Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

30/07/2024, 10:46

240730-mvc8wsxbnr 6

30/07/2024, 10:41

240730-mrjw9s1gkf 10

30/07/2024, 10:36

240730-mnmtraxarm 6

Analysis

  • max time kernel
    250s
  • max time network
    250s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    30/07/2024, 10:36

General

  • Target

    https://drive.google.com/file/d/1fwJdsnnK8CE52uB6ttf5BOyA6_zlBL57/view?usp=drive_link

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in System32 directory 2 IoCs
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • NTFS ADS 1 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 37 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 14 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://drive.google.com/file/d/1fwJdsnnK8CE52uB6ttf5BOyA6_zlBL57/view?usp=drive_link
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4904
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffd26acc40,0x7fffd26acc4c,0x7fffd26acc58
      2⤵
        PID:2412
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1724,i,12598156656155252573,16307616119534801998,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=1716 /prefetch:2
        2⤵
          PID:2968
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2064,i,12598156656155252573,16307616119534801998,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2108 /prefetch:3
          2⤵
            PID:3368
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2176,i,12598156656155252573,16307616119534801998,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2376 /prefetch:8
            2⤵
              PID:3804
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3076,i,12598156656155252573,16307616119534801998,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3120 /prefetch:1
              2⤵
                PID:3436
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3084,i,12598156656155252573,16307616119534801998,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3252 /prefetch:1
                2⤵
                  PID:3936
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4380,i,12598156656155252573,16307616119534801998,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4088 /prefetch:1
                  2⤵
                    PID:4460
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4904,i,12598156656155252573,16307616119534801998,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4916 /prefetch:8
                    2⤵
                      PID:1380
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5008,i,12598156656155252573,16307616119534801998,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=5112 /prefetch:8
                      2⤵
                      • NTFS ADS
                      PID:5064
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5320,i,12598156656155252573,16307616119534801998,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4916 /prefetch:8
                      2⤵
                      • Drops file in System32 directory
                      • Suspicious behavior: EnumeratesProcesses
                      PID:3156
                  • C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
                    1⤵
                      PID:2808
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                      1⤵
                        PID:4820
                      • C:\Windows\System32\rundll32.exe
                        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                        1⤵
                          PID:4580
                        • C:\Program Files\7-Zip\7zG.exe
                          "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\install\" -spe -an -ai#7zMap3572:76:7zEvent1405
                          1⤵
                          • Suspicious use of FindShellTrayWindow
                          PID:1140
                        • C:\Windows\system32\NOTEPAD.EXE
                          "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\install\Tutorial.txt
                          1⤵
                          • Opens file in notepad (likely ransom note)
                          PID:2308
                        • C:\Windows\system32\OpenWith.exe
                          C:\Windows\system32\OpenWith.exe -Embedding
                          1⤵
                          • Modifies registry class
                          • Suspicious use of SetWindowsHookEx
                          PID:556
                        • C:\Program Files\7-Zip\7zFM.exe
                          "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\install.rar"
                          1⤵
                          • Suspicious behavior: GetForegroundWindowSpam
                          • Suspicious use of FindShellTrayWindow
                          PID:3892
                        • C:\Windows\system32\svchost.exe
                          C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                          1⤵
                            PID:3668
                          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
                            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
                            1⤵
                            • Modifies registry class
                            • Suspicious use of SetWindowsHookEx
                            PID:4428

                          Network

                          MITRE ATT&CK Enterprise v15

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

                            Filesize

                            64KB

                            MD5

                            b5ad5caaaee00cb8cf445427975ae66c

                            SHA1

                            dcde6527290a326e048f9c3a85280d3fa71e1e22

                            SHA256

                            b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

                            SHA512

                            92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                            Filesize

                            4B

                            MD5

                            f49655f856acb8884cc0ace29216f511

                            SHA1

                            cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

                            SHA256

                            7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

                            SHA512

                            599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

                            Filesize

                            1008B

                            MD5

                            d222b77a61527f2c177b0869e7babc24

                            SHA1

                            3f23acb984307a4aeba41ebbb70439c97ad1f268

                            SHA256

                            80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

                            SHA512

                            d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6aa4ee84-25da-4b69-b0e8-2e56232fd638.tmp

                            Filesize

                            92KB

                            MD5

                            a769db57e6923c525aac34d3b1701618

                            SHA1

                            04f788bedee2051d62f0af0283707f490b6be111

                            SHA256

                            7487dd004578ad41f6df59dd262274692cb8b81aa74a63acb719bb7f28babd49

                            SHA512

                            7ca99f241be8192026e490408488642763bad79da60b23b4dafa51bea69d6cadfce643af646f8adedf84a274ab5e936317fe3735ff194a52ec576a9c24c9b121

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                            Filesize

                            649B

                            MD5

                            3d9dc62c2cd5b626f6fd8d6eb6b1bf23

                            SHA1

                            e840336694cce2ee68cbc57e8ec8e4536c2f8317

                            SHA256

                            1b7273ed5c584c1435769fa26905de7b0c856f83ec766ed11f23accea1e3412c

                            SHA512

                            b9796c2a69d01c12bddb7d9c038303671691ca71c5729fee5820521c7f366aa53040a68ebd00f773c71a6c62197ec6622a5039a80914d067dc22cb0abd8799e7

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

                            Filesize

                            41KB

                            MD5

                            9a25111c0e90867c7b8f41c5462abfaf

                            SHA1

                            0619625d479f31cf145c2e3714de0df4a69169d1

                            SHA256

                            41bb42020f1beabc9e72913ef6a33aa264556ec829ac70fd92c9c9adfb84803d

                            SHA512

                            0fbc3c64d6f5acc2c0dab67924b0c669fefa994f449240d1f6b78dcac3538343938a4fae972726156189f05806d3aae0e333035df52605ffe28886b82f31ccdd

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            336B

                            MD5

                            af41b33c61c9eb132b98c27fa28ea446

                            SHA1

                            a074dd3f20d5d994f9a0ad94424222a3553d2659

                            SHA256

                            d9bd074e0ead316f63b52b3c6b88d7b4b8886cc5a4874df9a22ef60c0279d3bc

                            SHA512

                            2b548749980e1c6aad41aa9ad761152eb34e697a7a9c2d596daff88624e9216cd18b39ef8d63a5d8e5663b9b24f95a6dc7a2ea6def6c77d53e21b072c751a984

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            528B

                            MD5

                            21dd445cec921fccc63af61d8ddd914f

                            SHA1

                            7025eb607e204876901f514a89da5c26f4ce9bd6

                            SHA256

                            e650516f67328f4cfc2cecca4484cac9a128052c407748e43f00b51fa71812ed

                            SHA512

                            e64c5e313787aa0c71a476da19c081667a56cedfc9ac0f2887d8b376729a0ca481feca7ea9d9da440c2aefd90b22476da341f920a2d29158ee4aa8f019c6420c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            672B

                            MD5

                            7a50de6b7c6087fe32e78a69355cdfe7

                            SHA1

                            242dc616e9fa972e93cc604e940b7d8814e3e057

                            SHA256

                            ca2f0904aef1ed44ac66f2d3818accb165466975ed980a4e234774b9a976f6be

                            SHA512

                            a72f0c058bb989dfbfeec94803bdc038f0cd1dbb624f72d90f74b88fc1eb52469fa6038dafef4dd4a6dfef66736425190f1b72b3ce75cdf0e505593ce065b7de

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            5KB

                            MD5

                            86bbdb193f113e73ed46cbd7c47066ae

                            SHA1

                            6ac367a1f3e0ae07aa14e354f875428f297b03ae

                            SHA256

                            c1deecdf4abf5542f397e121bd891b8e6e6d917056e20bd79afe6026e46167c9

                            SHA512

                            a8e4b4e5164a3d0dce63a5a43c19fa482cb4ddc0fe8e3819aae22cea68b01c4a1dec9dd8c75de180427bdca38730288f8fcf704abfb7f6f04731bd991e570846

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            5KB

                            MD5

                            9952d23e8e001316b86d7a5467a3331f

                            SHA1

                            b5085bdceec5ec50fed183eb58e9381b1a735ec2

                            SHA256

                            fc42c51f224ed2c0718c0bfa1f58c052ebef623f4da5637f33a03892353e82b6

                            SHA512

                            7adf04b2671a38baaea857ae6077651ca15b60a9072c7c1ea220656912f1302790e920273a2e47b8fd176f32bbcd95828ee6034eb50f5b7fd7d4f49450443151

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            5KB

                            MD5

                            58134791243031570767d7a1fb2efe08

                            SHA1

                            918ea3bc03f0e68fcc4b38b1c4ef367591b03922

                            SHA256

                            c8521bdda918ce93d67ec713582f1fe10ddf0acf302f201d27d82e7d6753a5e7

                            SHA512

                            f6c375a9a70e3c3f2a677dbc11cb2d03bec2758800b0021a71695dd310b7f3eddd652305df5a1e5f43fa0c9d4110562da9fc1292f814ec69944dae419af2406c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                            Filesize

                            2B

                            MD5

                            d751713988987e9331980363e24189ce

                            SHA1

                            97d170e1550eee4afc0af065b78cda302a97674c

                            SHA256

                            4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                            SHA512

                            b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            1KB

                            MD5

                            e39ed33934908fcd7577e1cfc663d866

                            SHA1

                            52edb30e316c9b23bc7eb544d7c76737d4763e47

                            SHA256

                            d29170a4795061910b57934da40fc0fedcfa9889931b1ef993fe47f2f9c47021

                            SHA512

                            efcd4791db11200ef0b06bc8480e7241e9ead4395561b30330eca264a6fc980177bb05dffa3927c39a0292debc7bba80817ce8d2014e54176825c8d8fe6f876e

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            1KB

                            MD5

                            4cafbdbfd9481740162dc0f904a4bf62

                            SHA1

                            36562d60592e5dafac6adbaba759920f3aeaf579

                            SHA256

                            708def5a700bc49bffbb6ff68f917fb50fe3dd6e12a20407b0bc42d480b5c950

                            SHA512

                            6254079227da20df0306492778659b9952a36c9e12ae38147897d9765806ccea3b8b5b1ba285efeccb1303915013bc0225303ed4fa57bf62070b7fa69b7a127c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            1KB

                            MD5

                            6526644d30cadc1a121f54dc9ebac530

                            SHA1

                            9fa4ede3d5bf968bae19ec8648992df710dbee94

                            SHA256

                            fafb681ee0855639daec47f2fb3bd9ebce0ffd4386326b336fe557d00337f0e3

                            SHA512

                            9f658988ab9537f34db99e8d5677e327fc1f4a66d732db930db91b3ce40c5c0505e25cffd8f477a2eda94d02be099853a3cc7d21a3b43b1ebfd49b61345086d6

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            1KB

                            MD5

                            b3be8e33403fc13b74c37b26f69e2e6f

                            SHA1

                            0e3bc61eebc4e7c256f9a890951c7a0ece108935

                            SHA256

                            ce37272d0a2c635d98ce42c4a27de07bedbff0d6b3e7260491f4e50e48128239

                            SHA512

                            1157cd9eeb76043b04a7bf63801e10e0897bbea940b1d5d92a13c6a569fa2ba34fcb244240b25ae9a1d448c8e0356e2cd0042ca2f3b1bb8c1297488f69df9f3d

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            856f5b133c15ef63edb8e2e5e2e20017

                            SHA1

                            64e1f34b87ae28ed673cc944f1088de99fa0c13c

                            SHA256

                            42e6b2d1fd91d476b6c75bbe493117ba34df58458563356b80c5e2feae316441

                            SHA512

                            999a2cda1b31b26961bcc9a12b61077656058f4c0533b05fe42381944313b45dfd4d6aab33b591c96c409048e85011bc54bc085d13ecf0438ab60dc97c77a8ac

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            d968b45e9638aab43c4a1146f1511de1

                            SHA1

                            70798042c457fc368d055896e42fc01c02acbf72

                            SHA256

                            c83b648275564ab5041475fd6161c166e68c678d2c8a22c6607b556bed12a0fa

                            SHA512

                            7ef99ec7cfe2a1f7cf862024bd9487445d63517045934f5254dc879efe20ca66828fc978f4096187fdebb70923bfc139764866812ac4c6d15b03fe1dbf862be1

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            c3e62b0f26bec3044fc5964ba9db2ae4

                            SHA1

                            09c13bfb24640f8f6591f6bec48fedead800fcd6

                            SHA256

                            3f98ecb167f8fd56ea9c7c1746a7ba61d01c63a7fc873d221c56d65d623e5924

                            SHA512

                            c3edb1eddfc14552bbe4c9b466ddd6ff5bc1e1852fb964e742bc75026798e1b487bc2a03e0c6ef1ac0766b56fdca77e190e46f40ea0cdc001200ff7f9edbe33c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            df023ea05187b4668bbbf1112e23819d

                            SHA1

                            f4e627b04e5f8c26d16cf37da294afe4406a654a

                            SHA256

                            f6806001aefec3cdfe56dadc6da78503772089a5968aefbd5c36dc91b96e8957

                            SHA512

                            57f0a8b7bfaec9f72a86579a22da10cf1dabe3955936ad13ea404172e5b9a816621adb0fc513713fd7aa427ce05867d35d7b241b5eab817f403bde3f9181e0bc

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            95a2ac312139ef8b4dafc53382c6e1bb

                            SHA1

                            f4fe2382bcbb1d8d535b8bee99839adb7887379b

                            SHA256

                            1aa28bf82e51dbd5a96b2b2baf6309d990874db2c693a9919f9ac7225ad8d202

                            SHA512

                            b2f73b178d313aa4d6ad2978a2483d54aee8d174c90746b0363ba282e9747c1b1da9f6029483930b3603259865aadfff76ee1e368a09245e453cb12f21d0a330

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            1490908eb936210d484e2ccbcd187929

                            SHA1

                            50fde42cbb3065754711818e194fc3994a996d95

                            SHA256

                            9f5ad496c9fc5f988d42b2802f71e7de8f8120d69e66da56feeb5a1d2d510e98

                            SHA512

                            bcb4f922afc6333ac4827b5dd399edeae1dac283f5ffc14b0e9cc28d3cb7a2b686987485fde1a642ef53bd55395775f16e49b21c1f977079f52d98417f7bce55

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            477d2f15cbb282a21e628b417989d6ed

                            SHA1

                            74aa9cb37c3a4f2db5f4dbb26ef57339cacbe9fa

                            SHA256

                            c6825f4ea73721e8b4d4a1af063211c454f52ce9ed32ff122e89ab7d19d20c61

                            SHA512

                            e98b5b55f3c284f1d97d6a8b9d8991a44a1dcbd01a95a83cb7e7b34592736a4f454c1587dc9bbcb6d2b42e96e0c8bae1e281d11aeee8d4f2b834a2e3b97232fb

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            5a67a660424816d0419a4250abf346af

                            SHA1

                            c15e0c89891d78ab99117a97e299ccf42b88301d

                            SHA256

                            ab1a949aeba2776e90c792c38d775f46745636ce4ccce841d363f4b1480079f3

                            SHA512

                            1d4478aca2886f5e3fbe481237fdf46d944806f9b936d7e539b8e10a37951dd260e25b6e79bccae2779758df351ebac0d4f17b801dc48fcb0e4dfa46be1bdf71

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            1d314b8895c496de6e808dbdab942242

                            SHA1

                            1b838093998ebc8e95118989494f5ec5ea6a92fa

                            SHA256

                            e7a1326a2151e02dcc110fc85f89ea7162f0ca868a2faf73d7258955e2fff331

                            SHA512

                            753a349e7aecea375c5c2cabea38418f3ba8c9a0b365829a9d6aa6d1286892a2cb819b839965e590f0bf7b71060446c41bb0e2806bef0908d6dad8d0300aec4c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            febd9b7952acf2850c2fe3873703f0c9

                            SHA1

                            27b32aca70d231ea9c4984f979f6dab5d0c8e91e

                            SHA256

                            085971332dee48f9805bde845f91b20a329448e08b33346b5dbf1b538306db61

                            SHA512

                            433da1bdbe587ddfd4506f593261915c6677fc62728f91d2c47c387cb805a3f945e28113c1e03431a66257d87a131d29b03b8f486853bc88c13db578b3d95ebc

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            2c8861fecc888cd39e75e60eba953869

                            SHA1

                            561c708f0715ce8479850a1155dc4f85d78ead4d

                            SHA256

                            eb510979ec24311c355e06d2ff16f293335ab27534aa9d30b5fe18c383e2c81a

                            SHA512

                            25e92005a05cab819c786217c461b0882cad51df354cd7ca97e54de33d3991121c2d8231224aef3dd78f24e6e5dc54a7027de75018c96c8f2ae4b099a9c36b2d

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            5d93af46049c07b6da4dfb1dfba12f2b

                            SHA1

                            2e2312cb503ccf459683b29160e6d1ff0452df2a

                            SHA256

                            bc235bf4774d1853eac0acf7a52bbaf88659cd725cfccd40a3810bd21f9855ef

                            SHA512

                            ebcc087c7e83fd062b0bbd629361ce53e5ce0e028796397235233652f78a6b5706e8867a3496fcb9762aee368e6ef3cb534e62b597b909025a9b22bee02461df

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            0258c17052370ba46abb7f537cb52a1f

                            SHA1

                            9c892d84b905a047cba8099286eab21c4a5eef49

                            SHA256

                            64950a0d00099e50618bd05ecc794d7ea34153173b3b52613ddfb98bf44606f1

                            SHA512

                            7b2cfc96c33cd761e0753a70b5f9f9bfc6c7e766eca5c99a1a9b88497048d1fdcabeb1ebedbe68063122eb0df3db612c4437741ea1d87537f16efbd4815343d3

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            008dfd3c0c06fc44bbad8e719af4a34c

                            SHA1

                            492806ead346b9c16ba42105a553516b2b5a5140

                            SHA256

                            5a9f329862a4ff5ca53c9a7215f99e0c35a4fb62ef761c00eeb28c8ca16b75f6

                            SHA512

                            148f13be06ea1fa55e9898139bba38bb6388c7132a50fbaddee284b3278f1242bc048d77aa9e8ebec670ff7dfa04f92b77f786d86ac9ef1c9d9be0377d48ae9d

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            c3a1c83d5985c8ed20b41f60d7f178e6

                            SHA1

                            2ce466b6617436422b46f14bfe36c91d54857af5

                            SHA256

                            739787a0483b05ea0208b2fa9f39e4e4289cf4e6c0cc5551afa5a9a8a5b7d846

                            SHA512

                            51145cfbbb80058d8fe479a99c56f6ef59209659892ee7987a5b42b5f1152a67fe0cbb6322e4a638956f10444a5e72fe45e90035ecb5285a02f337627838b7d0

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            10KB

                            MD5

                            ef9ba6659596f6584f119fb920c935b1

                            SHA1

                            904e20eacf5949fb54365bbad7c3a4419ca4c344

                            SHA256

                            b41a1ce432b12f10f6997cc8e31c163cce70b3f549bd4485c6654d9b723de3f2

                            SHA512

                            6da50e5acb7add9eece58a8ee85e70af98580d3db66d023d2ce7b0f26b5fb5e734b9cd60f6ed23e050db030345b080b07d257853a6672b1f3b525000bef25a47

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            9c1d9b20724a3c0807d2133db48ae67c

                            SHA1

                            a64acd4720eda725b2d8a283fb69f7f8b420b189

                            SHA256

                            5c2cb525aaeeddcf58e9c79613b7dfde00633a2f45d0136faa975d7de6655359

                            SHA512

                            9e85382a3bfbd6495efee6ca420acf9eac21eb73b5e3dcae89b07e49735bbd5c29d16e3c307418135956743f7b801effdb7256554d5c3bed49c9d9464a74f810

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            92KB

                            MD5

                            16ee00e6254a509db8acfb6a40b482d1

                            SHA1

                            74fbdd6d6225c2739df3cfd94060a7b89d62b05a

                            SHA256

                            951fad2cf0556fafb41cdb9600a63495a6425d5958b745c0fe0b778d121d852c

                            SHA512

                            68f01686367cdfe7cad1a795fe434832005bad85bf55aa2ab556325c0e4de1cf20d5ace45e5a31259e4688c21ac95bea8e849b4b5090a098d36ae19660df2728

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            92KB

                            MD5

                            2f3969a1d168c8597bc814a0c855263e

                            SHA1

                            1d89a4e6f0c23747dacc0393b65c5d2c287f8ace

                            SHA256

                            2e29315a0c0ab9adbe07b83da937710f05df5f504eb0e164427f210df04e5966

                            SHA512

                            c114431cf0ad0d0b673706c59f94f9f1438dc9389de0d8ba385f019a9aa29343d88e4e2b2ab7044a6b1bbb739d4e9ca44052d16d418811745600696d79e14695

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            92KB

                            MD5

                            c4647ecf1f12de7f32571a7c3de7cb53

                            SHA1

                            c4a2c1958e2ef81458b3eee6a7e63a3ac74248da

                            SHA256

                            d160e984daa2d20bd41ae92885437f1ad941e809102e4354b0fd40db3967db16

                            SHA512

                            4cf066d4736c1992683483ad8e53ce5695c61bbf5e4e37902bcf6754486529a105767f33b77b01ac67c32cea7a84a38bc5e974b53d0c7efa894301877afe7c77

                          • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

                            Filesize

                            10KB

                            MD5

                            21aa5cd409c26df0f9d85fd262f72f84

                            SHA1

                            64c02f42a4b598f8a85c507717f4f644324ae594

                            SHA256

                            f92207990cba274f6c7a3b8571ebc51bef3fd11369a8a83849379df39ada3f78

                            SHA512

                            84d2b7448dd50f2410ff0b0757e981b0d67e43a6e4b610a20479235f119d5a76b28319ce40df54ed79160bcc34deb6c150ecfd134ba0dd59947e871cfa2fce07

                          • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

                            Filesize

                            10KB

                            MD5

                            e94bd74837a5ae7199b785dafe73b2d1

                            SHA1

                            d9c0ca953a7ccdfcf7ffd2e1fa6cf91952a30f78

                            SHA256

                            7ec408ba0be314b7fd1ea8a6312eb5e2f0eaaef9623fcb9c6c875a555215bbf3

                            SHA512

                            f2185d4244b7e2ae96513f3415e3d0f1679c9eb6cf2cbab3f57aa3c8b6ed8fdc90a361d00f74902f86721c9ddbb706d5d9852fab905819213315a6855e72d699

                          • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl

                            Filesize

                            2B

                            MD5

                            f3b25701fe362ec84616a93a45ce9998

                            SHA1

                            d62636d8caec13f04e28442a0a6fa1afeb024bbb

                            SHA256

                            b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                            SHA512

                            98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                          • C:\Users\Admin\Downloads\install.rar

                            Filesize

                            448KB

                            MD5

                            4564a9a35d9e7e7883faa2ed3361e0e4

                            SHA1

                            79a611b96bc0cdab0bea30423814b4ad7245800c

                            SHA256

                            06ce088beb65731be6268934f89d44a00d386e517ad88f8e28a8968c0a43b7e0

                            SHA512

                            efcec8c64edc5e23a7d24610c4a7e7facd3c682eb42875bc0b19e95ffc3479749d044a78f274cbdabd4252a07ef3da567aabe995abf2f5790da139203075fa51

                          • C:\Users\Admin\Downloads\install.rar:Zone.Identifier

                            Filesize

                            26B

                            MD5

                            fbccf14d504b7b2dbcb5a5bda75bd93b

                            SHA1

                            d59fc84cdd5217c6cf74785703655f78da6b582b

                            SHA256

                            eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

                            SHA512

                            aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

                          • C:\Users\Admin\Downloads\install\Tutorial.txt

                            Filesize

                            136B

                            MD5

                            ee6277d8476011bb2c294156b84c4d74

                            SHA1

                            c7fcb8b2ac1a6ba858a4f72f0ae21bcf4c278dc2

                            SHA256

                            dfbf6f42ab6d461d1a7533ff30a7c81c80c58704b0933f52c79987e9f66ed95c

                            SHA512

                            8f777642a54be57c7022bcdd34005914a0b9ee38e3875ee0a26c7290b04fde619c3a8aab5119de79960fa66b9a79754296516d9a2d87150e1c34bdb0ea30a6ec