Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25/07/2024, 13:09

General

  • Target

    MelonLoader.Installer.exe

  • Size

    721KB

  • MD5

    54dff09cc998adac8e2b325fd2714230

  • SHA1

    31592045226b7546cebc871b13941dce602dce3b

  • SHA256

    ad3015fcf72af7fa32386e2d584ddc00ba10fef82e84b4f57adafb6183177542

  • SHA512

    2e1c61e674144b96bf7bd76f260b532610f9745b8f653e9036e1c71fb6f61123ef57285503c3fc893783b89f8943558ca647e31c4fd53cbdb70de7f4da91f2f0

  • SSDEEP

    12288:LL2odKsoH3msuTmlOIq76xb35zdtKTKKpKKMp:lO5gEMWx35p

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 2 IoCs
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MelonLoader.Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\MelonLoader.Installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    PID:2924
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2888
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb2a6bcc40,0x7ffb2a6bcc4c,0x7ffb2a6bcc58
      2⤵
        PID:1912
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1812,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=1808 /prefetch:2
        2⤵
          PID:3396
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2056,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2108 /prefetch:3
          2⤵
            PID:2100
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2184,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2200 /prefetch:8
            2⤵
              PID:4712
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3096,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3220 /prefetch:1
              2⤵
                PID:1240
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3148,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3272 /prefetch:1
                2⤵
                  PID:3516
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4480,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3644 /prefetch:1
                  2⤵
                    PID:2308
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4768,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4788 /prefetch:8
                    2⤵
                      PID:3000
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4916,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4904 /prefetch:8
                      2⤵
                        PID:2112
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4964,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4848 /prefetch:1
                        2⤵
                          PID:2352
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=872,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3236 /prefetch:1
                          2⤵
                            PID:4080
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5028,i,4297802999635655474,9873521235997581269,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3416 /prefetch:8
                            2⤵
                            • Drops file in System32 directory
                            • Suspicious behavior: EnumeratesProcesses
                            PID:5112
                        • C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
                          1⤵
                            PID:3616
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:3128

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

                              Filesize

                              64KB

                              MD5

                              b5ad5caaaee00cb8cf445427975ae66c

                              SHA1

                              dcde6527290a326e048f9c3a85280d3fa71e1e22

                              SHA256

                              b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

                              SHA512

                              92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

                            • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                              Filesize

                              4B

                              MD5

                              f49655f856acb8884cc0ace29216f511

                              SHA1

                              cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

                              SHA256

                              7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

                              SHA512

                              599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

                            • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

                              Filesize

                              1008B

                              MD5

                              d222b77a61527f2c177b0869e7babc24

                              SHA1

                              3f23acb984307a4aeba41ebbb70439c97ad1f268

                              SHA256

                              80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

                              SHA512

                              d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                              Filesize

                              649B

                              MD5

                              953ccadd3a249c68a2ba39ba25591b3a

                              SHA1

                              202e22fb29f7db154f004e82a4db1480a4f63a35

                              SHA256

                              b83d5765f7439a48f7d4c5d16e59bed62907caddd87f2ef4307d6c1b92fa19a2

                              SHA512

                              eb47098c388aeb8fd1258e1352b8a7b00c63f01fbac9a6756a5f5faeac41b07f5bbf1a51e24b9cf122e42629ba7badb00437a1b9999a8b1222e0e3b3c2d4d345

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

                              Filesize

                              210KB

                              MD5

                              5ac828ee8e3812a5b225161caf6c61da

                              SHA1

                              86e65f22356c55c21147ce97903f5dbdf363649f

                              SHA256

                              b70465f707e42b41529b4e6d592f136d9eb307c39d040d147ad3c42842b723e7

                              SHA512

                              87472912277ae0201c2a41edc228720809b8a94599c54b06a9c509ff3b4a616fcdd10484b679fa0d436e472a8fc062f4b9cf7f4fa274dde6d10f77d378c06aa6

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

                              Filesize

                              70KB

                              MD5

                              69036f5d1056774842cab4d137d2bb03

                              SHA1

                              82a33cb82a6a265a913926f72519155b713df9cc

                              SHA256

                              4b051d05c929361b8567bb1aa64c417bec495f9f50e85e65899b4772d38e1de1

                              SHA512

                              5e73b31597069ebe12fb213e97f9c7d0858febf5820a602398118c0eb0351331a517fa0af65c5e0f50b7ffc853d007f95d755604b55a82ddfe7b852251eb2f3d

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

                              Filesize

                              397KB

                              MD5

                              62064e27f6de8b6cae685edc19cc311b

                              SHA1

                              b07b3082dee1b063f741455ad89a4a2cab3b4361

                              SHA256

                              2058fc8643e0781d7e909cd29646d613d2fee6437c721b53c92255cb5f79f7bc

                              SHA512

                              95e9076bb820a65b65ffae4f1c08317da997d211f8d2a1d4e08e7d22d1e354841a6d99478da23b2ac6223919b36fac66a3167a5dab34e891d597ecd8efb0c627

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c

                              Filesize

                              24KB

                              MD5

                              c594a826934b9505d591d0f7a7df80b7

                              SHA1

                              c04b8637e686f71f3fc46a29a86346ba9b04ae18

                              SHA256

                              e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610

                              SHA512

                              04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              216B

                              MD5

                              8020369225643c9e44a0f23f2f381b3a

                              SHA1

                              321b2e8f03400b6aefc4e8f03aa777f91b8be3a3

                              SHA256

                              9243301a59dc9d4549f91b3d60ba066287a09ddfd92a53b5f5a7a916abe2fed9

                              SHA512

                              9aa103017f20cb913583216f8d8d64e0cef111438c81f33bf37609664d4c2c38524b5ebfceb26f826fdc393f760046d686f8e7d00f18bc26a0da1f0ab7011cbb

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              792B

                              MD5

                              9629e28f4c7179c3326420ade2f60212

                              SHA1

                              4b8861a43ce7d9e4dd66609e7d7bfaa95f2ffca5

                              SHA256

                              1f56d6990c43d98621f46606a9edb24b94b27ff5360701d433c4d56e0604e080

                              SHA512

                              5926a68bb3bf3f112b469d0e49438881053e02594480dcd18a7e5516623bfd87cbb966e790adf2e69fac6a98748577acafed16e3b26e84cd8e3543bb70954dfc

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              2KB

                              MD5

                              e0a0de376e6815bc42d91fa595211693

                              SHA1

                              65c54a49097865d1dd2690a871aae457091d335e

                              SHA256

                              5e951375eb6d50c36ab8c9bede8dc9ec4ca84162be3104e127a42a2738139cb8

                              SHA512

                              15e3e4e1295bcbd46bb7fd46f64d0ff49daaec08db56d6977818be7ded7cfc6356f4cad4d33dbb39d8abefbf4284f6ed83c3c01153930a5774580f3a917d074a

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                              Filesize

                              2B

                              MD5

                              d751713988987e9331980363e24189ce

                              SHA1

                              97d170e1550eee4afc0af065b78cda302a97674c

                              SHA256

                              4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                              SHA512

                              b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              523B

                              MD5

                              d9649108d5645a89c6c572b00710cb49

                              SHA1

                              2c36b35e8efc58300bae073aeb182e543ec1addc

                              SHA256

                              69ff7c57bb82665c12cf204675c315d449cf918099275710e5098fcbf03ed6fe

                              SHA512

                              cee7bb86dbb07d66712d7474996fd88411adee2f955897a41863fb24956410d9e3723fb24d97b12095da3f1d9ac5df89a99eecfa7980ca3a5349f894fb31f7ba

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              7276c779831949b89187d3e8746e101a

                              SHA1

                              fa223c25d41826262ef8cd34a304d7587fb08d5e

                              SHA256

                              cb71f64f7a2ec51d2201a890d39f22e9b447777499490b8a9273a81af79d4278

                              SHA512

                              33997ebf6f512ae13182162e906eac1a201855de320eb585c4eb6d5ff9193dc948404869fa0d79bd76826361f6237cf98400a57b988bca303afba9bd56669006

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              356B

                              MD5

                              cb80a976c7aa29adb3038c56c3776155

                              SHA1

                              16b3cda1d72f7e62d45208d26a86d5dabd4facce

                              SHA256

                              e1cf1a58dbf848659e0d1b718add3a4964714c943af408478b8c4e900bad8283

                              SHA512

                              e2292ee471e85c12e34833d4b1706cff4df405cf421535c175653bd1a887939f42a4101f46a27ced9b6b2f3b07d6c919c5e33671e4e82b3bcc81fbcacae6b24e

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              523B

                              MD5

                              762500bfb727d559106230b617d5f1f8

                              SHA1

                              ea7e6c437fa90954d99c529d88fea9cd299bc08e

                              SHA256

                              06f01a0eb20307765504251eeafd6bc0a5bf72f059c99de6286e4771da2de70a

                              SHA512

                              da07e9507170a52662bf5f821ee2fbcef62b335f8603b287b534781563f5feb566f5824f576db26a5f93cea1f18c407aa3df7a74cb42bf1c3985a19cb829bcca

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              356B

                              MD5

                              f19a7093d48cdc7b166e57ab1f8a621f

                              SHA1

                              95dcfb173feb9955ff5705c047f20e037e3ab9c7

                              SHA256

                              cf55c2200392e737ed1fd6e8db951e0d89b9542034388fd542d4182b080f0972

                              SHA512

                              ef90271149ab2f49c2987f45b937cf54f037cd48cef452a206f7decd62d450a00597e11697096c29dc62abe1ccd5276f91cef80e3b7156ec4dba4f03ef1f0497

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              356B

                              MD5

                              7c5b7961a22f513954d8f9a0724b6ab9

                              SHA1

                              c3c29b620e916156645d18958c4e280e37bdb77c

                              SHA256

                              a3db3a232af4b1ace34ed989fdadd258bed37818f18c16bfb8a709c227a6270d

                              SHA512

                              4e246c758a4e5ddff931560138a96cb472170755e9e8581caee74df52035b1b5bc08c052370df24df736ced764e04139ae96db99e7ac94214fa3258ef230410f

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              6d8ca314e49c5a2cbe4976acbce76009

                              SHA1

                              336004c7ee6ca304955753b69695d59ea3bdcf18

                              SHA256

                              51555d1523aee2d594f2ddc4cd4a7b7e999c910da763023fd825acea2805c223

                              SHA512

                              382370d09162b5feb400982064a856f97aa9b16c1933e0ea229a6967d2f7e9122a337ac305ac60d525d26c2895976724d531c77e635bc86662ab043341839436

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              02f6d4fcce7eaacc412362acc5b04b5c

                              SHA1

                              663961ee40c22d1202875a4e1c8710f252d7746d

                              SHA256

                              34bdb6cc1f1bde6014004889aa32a1e834631778a0d7564712d0fcaa3dadd647

                              SHA512

                              8d6a592aaa34226c8b314957254acdcb425d768f46d3555ec7be99b2c24420c03a5c2046e8874755a6c7143fb5dc83295ddffabb2bc2c172f67fe43572d67c9e

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              ca2c7c1989129748d47ee8e3cfb31f65

                              SHA1

                              feaa882d176bd30d5c54b89219414ebda9c3bb05

                              SHA256

                              0332264ee90427388bb980d8f2c673850acd71eddcaf10c0f431aa801e3d36a2

                              SHA512

                              d341bf59b12ab5083f70a8647e75b38b408a87b9a4b6af37bced2b36c5fbc75edb3d72d3795ae1f69e4797b44cf6c9fcbfc0a7d9f22a4c5f0a7d79ef92554037

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              e4ab54d3e74e914389a9b03305be34a0

                              SHA1

                              daa746bc43cb3718a499db996d9db3def0738f90

                              SHA256

                              4ef0897fc28b8c7f516b2110e9c75a703f09784463c1a64db7b8ed5d7234b373

                              SHA512

                              f1cd3cb7475b65693b22f0e6e315f680d16fb2047d388836c1a11dcc7df72a7d418100fe0ec144f160b8a87939bc74922053efe0ec16dc06532354e5e77579ae

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              8KB

                              MD5

                              0dea40401a3ee1a1c60121ea40e17d35

                              SHA1

                              56fd300f8e070c64f42e3879b385030dcef35b91

                              SHA256

                              7a67862b2b19f0bd11e423f559ac84b4ae8fd0ee2b7541ad174247386b954048

                              SHA512

                              d4b0deb3d4b9a0d68fa4d22fcfdbb0ceb2d7c85e63ac2913c311f8ce3a6674a7050c049b1b7e42de9404285f3767ebb34896c72e6379c800d6dda0a8b579f241

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              5f97d3e225726f29d62351ad1793163d

                              SHA1

                              ea50a882eeed455f33e5eecb2016ecb8d77643f7

                              SHA256

                              7b5350ae78e81fb58adeff871fca85ae1b32ea97263f597fcb6f8ee253eec054

                              SHA512

                              7967ec694ec81c4508ec6602c01788e1f9cd2a826e5f986df3cb12a46cf52307669a33e428e5e95b93a777d9f6755cd9d27290f85e680f3cd58c9af3bdd1755e

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              eeda9c6eeaaed09ae8f92454a173ad06

                              SHA1

                              d42a078438fbabd2de497849b0e698b679dc0d4b

                              SHA256

                              de1cb0cf390bf5dd1c3d46d99fc71e7c10ee660b977bfd8e09923061f9c09e2f

                              SHA512

                              01dde1595c9efa2575190f0eb6b13e02a1bb0b0879d7780c4d501f6d71436bed17a61272bd603163af9bdd86e3bb63f5105cf7cd4d1dd7e5199167a3e71f7767

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              09a40839a1216ba19a93385006ac66f5

                              SHA1

                              54874d0f8c8e240a831b851033740a8df0108bcf

                              SHA256

                              13339bc69dc99297231242e4aea912e5ef3856f6917c098b8cee3a327f56824a

                              SHA512

                              a196817155ad64e52f0e5ad4ad60d8475743dfe2986af3ca58f1b1d3817f553faeb6d5e1c8a38033966233b141a5fb4ab0ef692334f2b00e94632736d4fd4775

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              a3f19b9638f818baa510da851a75b6e6

                              SHA1

                              05f9104c453674b027caf1096d298617d25c4710

                              SHA256

                              9d330a7cb26e050aa0360990ea4f00094ce79302d4eaa009bcb9d3259095d6d6

                              SHA512

                              49c398458c73bd3881ea042716272da3283ee8647b9a5b414c20881fcd3e04e6100b7f62715f808104c59d8d6dcd808b364f28c03d7dcb3096fa02be2195aa94

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

                              Filesize

                              15KB

                              MD5

                              2f32327c9a5f7ee1054c03f90246fb34

                              SHA1

                              b30f9b49dc173a20dc466ad75bd888742471ce83

                              SHA256

                              73a43316f4b828dc95ba4ef405f0da3c943eca596d6a77fc9a016ba1f9163621

                              SHA512

                              24cafb2f6e311ef46b0888af48081189b1dd4db2418e1a1269c0a0ebce1e66dc1c069f82f9c1c992707f9be869835947db4145a35af871a02f228897e881cb28

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              188KB

                              MD5

                              f36ab2e80efc4fcd9891c0d97157fe43

                              SHA1

                              7da8f840a4ef5f19362d2d9b4d8c52e048c25e5c

                              SHA256

                              e3a5d5c84bb7447f8a91f05e873518f54d7c69e2cfdd095ec4adabbf23655bd9

                              SHA512

                              f8809546e7603202f94bdac8c737f07d26a1dd64d58a4efb1c40349b5fe5a984c43c42fff487801317a55f1bc29c0655e2c951fae4b5c83aa9d1d38d5e7a6f7a

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              188KB

                              MD5

                              cf0551fece113c4a2704de9e3211c42b

                              SHA1

                              435aea525bf1a808aec78fdc7da54788b845a7d7

                              SHA256

                              4e6ecea844c9643c8452ed61de9efb57880c66f65c000909434f717836ed1b78

                              SHA512

                              40927801d2f4a0b5c45db63633e323dbb14aabfb04f13e4381931c50288acb8737e8ed96ba7adb67a5f16bf884c3503e6a165719946f4a752979617880711d59

                            • memory/2924-7-0x00000000750A0000-0x0000000075851000-memory.dmp

                              Filesize

                              7.7MB

                            • memory/2924-8-0x00000000082C0000-0x000000000836A000-memory.dmp

                              Filesize

                              680KB

                            • memory/2924-12-0x00000000750A0000-0x0000000075851000-memory.dmp

                              Filesize

                              7.7MB

                            • memory/2924-6-0x0000000005740000-0x000000000574A000-memory.dmp

                              Filesize

                              40KB

                            • memory/2924-5-0x0000000005590000-0x0000000005622000-memory.dmp

                              Filesize

                              584KB

                            • memory/2924-4-0x0000000005B40000-0x00000000060E6000-memory.dmp

                              Filesize

                              5.6MB

                            • memory/2924-3-0x00000000750A0000-0x0000000075851000-memory.dmp

                              Filesize

                              7.7MB

                            • memory/2924-2-0x0000000005430000-0x000000000545C000-memory.dmp

                              Filesize

                              176KB

                            • memory/2924-1-0x0000000000950000-0x0000000000A0A000-memory.dmp

                              Filesize

                              744KB

                            • memory/2924-0-0x00000000750AE000-0x00000000750AF000-memory.dmp

                              Filesize

                              4KB