PID:1104
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1664,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2104 /prefetch:3
          2⤵
            PID:2064
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2176,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2344 /prefetch:8
            2⤵
              PID:2656
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3092,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3156 /prefetch:1
              2⤵
                PID:2808
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3148,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3356 /prefetch:1
                2⤵
                  PID:2112
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3224,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4848 /prefetch:8
                  2⤵
                    PID:4508
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4844,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4572 /prefetch:1
                    2⤵
                      PID:2468
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4448,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4328 /prefetch:1
                      2⤵
                        PID:1188
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5080,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4468 /prefetch:1
                        2⤵
                          PID:3148
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5232,i,6523318517750459173,16183629229796594969,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4544 /prefetch:8
                          2⤵
                          • Drops file in System32 directory
                          • Suspicious behavior: EnumeratesProcesses
                          PID:1808
                      • C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
                        "C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
                        1⤵
                          PID:3128
                        • C:\Windows\system32\svchost.exe
                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                          1⤵
                            PID:4800

                          Network

                          MITRE ATT&CK Enterprise v15

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

                            Filesize

                            64KB

                            MD5

                            b5ad5caaaee00cb8cf445427975ae66c

                            SHA1

                            dcde6527290a326e048f9c3a85280d3fa71e1e22

                            SHA256

                            b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

                            SHA512

                            92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                            Filesize

                            4B

                            MD5

                            f49655f856acb8884cc0ace29216f511

                            SHA1

                            cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

                            SHA256

                            7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

                            SHA512

                            599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

                            Filesize

                            1008B

                            MD5

                            d222b77a61527f2c177b0869e7babc24

                            SHA1

                            3f23acb984307a4aeba41ebbb70439c97ad1f268

                            SHA256

                            80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

                            SHA512

                            d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                            Filesize

                            649B

                            MD5

                            892ffe580ee351ded3689260a95b759e

                            SHA1

                            d0b8eab8d952b72f9a3d9cb1513e15004d288e13

                            SHA256

                            afb9a1e323ba3ccaf2f1c17104441b72cd29fc06565fbb327dc2d62d32bcba83

                            SHA512

                            486ac0971107f7f80ef1355bb2ce6066222fea87769d4354c62ae00fd390973c0c8c722ab468d41723b09bbca189069b1e437bc299d24d3cdf96b4d2c06d1a49

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            576B

                            MD5

                            671ad4ef1b52c21c0635851f6b11c869

                            SHA1

                            8c4760f92006a6f1b47891b013e309442b0354cf

                            SHA256

                            9a63ce2df731f01c455b8e37bfc74046c08040f631bae2dab76a44bd13892dd7

                            SHA512

                            7721d34ac5554d7f0b42836164c65125a1447676a46cf295b8eac15a8a94bcb76747bfc79a958d40c778e4b375cd8b30c0bcd67fac5cde9f81f848ae9cf0c7e7

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            312B

                            MD5

                            eac518aa5878e1e3741ad411e6c0e8b1

                            SHA1

                            db8b564945ceb528d97a08cf23d5427def791371

                            SHA256

                            37938f8c196591c39b173e7ba36d43fbbca4cae3e86fd5f49f058a16799abfb3

                            SHA512

                            a221df2d74d546e24a96c50c29ebb47bb7037411dbebbfd6cbbc9fd93ddb89f32b78f39a034b82c62675b197c99d3f852546da7697e45467eff669c4aba7c79c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\55633427-075f-47e9-adca-c247f0e411a0.tmp

                            Filesize

                            5KB

                            MD5

                            ef86cba199025b0902b45f8bbcbc82c5

                            SHA1

                            1a29021b3faaf99c11df1a3dd29c6533b19ac2ae

                            SHA256

                            f0e47d925fdcd5c8686d5a32f1e680be4ea02c6ccd644f3e83cf959f8d092d41

                            SHA512

                            6eff7878b83ee0cf7426ac435326eda7dd83459352aad9a3edcc3b9e814dcf5cb0cee4361fdfb790221a7480698304e3d614c66ef38cc2aa7d8e654b30127cd6

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            5KB

                            MD5

                            42f82d89fb39bb5b301272a8743f9e0e

                            SHA1

                            6a48b9b9d66bbd8ba45ab2bbde4a5111e9ac137b

                            SHA256

                            43333c18da2272155379d99d7f70bbc058e2c70c23f96393e9779aba5ecb9b0b

                            SHA512

                            d81559aa253ed86cb76f796b4cbfdeefed0e62cdb46ad8fb0a858e676136820221e71b64666c27936734f792558af0394fb1bc1987c05485ee8fe0a3181b69c4

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                            Filesize

                            2B

                            MD5

                            d751713988987e9331980363e24189ce

                            SHA1

                            97d170e1550eee4afc0af065b78cda302a97674c

                            SHA256

                            4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                            SHA512

                            b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            1KB

                            MD5

                            1eeef936ca18dd1d796824b89d3da10b

                            SHA1

                            0c61b0bab416c8f5faa881ec1b2e2e7956997187

                            SHA256

                            66b90e6774357fc9a8129ede33d5b9b572259adecfa6539c81e98276715b1cf1

                            SHA512

                            35a4ef90716dfc7e64989de81be8490ef488fe37162adec35d506fabe0faec1a0e7310dba234cae9386692c87118d4bf1382f48cc40c93e9907dc32e0e1308a9

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            1KB

                            MD5

                            05122e727e99fb01217d288e60ef0c80

                            SHA1

                            a94022022d5e13386e569c305db8f99b94aaedcc

                            SHA256

                            cc073911f787a20f4ace7bd0780c6135a77d82a715dfc8faa5c308bd78e3a123

                            SHA512

                            d2fc9c245e5026ebf716721818642f68f3f9cbe35b71ff5d60b981a96904db9e9b6f93ca53cda0a95717aecb0a58e40a412af6407bb70f4591f6a84c2e166105

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            858B

                            MD5

                            02451b4c514d808f7fa8366cfd567571

                            SHA1

                            1b51562ea90486f33d36c51cea2a6a703afd9302

                            SHA256

                            e1360ef43421487a38bfa6c035eceaf7048ba11c22c17a05ef92880d39071c85

                            SHA512

                            a28d0bb670fcfdaeb66f5383fa087f2b86c444db3769ebb00f3971868d47629900bf43a95748fd85a8957f0ea8b0e2669af424c9569a7b6c34e175362e646a68

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            238c71b0ac26fb4a6a1cbad78b091da4

                            SHA1

                            16f2e41930d2e8ddf4435dadec9a45411a85a7e0

                            SHA256

                            1be18f006c44c981957c2fe857cbea704eea84a194244b7dae1a3fa4e4d6bada

                            SHA512

                            c67a0f79759b3e707f5a42551b82c4a7ce260e205b971700eae0c27ebf3b054f9192e6bc723307d0c43bd7e1dc60a8b63aefbba6a34fb4307d5f53e9a5bd36a3

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            416f7a705474f8ee80a2bdb786d164ba

                            SHA1

                            faeb8d5b942892a9b1ffbf11890f9f10b6a190ee

                            SHA256

                            5e34c0bec4669039484058b58ed388415e1cfbc62b74b74d3d4aca790d87d4fd

                            SHA512

                            1c9bf44f39f2ca1b6ae19058a9fed7f4e639224d5d7b1a721aa5e1b1080d77b10d251fa3ecc24311440888426f8305bedfa6b210b9c648ed6398bc7f077e8b00

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            f313e209129b2b535af905f0d74821ae

                            SHA1

                            f8da54338ad6da10d7a2cc554296eda4942bbe31

                            SHA256

                            a804250ab569118a9c6d35c9fa2a610a5e0e28329cc4299e5409e25302879ee0

                            SHA512

                            542d012350c82efa7a851dee7f638bb44604f909529b2a27274d484b197ee181b77f8e3cb7249dff0e4ce0df990ac772a009658842b3cc7807222a323d7a42ba

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            b7d909569cc0d00fea0a1ac64cbd3e75

                            SHA1

                            23a6ae256caa135cc25fe5e63297d33169ed8570

                            SHA256

                            48ab584fa5e5e2f014be4083e0aa1e284e047a6af85f232afa7ba48d826793b8

                            SHA512

                            d7d70290ed6d47e31aab9c2a3f5109401d90c7a56e4f91c2a7c3f0dded0f1d75d8d8cfa9064df53076b7f35e4dcb318ec13d443981ad113f353602eb0d834f0a

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            3871949fb80d4674117af1ee49e0e96a

                            SHA1

                            4fc57989a855b10f28f89db6efaf7b4ea0f6c5d1

                            SHA256

                            7b522e760ed324cd17483d5416be96fcccbef1e419ee66572abaa482e396a046

                            SHA512

                            604eb324276c529f331818f9189f5ded63b15fa1b910c34fe8b3b66c62dc21fca294c2929217999d4a8070680b65890be7f116d2bbd5bbc147df1fcc45ae4455

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            16151ce1783e9b411ed1b4d38e984751

                            SHA1

                            7f817bb30431342905c3edef85bec9c6607a7693

                            SHA256

                            93bae777fc751ffe05956a1e9e88ac2a296af478537d8220044fa94f6e61efeb

                            SHA512

                            c88217eb3f5e05cf14eb6309c486d80faf646106dda4ff563f02055d557fa5460b1ff446f3c6c6b0a159104456f3961c0167d8e8420fb2105a9fb277c5931a2f

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            5180a4b3aa6f96e0f9b712cc436dbccb

                            SHA1

                            0c79f97f342338327830a9cb064b1835103492b4

                            SHA256

                            ed255820ece949d0f577c5ed786767e4b1af49b0f76ebd178c07e62591522534

                            SHA512

                            a711e0e16cf53c314f7994b454a7ea7b37fa17e1855e29cf91954c14beae80bbc655c93cc796f106f92516f39b64b3f5bbf880813c8d192211556284f244cd9f

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            d1855c7b9cc4c22eff553cdcc0bd63c0

                            SHA1

                            5363731c27fc9b105240ed226f4de4d9f1a1859e

                            SHA256

                            179743d5bec37baee90038f9c5cb9439f1309cfc52b5d8539e5fa6e05b9b0988

                            SHA512

                            11b013b08e3e9d4d2985d3f21be5e9670dab46024ab33261757ab7b69e3626a87c9ccc47d4aafb5bd36edff1be9d5bbd7218ed5ac92aeccd9c350bf57cd9e4d4

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            b8abe6d8424013d69f899babfecee16a

                            SHA1

                            be854786fe23538be1f949ddb363f09b7420b975

                            SHA256

                            84f11558c1efa4fd54b6900ac3a09396b9583485e3f1f5c01d1b9b36db5a3242

                            SHA512

                            228f85cd09079e21b137ce2b4345b4d86c3a2be6cc683d7edd653a7d256376a61421491def430f3144226dd6756794ba66dfc9afb5be5451dc77d0b8a12fbc36

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            821d9e25793d6110f992d417e9975679

                            SHA1

                            878aeec312d1470f044a5adfc5dfcc6078ae06fb

                            SHA256

                            8903b3cc44883db31c59e8f138e6708b772b52f979bcd1c1fc158c2102f89b8b

                            SHA512

                            d6f863da98053bcaf8354bbed819a42b399ccd36ce983c52f87b3e481540f0f3b4cd66366751db3dcb9d8051c736ba37b9efc70fc385d04f2235e857f2a12af1

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            e5f5492eea1f48834542538670239a4a

                            SHA1

                            bea5f126f27ad117d4b6729f558a15607bc6320a

                            SHA256

                            06ff0b59bc8a952f1ecb23ffa65d6f4fe80d8f4d9dd142361bd39ca73185ef19

                            SHA512

                            babe286e1593d85645d752088bbaa09ca4a84ffbbf5d8a5a08057a26b1361e280f3328cd6338354d5fa477a318bba7a2887e46ddcc65f773dd8fa5d953f30103

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            43d5c961aa19fb4d41b4a0de7d041764

                            SHA1

                            c19c38bb8356ac73dcfd7edcf2dc8686c339fc43

                            SHA256

                            d2671f8a382097b9bb8cb83b4812f34d0688aacdb04ccbfd630e2f678c67f208

                            SHA512

                            32937f61333a1a539a8adde78c02fda29bd55a62b606ade540c04e9d27eaf2e0d03d14b79348cbfbff49abafb76625b20a84ecbef0214baad495b4c4028d51d9

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            a31bbabff409e08ee9162589a0de0d62

                            SHA1

                            30fab497de9a390ad22621fc2910f5a235a5d2ef

                            SHA256

                            0426022a07d4f62c8ade75c535e77b12ad805de46ccb22590cd09b9951063388

                            SHA512

                            3a3b81f0e4387a20a96612e1c16b219fb83245e72393c3e26de3c7819a044e88801ea7b22d1d1cb418d713a25b2913b009049f1ca7047164ba582960866de7fb

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            0d3d127b6c27c8a20b413803daa5ea8c

                            SHA1

                            eaaf865b30774ef8ffd3e84eb709db1b3ab14836

                            SHA256

                            3f1cedb24f70470c4548c3f24b0df61812bbdc616978ada42178f44cd5df580b

                            SHA512

                            2c761845c04df96c1f6ea0a763e11ea18ad79746d6095371f3e3789da8425647906835b541b62bec20905e12ccdfbce15de5c7763b986dbadb8acd5204345ab4

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            9f5f02cdf4c4aa7b39285b6a972c7d1e

                            SHA1

                            6e6d25d9567a7d981d669781774c68cfc874b94d

                            SHA256

                            545719e5e413f7bb66d882fdb7f2ca4ff1eb19b58d523af7cb5e083ec54ba4e0

                            SHA512

                            19d015f4d622db89e2351d6e9e5d52ea7bbd8a53d9a398f5acca4ec7fe470925c3657f13c5074139d146e786a725949435023a0f894d07dd1ee1f11784c88c74

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            5deca4c6283ec51f69e4805351473c3a

                            SHA1

                            3bf6f89f84908bfe34654dd259846e47ad66181b

                            SHA256

                            3f25df46887558c4385e7b0db0495cbf0f354dc982552b040c5a74056153dabb

                            SHA512

                            3d8449971824b3f693fb4ade12478a6d240fb8da72ceba15b22dcdd1cdedce0bbb69bf8fcf34c35b48ec2b7e5c046521223ce78dd63f3911df199c4a9c39be51

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            5d8566ff16edbab862ddfd98c84439fd

                            SHA1

                            1e7bf89958a3940b814efcf58547dc5aabc615fc

                            SHA256

                            63357af8e9114ac9337ffb6df36c303bc640dcdd3e958c0d02695b8bf8bd8f86

                            SHA512

                            5fc5849d884fb1d7a1308c3fb284682f7de2de22f33ee20e450d461c3139378fe9be9f2a0f5e9280fc6bfe837555d49e99335c31e6079bfc7c4d209468d6d895

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            96557fc4886e57ae98a71fc9f0842e0d

                            SHA1

                            9d782277a28f2b6ea4638399cb9a8aa254a21f51

                            SHA256

                            a24afb9344efcfadc8476e88fa6bba18b2ffab73c1409032c7d046623d31fe51

                            SHA512

                            680be410fd9a0dae04ff9c491f0a1396f496235b43e45ba20a8e32b7cd9b3f1b325a24f5894997f0aaac0aa8ac8a8ed45ff4c2c8d0b569a8755bc3a23799f390

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            d212b47a4a829da2023718b3e2b59c5a

                            SHA1

                            3d11d84c0f7501bd49be13941dc08182a121413d

                            SHA256

                            50407df6eb80e03286f86898a4df5432a99234e2f3b33ed71d55e99cc1d727db

                            SHA512

                            00b23d22d9273b2c1be95d2fe58c61a0c23f74fa26dc1c2de36518b3d01ff94334f3a7bdebd5883a1139a5238d8f65f02359adcec13ab9634535b98fd8fe3688

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            6e373cb80c2b8011b2255907ce3129fe

                            SHA1

                            79d8583b0602ea69e60e4f40e5de0542a0359edd

                            SHA256

                            9fd99743c89b756b35229685108c16f1d354cc48b31cd5716be154040bbd9afd

                            SHA512

                            73d8ac1fe9d590551cc4be3e610171ccb8a94af5ae38e23ec90cabd5912f5b57bf5eb32aa5e323fe4d7c37c66cd0e92e1499c7da3f87cf9ca8630adfa73e2f2c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            553ae5bb69c76248f37ebf0fad9d0e25

                            SHA1

                            ffead6335057f4a3c274d1b6287f6069a9bcdafe

                            SHA256

                            795ab38807f034be0cb67f71c6b0529d60318867a358ac50ac84ca399f46eebc

                            SHA512

                            1ecd3166a57267b1f22fe657a9c3eda7997a6e5791c9a78480b503d2caf00997578515a626b2518b93ea06f4b86408cd12fa6e5fd83f93f43a837013cbb19926

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\c67a00d9d1fe43239f2bf49bebc287eb867542bc\97699e9d-a89b-4372-b302-dd3652ca1f1e\index-dir\the-real-index

                            Filesize

                            72B

                            MD5

                            61f3653e1e8b679a966c167510855bac

                            SHA1

                            c11157d87762169a82e880dbf62c5f710c6494d2

                            SHA256

                            4bc2c951cf2318261c38c10f698da33424e9c71cd43fd54d30004851d8e97a54

                            SHA512

                            3cc30950f9059b588320e24aa6f94241dab1907c006cb92545cb0c7d31dbdc2e161292d45206e7b479a0a226983615dfb71fc7d7573fb612e15be3a9014c6ab9

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\c67a00d9d1fe43239f2bf49bebc287eb867542bc\97699e9d-a89b-4372-b302-dd3652ca1f1e\index-dir\the-real-index~RFe5824b9.TMP

                            Filesize

                            48B

                            MD5

                            81e1614a115976867dcdb4279d1fcf5f

                            SHA1

                            f513a9bee583948316e498238cecd0e700e1f097

                            SHA256

                            f4b03eae40ef50b199573b5dda6e5f5e7a4f7fb3bff67dd36973bc662c574006

                            SHA512

                            79b91f38fc9a0d08fd2d71e22ae34ebf9cab37cf39c1945879104f16aa873da9746c097b04d2bd13957623c4c626a57ae24f64e6919a2644f90594dc8b3a79b4

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\c67a00d9d1fe43239f2bf49bebc287eb867542bc\index.txt

                            Filesize

                            117B

                            MD5

                            39f88d316d48750b18e5828c15f9d0d8

                            SHA1

                            1bb10cc53524d619c2652c65c83a9bf7f9b8fbfb

                            SHA256

                            db0e5c260776de8baf3fa9acdcfcef826b7db8c9d996e0e37bfb604d0f799b50

                            SHA512

                            dd93d178d27cfe6501f5157fb83ce00aa029fbf1c091911f0101b875f28e15f857c30b34139bb84701c686f4541e84b63ddf79f3d41647f2990c950ba2cde6d9

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\c67a00d9d1fe43239f2bf49bebc287eb867542bc\index.txt~RFe5824e8.TMP

                            Filesize

                            123B

                            MD5

                            27e864a29c3bd3c4408f1c63a2304a4c

                            SHA1

                            de3956f6adcc153926bfa44f6ce040b610025eed

                            SHA256

                            2a5d0c38a63d9285d2298edc3c787382dde87bf95599e27bcf00e8ff0e91c180

                            SHA512

                            4736e54ceb77855a5edb3c787c0a11078503d6aed01dcae98fc08784d6c045c22ffce5ef1d7a3ac446040b66507d385ddd3bd9ee8da37d42ac152bc83bbebb66

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                            Filesize

                            96B

                            MD5

                            ff07d3e6c965993f3559f039a366fd8d

                            SHA1

                            4b5bd420fc9b66ac9bec62dca07cdd00191d6904

                            SHA256

                            dde06911d986c297783162de3d090d4769ca67dcb2685401d3ed21e9feeedd93

                            SHA512

                            f1baafb72cfc1404872c66bafce6f37ef1b08b4edff263fecf0fc59d7de966193076f6825bcdf48e8ffb848ac789884ab0420ef8934347c61f59aa52d275b4aa

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            92KB

                            MD5

                            98ba9a542f7bbdac9833f375a64dbf0f

                            SHA1

                            ffca0167fd203a33e8fb6553c0ec748ecd7a218c

                            SHA256

                            d9bad3f7c72acecbd616c3a7befd8083f695af66b307c98df1f0fbe2515a14a2

                            SHA512

                            49397edd3b83a027e9ebd35bec92173c1412175057896e4c7ce97f5ed67ea1a1ae3580f19cb4b5bc79907545f7a64432628d21cf59f46d1758556d654c3bc4f0

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            92KB

                            MD5

                            0e12f6557e36b1b0ffe9f6164b2fe726

                            SHA1

                            98edb51682bf80e547fb5f7f251c2510746c672c

                            SHA256

                            2ddbf7bc4d1018bc3952e4807be51e80e9bc4747ac27c625f7bd9309f8216317

                            SHA512

                            78fa00af419a0e448d4fc7047b4982d34c9047898b2b68928a49624500559eaddd3361139a8998a6dd96f9688394f7154e6f157ee19e4e053c0f9dcd8a6840ec