eternity | 9ccb0bc19f24b694a4129cc387279457e57671f8109937550258ffc40173423b

Analysis

max time kernel
886s
max time network
894s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04-08-2024 17:36

Sharing

Copy URL

Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

GrowtopiaInstaller (2).exe
Size

230.6MB
MD5

3a3fc09ccd9742f23dfcd213ea0cc4fa
SHA1

e20b17bd6a625259b4f9b2c9f8439d761bc126e3
SHA256

9ccb0bc19f24b694a4129cc387279457e57671f8109937550258ffc40173423b
SHA512

cfc533d6c845692a94868d4df276b47276504cce838bfffea3ff41a33c6d384d70583bb9413fb6048ecea0cf1311ce38c3311fda2e712c2aef3625bb45016971
SSDEEP

6291456:2TkXdHjFqVWTv3QXZ0ZDhip7rOCXqCS6N:2WmWtb6rOCaC/

Score

10^/10

eternity discovery evasion stealer

Malware Config

Signatures

Detects Eternity stealer 2 IoCs

stealer

Processes:

resource	yara_rule
C:\Users\Admin\Downloads\DarkFarm.zip.crdownload	eternity_stealer
behavioral2/memory/4856-4805-0x0000000000760000-0x0000000000854000-memory.dmp	eternity_stealer

Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
eternity
Disables Task Manager via registry modification
evasion
Drops desktop.ini file(s) 1 IoCs

Processes:

svchost.exe

description ioc process

File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini svchost.exe
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service
T1102

Processes:

flow ioc

711 raw.githubusercontent.com
712 raw.githubusercontent.com
Network Service Discovery 1 TTPs 1 IoCs
Attempt to gather information on host's network.
discovery

Network Service Discovery
T1046

Processes:

GameBarPresenceWriter.exe

pid process

5060 GameBarPresenceWriter.exe

description	ioc	process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

flow	ioc
711	raw.githubusercontent.com
712	raw.githubusercontent.com

pid	process
5060	GameBarPresenceWriter.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

GrowtopiaInstaller (2).exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000\Control Panel\International\Geo\Nation	GrowtopiaInstaller (2).exe

Drops file in System32 directory 2 IoCs

Processes:

chrome.exe

description	ioc	process
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

Processes:

Growtopia.exe

pid process

4952 Growtopia.exe
4952 Growtopia.exe
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

pid	process
4952	Growtopia.exe
4952	Growtopia.exe

Executes dropped EXE 29 IoCs

Processes:

vc_redist.x64.exevc_redist.x64.exeGrowtopia.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exedcd.exe

pid	process
2356	vc_redist.x64.exe
4596	vc_redist.x64.exe
4952	Growtopia.exe
1928	dcd.exe
3892	dcd.exe
3376	dcd.exe
1428	dcd.exe
4536	dcd.exe
3764	dcd.exe
4328	dcd.exe
2092	dcd.exe
5000	dcd.exe
2004	dcd.exe
3084	dcd.exe
944	dcd.exe
5892	dcd.exe
5884	dcd.exe
6096	dcd.exe
1840	dcd.exe
6076	dcd.exe
5836	dcd.exe
1880	dcd.exe
3288	dcd.exe
2628	dcd.exe
5252	dcd.exe
5172	dcd.exe
5512	dcd.exe
5576	dcd.exe
2072	dcd.exe

Loads dropped DLL 7 IoCs

Processes:

GrowtopiaInstaller (2).exevc_redist.x64.exeGrowtopia.exe

pid	process
4336	GrowtopiaInstaller (2).exe
4336	GrowtopiaInstaller (2).exe
4336	GrowtopiaInstaller (2).exe
4596	vc_redist.x64.exe
4952	Growtopia.exe
4952	Growtopia.exe
4952	Growtopia.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

Processes:

GrowtopiaInstaller (2).exevc_redist.x64.exevc_redist.x64.exedcd.exedcd.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GrowtopiaInstaller (2).exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vc_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vc_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dcd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dcd.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

svchost.exesvchost.exesvchost.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 17 IoCs

Processes:

chrome.exeLogonUI.exe

description	ioc	process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133672667589110627"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "198"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808"	LogonUI.exe

Modifies registry class 6 IoCs

Processes:

svchost.exesvchost.exechrome.exechrome.exeOpenWith.exesvchost.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-945322488-2060912225-3527527000-1000\{AED02DF2-9A8A-4D70-991A-4459456F0251}	svchost.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-945322488-2060912225-3527527000-1000\{4C282007-475E-4E4A-92C4-5AF2D8D7097A}	svchost.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-945322488-2060912225-3527527000-1000\{CCAD748F-42EC-463B-AA20-79B5B8D4EA0E}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-945322488-2060912225-3527527000-1000\{1CE43F59-8CEE-4230-838C-DDFB86DF9C8F}	svchost.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

chrome.exeGrowtopia.exechrome.exemsedge.exe

pid	process
3880	chrome.exe
3880	chrome.exe
4952	Growtopia.exe
4952	Growtopia.exe
1152	chrome.exe
1152	chrome.exe
1152	chrome.exe
1152	chrome.exe
3516	msedge.exe
3516	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

Processes:

OpenWith.exeOpenWith.exe

pid process

2024 OpenWith.exe
5936 OpenWith.exe

pid	process
2024	OpenWith.exe
5936	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs

Processes:

chrome.exe

pid	process
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe
Token: SeShutdownPrivilege	3880	chrome.exe
Token: SeCreatePagefilePrivilege	3880	chrome.exe

Suspicious use of FindShellTrayWindow 55 IoCs

Processes:

chrome.exeGrowtopia.exe

pid	process
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
4952	Growtopia.exe
4952	Growtopia.exe
4952	Growtopia.exe
4952	Growtopia.exe
4952	Growtopia.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe

Suspicious use of SendNotifyMessage 39 IoCs

Processes:

chrome.exeGrowtopia.exe

pid	process
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
4952	Growtopia.exe
4952	Growtopia.exe
4952	Growtopia.exe
4952	Growtopia.exe
4952	Growtopia.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe
3880	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

Growtopia.exeOpenWith.exeOpenWith.exeLogonUI.exe

pid process

4952 Growtopia.exe
2024 OpenWith.exe
5936 OpenWith.exe
2488 LogonUI.exe

pid	process
4952	Growtopia.exe
2024	OpenWith.exe
5936	OpenWith.exe
2488	LogonUI.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

GrowtopiaInstaller (2).exevc_redist.x64.exechrome.exe

description	pid	process	target process
PID 4336 wrote to memory of 2356	4336	GrowtopiaInstaller (2).exe	vc_redist.x64.exe
PID 4336 wrote to memory of 2356	4336	GrowtopiaInstaller (2).exe	vc_redist.x64.exe
PID 4336 wrote to memory of 2356	4336	GrowtopiaInstaller (2).exe	vc_redist.x64.exe
PID 2356 wrote to memory of 4596	2356	vc_redist.x64.exe	vc_redist.x64.exe
PID 2356 wrote to memory of 4596	2356	vc_redist.x64.exe	vc_redist.x64.exe
PID 2356 wrote to memory of 4596	2356	vc_redist.x64.exe	vc_redist.x64.exe
PID 3880 wrote to memory of 2228	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 2228	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 1016	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 2948	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 2948	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe
PID 3880 wrote to memory of 628	3880	chrome.exe	chrome.exe

C:\Users\Admin\AppData\Local\Temp\GrowtopiaInstaller (2).exe
"C:\Users\Admin\AppData\Local\Temp\GrowtopiaInstaller (2).exe"
1⤵
- Checks computer location settings
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4336
- C:\Users\Admin\AppData\Local\Growtopia\vc_redist.x64.exe
  C:\Users\Admin\AppData\Local\Growtopia\vc_redist.x64.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2356
- - C:\Users\Admin\AppData\Local\Growtopia\vc_redist.x64.exe
    "C:\Users\Admin\AppData\Local\Growtopia\vc_redist.x64.exe" -burn.unelevated BurnPipe.{85EBD780-8BC5-43C6-A473-983D2DC7057C} {836158E7-DEC6-4567-8ACD-44950F7EC09D} 2356
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:4596
- C:\Users\Admin\AppData\Local\Growtopia\Growtopia.exe
  "C:\Users\Admin\AppData\Local\Growtopia\Growtopia.exe"
  2⤵
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:4952

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7fff77c9cc40,0x7fff77c9cc4c,0x7fff77c9cc58
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1920,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:1016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1844,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2024 /prefetch:3
  2⤵
  PID:2948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2264,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3152,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3204,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4596,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4856,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4900,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4916 /prefetch:8
  2⤵
  PID:432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4752,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3400,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  - Drops file in System32 directory
  - Suspicious behavior: EnumeratesProcesses
  PID:1152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=2684,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1488 /prefetch:1
  2⤵
  PID:664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5124,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3228,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4852 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3332,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5776,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5824 /prefetch:1
  2⤵
  PID:2804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3172,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=6024,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5444,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=3284,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4460 /prefetch:1
  2⤵
  PID:2204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5184,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4544 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5932,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=3268,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=3176,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6160 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=5536,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6984,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6604,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:6012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=7040,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6456,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6268,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=7008 /prefetch:8
  2⤵
  PID:5580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=5940,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=6756,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6912 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=4748,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=6260,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6836 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=6608,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=3328,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=5364,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=7108,i,4496863988290755321,6816374349334206232,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:4328

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:2956

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4784

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2f8 0x150
1⤵
PID:2772

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:5060

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:664

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4392

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:4856
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:1928

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:3900
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:3892

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:2060
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:3376
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:1880

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:1864
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:1428
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:3288

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:1400
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:4536
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:1840
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:5172

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:2356
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:3764
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:6096
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:5252

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:996
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:4328

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:4704
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:2092

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:4292
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:5000
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:5836

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:4196
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:2004
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:6076

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5936

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:5708
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:3084
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:5884

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:5920
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:944
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:5892
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:2628

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:6120

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:5184

C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe
"C:\Users\Admin\Downloads\DarkFarm\DarkFarm\DarkFarm.exe"
1⤵
PID:5276
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:5512

C:\Users\Admin\Desktop\DarkFarm.exe
"C:\Users\Admin\Desktop\DarkFarm.exe"
1⤵
PID:3368
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:5576

C:\Users\Admin\Desktop\DarkFarm.exe
"C:\Users\Admin\Desktop\DarkFarm.exe"
1⤵
PID:4876
- C:\Users\Admin\AppData\Local\Temp\dcd.exe
  "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path="C:\Users\Admin\AppData\Local\Growtopia\save.dat"
  2⤵
  - Executes dropped EXE
  PID:2072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault070cb8d8hdba4h4f2bhb238h1f5b980c0bc5
1⤵
PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x124,0x128,0xb8,0x12c,0x7fff648b46f8,0x7fff648b4708,0x7fff648b4718
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1964,18394715833083792820,2519412935583050164,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1964,18394715833083792820,2519412935583050164,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1964,18394715833083792820,2519412935583050164,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:4568

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4796

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:692

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /0
1⤵
PID:5980

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {24AC8F2B-4D4A-4C17-9607-6A4B14068F97} -Embedding
1⤵
PID:220

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
PID:3488

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa393e055 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:2488

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

Filesize
209KB

MD5
3e552d017d45f8fd93b94cfc86f842f2

SHA1
dbeebe83854328e2575ff67259e3fb6704b17a47

SHA256
27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6

SHA512
e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

Filesize
24KB

MD5
87c2b09a983584b04a63f3ff44064d64

SHA1
8796d5ef1ad1196309ef582cecef3ab95db27043

SHA256
d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0

SHA512
df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016

Filesize
70KB

MD5
86a162abd8da8954c9489598e624c97d

SHA1
26832fbf83ba9b9458e4975a1db3370249e7b2ad

SHA256
64b9cd4a4ee6a195eab971c9178340b8925480628386ad7fdad7c6223cc73395

SHA512
a6e8f9b27442c940ec121d53c25130e2727d28c0e1ea6b57a65dcfaa0e16a76de7243652e3c9ba605da354c36d90b8884ebfa7a823dd160dcccc28f7821daaa6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

Filesize
404KB

MD5
7130427991f9fe5cc8fd10f77c769f79

SHA1
11f5bbb99dec9b4f67036248295c27f60c05bf0b

SHA256
c398af8af799ef2f388d038fd256bfe56de4506f346ea5e25f32e064d09b5fc2

SHA512
e321803cd60ffe4735a120b013dd45e50393c779617d318d5cef33412935c29ed22442698923f383d5c67291eba3be79a72924fc86568af45215bfa113c378f5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

Filesize
254KB

MD5
7a6c5b7da744821e26331e2cf74e8259

SHA1
37ffcd608526b09ebd351dff0272d617390825cd

SHA256
2198e4bdf4555f3ddaf6810e67c8e47784ecb1040e556c4d958d15780afb463b

SHA512
b1faa41461b40eedfdf9756c10f3d7eb3d24d6834b24a0098392ce69f2590926d94409b1da8bed1aa3795de20da62b4c8700e56848ee23d12831e2c0f94a44ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

Filesize
167KB

MD5
562ae8d4ab3e9439ee1b95b00bfc1299

SHA1
b72054b736df4de5c8b05d161ac9e21487e28b90

SHA256
cc5f0aaf55c1ab9e98e2526229e6cf526248581681a0f1e0685c0acd40d0c6c2

SHA512
89d9fa123bbe5881aa3cd5b452291d5b00744f54c21527bf6d978a005a6034fc432607675d1123f1a6f334e8b5f8f232b178a4843c9a32b24e2631f4c542e552

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

Filesize
23KB

MD5
385e43f194d7353b3e25ca96cd5f6a88

SHA1
21b2f08aa81e3031b2e0d852355e549df932c12e

SHA256
9cdbec74dd71b834209b7e605da4bb207c61b50d713a6f7086884523b2eb6303

SHA512
67464d072f2fbd15147c4ddf4cb2e4cd5456ea7ff067c990c3b689c852ff73a64a2c4b2f1a223b216863be85935de2032fb51d8c64cef7a5f890546bb8696399

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

Filesize
281KB

MD5
cc8e9e241d2643aab8557a83aee6d4b8

SHA1
275580af3cb1bd033237e23abacd10a4487480fa

SHA256
0d492be6aeaa6a688b76c7aec7b64aa5ef3bfb3495d907b92e0e4ea95e5f49e1

SHA512
e4961732581833393083ab8f7686f82b160e198af1148def6b117b85f14c66a872062d0db671147dc64abad6ad945a2661e91af3bca735b436f808f9b3d3a90f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

Filesize
32KB

MD5
9d01eb0a17ab073b23578fa43d8cb8ff

SHA1
9494cff21da72d4c633827d4316b5b3295e837f0

SHA256
c262b68986387896023519db8825e3ed1e080d5307b72474bac05ec98185c530

SHA512
6c78a5cc939506d590dd63dd2a630e92ce68de84e4055e093bbd3a2f233243da12e315f5ca2d221948e39d5fbc951b1e958da851d31b41b9a86d29a133e3b3b0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027

Filesize
32KB

MD5
610293cf4ea82a578cd1887889626ad0

SHA1
8f505a4584e51bac66f9b6a623a1675e5cc10cd9

SHA256
66753c185ee3c839fa84adad3e2809f4419fa87be1a4910d05997ff33a783324

SHA512
80103e0a65015af0f79c7c37f63fa9ad7bd0290cb7d1f2324ce17811b3a125af27f02958fa4d55590f4f8d29e444245066127dcdf201c9f522e00b79f82e2e33

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a

Filesize
34KB

MD5
367d6749aabc56bcfd8fe6f68e8ec07f

SHA1
94603bfd837a6cc48b0b413d97e6c21294139f01

SHA256
aba7125a597cbea4846b275de47b9e35fb42202d217c321ad861b09d3b831b5b

SHA512
737b43474c49d945fcc767a082ae79734333de55374c35825993539376577af76175a966e633b8224b4ede6a42738f3298e5c42d7a307f37897857c7c65842c7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

Filesize
20KB

MD5
3e14359b0f05e10904b2bde617bbb846

SHA1
ad1b1fe9ff4da2bd179a6a2fa61abece0fa8a2bf

SHA256
c41b8a2d243501cf0d2da34e5104d559aae31bb17ad6dab8d464b99a7cd5fce9

SHA512
ce70c2c307918f49834ef12e032717b9fd6f75418565e4ddeccba123492ac4af4b84e75add201ceba9f78ee1d53648f7ef7a62e5e4738b0a8da2b4c51a8f4d55

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

Filesize
45KB

MD5
c2cbb38ef5d99970f0f57a980c56c52d

SHA1
96cff3fd944c87a9abfd54fa36c43a6d48dac9cc

SHA256
85369a1cf6e7ff57fe2587323c440ed24488b5ed26d82ba0cd52c86c42eec4a7

SHA512
50371320c29f0a682b9ae3703ef16c08f5c036e84d5056e658f5d9be7607e852adf72c13bf2d0b63fc492f5c26d330bdeb2ba38bfd8b0d4567f0cc6b0c0f7bd9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030

Filesize
53KB

MD5
d135c6833e95bea967be35a97ba08c53

SHA1
1e0cfc0897a4a81cee66573c978f976edfa62f4e

SHA256
503ee91ffe5ccf03095587f1e46855752f5308e450aab6b8a3961f337e0fa923

SHA512
1716908c50405b64989e000016286d7ce64f2cf521df82a4ba9b338e41f0401710c5bdbc69686a98082cd291c01893f8f560b3f18e17fc996ddd6d50e74a86e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000060

Filesize
47KB

MD5
1b41de287931f25dcfdb32b449b62dce

SHA1
e457bbc7784ceacbb11cfa3ff65571de5c0ff227

SHA256
c1fe59b2b1995ef9709e1dcc147a96774f04c95374ca1c4df0c41e1cfbaeb8e0

SHA512
4d1de63bd0e1d61375a72252f41be91a61d766b3b204a0e72bf6530195a3f26d89c8aecd75e175281287b3b3b56a71f964ced207a0037641ba8c893d2ef75c78

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000061

Filesize
19KB

MD5
5c00528ed171768547d436a39f21badf

SHA1
8e90a6203627667fdaeacf10d9d3a2d0b248e67e

SHA256
57f6644538805197e6c54669bee2f4d330d4270b59e2dd49ebcbe3d399cc17eb

SHA512
b085e750a1b794e47dd241f968f348538be1c5bc7eac0780f7a247aa7bafb9768648b08cd3f9f2743a4efd983c2af39784d8977076f4c73da716b071632b323d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000063

Filesize
747KB

MD5
b81ace3b4244eb24aa6f719dcb7fba9f

SHA1
32d47f92d659ca2d8cb6676f1e49e8eb60ce5607

SHA256
d0b39a681e75b724c42d10cc205349f04adc2dbea71c41e2825bb7cbf62ca539

SHA512
f5f997d82c37195e7f5256133f8d00b3532cb91b7be850d702ba2f40f76a7b7e36671b73ab1ed9fc0f5fe97055a15008ffbbc61c34ebb0d84f0e44e632b0f366

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1661d0a6224ec4eb_0

Filesize
280B

MD5
84eb13086807161b8dc862e6f4909bfe

SHA1
dd57201ab1bc2a768e54a86409e9912e70aa48a8

SHA256
d1af29dc72684faf2dfb108d241550e8da95228cc7f906c082dee470c8f00ad0

SHA512
23828b1a5a3895bb7bed4d65fbec381a0936f7f6e9ddd8c88ab17c1eaa529b82314149eddb36ef79be43df7db9c22593b978d49a5841275572021479c5a6bd37

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f9cdf461ac4a932f_0

Filesize
19KB

MD5
11cb2a18136ab3aaf7b7699686acb463

SHA1
019e856c8f2bcee7357aaebd0aee64889ad4f9fd

SHA256
7d03f8a815b50933d07f33ec69275f2866947d886bb890befe80220c7fe20235

SHA512
399a6cf26afc8e9917f86571d17a8fa050abbf34d4a7bf8da82f19a7ecb8995c39cfc1587751c723bbc4166a5c38eb20b16fd43c76e848deca996426b026de52

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
707880547022c5f3db18de2a70ddc799

SHA1
64ff1d8001bea12337dd5a551f4d64d714e1aa85

SHA256
0f02bbb64d040289bc2c99ed561bbded66d4ddf0ad316a7cfe5c40faf4060d3b

SHA512
29137987359bf18894ff89ae02d6574b13702fc61ced94cd37941712d192f2934cf5c1344647c196f5c350e969730b6eb49d3b7386f81b18e9a98adc539d9cd1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
d32d3dbe440f74cb33ca3b103846a351

SHA1
f981f51692fff8eb83e050315ed941d3db72da57

SHA256
8242f8b289e4f6c94b901350e39b6282c288f4dbe28618077d7a3c8dc064e684

SHA512
288b3d0d87a253343375d30282ec76225620a641d5315f6a240fd65b01d39e0843c527cd0dde4d5f1f2c82471112ac4ec2e7136ad5c591424a2c79d44783d208

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
6c4e911f29d7f96d0cf1f9f4f2833ed8

SHA1
b3d713477c9fcb23406d56f92ad8d877a4335d72

SHA256
58fa19c076bd80a7a354bfd4af7a2c8cb7d08477315fd8fb13a116d0e1b26239

SHA512
4f0e19b07cc8fd1e273727819ab71c1ccc3d4fce362c72c9604821c0fc554633e53abf607779fa72f4225568588c86c1b086d40ea02fc299a7f2cb041b87f138

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
552B

MD5
844cd28725dfb892865e1a2b98cafcc6

SHA1
12c31fa4f7938869ede274e6b29d51923f224a1b

SHA256
d9d76dfcf79d93465a414257d4369e34e7c155eb9323bf16d72e7b0934d8f052

SHA512
4043d8eea448e7050c3f574634f331d5197956dade7c573ba2ea92de6b13b70d9ea5aaf986c687caaf21098df41d63c5ba23192dfc3b477e8564fcd1d01db570

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
2edecb88113a35d64f611f218658f124

SHA1
46da638280da496da8009b19a5e7ef1c1225d2ef

SHA256
c635aba826485facb3613a53f91bbd5ec00a662e0bc1f1d7c894c6bc183f5748

SHA512
26d3920b1b0a713b65ed706f9d8963d6cd9ea151cd4eaea47badc493faf5df1c0af63eaee734acd5e3972b1878f1d59556f63e3ddc2e767aee51b506caa6a7a1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
9cc23b2f2f49c3e931c5b792f784a10a

SHA1
77cd8e7f4992a51f61a34efd21923998678f2543

SHA256
434e61717373fa58936d4449a85fe792e6cda7084c22c842d97c523b0d915258

SHA512
6de4ea6addbbfd3a7d42997268ca1bf757b9758c8c45c57daefb9604cd2a466cd9e776ed6c7f67a146390a1a6aa7b76663c26d1d40e87563050aff593e8b4594

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
10KB

MD5
50c9fa4582828b848953d8cc31d2cd28

SHA1
4248f01a00c840849ca7ef95e22f4f0b38018d3f

SHA256
30c74b9b0cbeecbb57e1ac530d1d09c2cefad62f8162724f3d24c8a1c4a294c4

SHA512
08fe31066f503d0bf3bcc90e26ac5a085faa023432a2c74db77d2a6cc0bd8090e8e6f9cf9495c01a0a850b55778d643d0cff43b3451bf4e9937cc55eaf54b2e7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
9bb2915386a7fd44692c542fbf31cff5

SHA1
ba9899f8dd143e674bcaa4a528d02aeacca07e15

SHA256
6a5b774144d669b4796562a9df0c10f3d3426175ccc597ab7bdc534e6ff99530

SHA512
0067ae4c22b1f712bb7bd8ed8bf195120bfef92cb7703d18df8e5b8d66005af71d1cabc267e39d4721de4612709418fb37cdcd7ce28ec04037d345f2ad6e5dde

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
7e34db2d884d8b18dc759bddec63e8ee

SHA1
f70f60518c750b7f2da2bcee4d97890a41f350db

SHA256
4325e0d9141c01d87b84b28dcf0b6c531983b351923aa836d1c8e0f0ebff35c7

SHA512
14e04c05b56c814adddfe4821915b1bdf46d1584a7230842f7fea3b57002b9edfe0a0aa741c34cfb676669c8bb9758cee9032a6fb2abaedaa51afcc2e3c94914

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
17KB

MD5
6c9f3267fd69d51d79127d0a86f8cba3

SHA1
944041d442496e0e546745bd38a4edf83d869fee

SHA256
e3bafe7f1319276edcb997ba50c4a2446d6c9ae724ac8c2c9e5f05bf9d13cba9

SHA512
fc24d20c0a1cbcfb06af2b83b86b5ff5a410828d4c25f70dfe279a338ef4c262bc7a134c391c628299c465dd41a6eeb328fe9cf1da1305cd24c4fb214ba1b5ac

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
7KB

MD5
9928f4ac57ec5dbc713efb8651c6cd02

SHA1
752785812cbb65a159ea126dabfa018526ecf971

SHA256
a1b80a1a16c3bde2d244fa02eb2d9374ee24217559b1cb930a51a802931a9667

SHA512
358ecc2ab8ebe07de67edbe9c060d9f17bdbf46ae870e960bce4a8aee808d0ebd30f6dc5b9da3f7a4f09ffed628e39f97cb7d94dd17ba527d0ad3dce2e84d1b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
21KB

MD5
c20bbb5749d9f39140fdd14a158236a0

SHA1
846d42222cfe300d1c27e6053f52c4bbe031732f

SHA256
dc9faf7dfa3c7fc1d27f9432c4e86eceff35599da212ba2182c4a5b84120bfa7

SHA512
60b7f6220064921f3afd1c029de5da125af1e9f19cfdb80e1c6cf24b516f9e1236c8194693813d23874a677a272f5d5d287397b1f5d0cd0a2b878ba6bd2dda88

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
9KB

MD5
2635c3b186223c8ec3d49a4d04a3de87

SHA1
6cc2e92c549b2b9b17839b806dd4825f6f4bfbd6

SHA256
004ed5a5d63a6b95bfb020118c30603ea16cf7e51479c44aada3ce64025d5d96

SHA512
e4fe5d65dcdfd40e2d362a4e52af873ba071e9ca5be3dbaf01c37cbbdbb93a142b3ea3b0900d4c9e2d90d8989627deef1d80ea2194abf53fc9b1d33541404906

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
908afcfae56659af0bcbec4f3339710a

SHA1
336aa73d503283144305719dd30c377a21870348

SHA256
bbaa0cfcce96c3f96240f116a33c361b3ec57cf36d30a14d168ca01b60c76145

SHA512
a372345b89900294fbaf783bf17ec7f1cece170139ab0f6297f9ba8d269e029934b3336b96874a6dc46c2c46a1f5c4b97daa860239c3ab7c18e60bc538ea6b8c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
d49838a1f51825b4f9e4a37f9da40b21

SHA1
ff8704f86321a6e431fc3ac8ef54deaafdd7011a

SHA256
ef8b3e19f0a1cbbe50910aabc74fa6c80032e52b2546d5bbe69632202f0352c5

SHA512
730fffc7c2583045be2c82eb033200664c17aec787b4b27f4bd7c0fcf84fdf523e2dac270d099eb55bde779235758fe638221baf145bc8314635cb2818395bb5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
1e46468f3f6218ccbc274b1e8e5dbc92

SHA1
30bc6e12f1624aebc9fee7c56d18bf2da3a30c2a

SHA256
1a20dcd2df1a009ef01fdd94da4b712a84c311216c3951df0335860adce3c4a8

SHA512
332d3c58c440bcf93d7955c534b0dde038a82b68e6d93f7332a55bda637524dc91a129a920837bac7c4c6502fb441a272ef0e05ee0c9667c8392324860d4fad8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
fea08dfa31aa6c7fa7a228ae6fc75dd2

SHA1
9a9e84c906a2404f5bf5e24f81a7eb7a23ae9c54

SHA256
1eff43435fa73cd13e3c8cea30bbb8e8d3d0c94350c1989b406f6a757582a16b

SHA512
0270d49137c7ca0c141d9805e9503c9d6a6702428a5f5bc1e9c4fb0e8d050374e04b85bf05672140a044f73907d056d5b9cf916ef2bc6113d27b67225daa1bd8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
859B

MD5
c8204fece91c80917cc1c8f8ea6d7230

SHA1
1ebd37ae6f652e2e1714854a0a94117372e2eb57

SHA256
9a3a4980b7c9d85c93655367480716f269204e044b972601869cded3cce1ea6d

SHA512
0299d5fa7c50089d0261a7b69bfc09f39adb270c254b131340333208a6ac0e0d67c0f9092b680dd0d043e8bf220234fe7c1f54746b42cbf318edd4988fe69d7f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
d2a5e3a18948a3f49e104e165428409d

SHA1
16184640121e4c06af3a2b8e07adfbd7f00c3068

SHA256
fe3f209343536a9059b54ade9b3fb5bb4f50f268694a6ee88c46a961d5137b61

SHA512
950bd29b56471e23e9a3a7892841342dfedd80368dc33d0ee51554b8c0e76ffac36f70e312e506f3d0f1e1d5111d61d5904ad5de783a5ffce3b2bcaf06ca8cfc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
80e158ffcd2c7e8884716f50a59af93a

SHA1
f736865a50f78c9671cffd131263b5b45753647e

SHA256
1b055f86662602dd3dbca46f7bcfb045a9fc1a61b9e4e8030be52f4df79996a7

SHA512
1538f7d3a1c2c65b1890bf4c8c79b79c50b12d2c8b5a7faf128e01af67aefc793934cfebc02e30e52f8d3cf740dda6881f1ce131136c3516be40840af85f25d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
b83f7334583ac5a2ce8a3c2fb80e499e

SHA1
eb32e656126844c9fb5aa38b1f46df01ad3e77bf

SHA256
382b6c445b690b17b8fc99395a3773c643b54562f37017a33cf145fd330b74a7

SHA512
59e0029a8bc8b2fd5d5fef0492563548f6044c9d8d3b0f152f3b823d562f35a329b776b048d77347d05bc616dae641ee31ec24d0501154ee0e0434b26830813e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
98de4d9219133ec970cd0ac839804a82

SHA1
3dec8ff10e7dd3ee752bec384a174d8b89c83cbe

SHA256
1af48a1795c25b59fbe5daf1442c32e7083c140359c58adf1328cb7891d8c3d4

SHA512
6e381aec9964d1f20b92519c721d9ad08c5fd74d1003b4a45d5f02b048b378d86d2b308672e5f11e165f6c8ad00e3c52c9657fa4cc165b09976b305c1cf64f95

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
6979d3b53bcbb144bd743aa7f6b4523e

SHA1
94d886887b2a64791bd899f685764b0721260c63

SHA256
7f5e8836746ba20e8684979363b096c974d50169b5c4b8d069172db36e5a5be3

SHA512
bcebab06f1b53338e19dcd312f2781ff5740fd7c0ac86c0ef2843658a1798d27623668de2c46a2f5a48ed236689ee8962972b8673eccf61f3a5b33c905f3f575

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
bdbcc673ea503d81212c383a780f208e

SHA1
d0d8c54aa0e0e641065a3044d3d42594ce69edbb

SHA256
c31c72fa3fb29028e5da36bfd00ecf4875b16818417d7fda5298e511be609ce6

SHA512
79db6fb92ca99f9cbbb4ec785bde38dfce1ff192b1ce7a7cb633782dc7106a8833a546d6983fbb61c42f26e2bf579a8f9b3ba8f69522788c5c0f81ef179c2df5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
08795269266c329e87459d10670bd1ff

SHA1
753e9eb34dc4abe48692bf09a1c141533c971869

SHA256
5a40ebcd28b59eafce0182fe3536f3bdbbb34b00025b923350b43f4f0b16e9d1

SHA512
017efc415bdaca6976f4f66f1c6aa9a9484d71deada169752dcd2a5b424e52c8c4ce19abad23544b479c12a9b6749af3e6fcbc30c9db454646133b3bcd3f5bbb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
859B

MD5
a7457e1a6249e9b94e971c541218b328

SHA1
bde91d097150dfe9980098e94901162800893ab5

SHA256
208cbe3601fe90456b71b6b0968e0a1a1e724c57b5a6a1f1135c7ed919dc5ecc

SHA512
c0bb1760da7c64b591d343b4d22472a4154575bf95e688c5dab51fbcd5e492a556d26799f7a11311f5b6062b6d646eb63583153a7cebfd7545346451336575dd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
5df6c20141d9adfcf52bb65d866bb617

SHA1
1e3d3b75f76b83efdcc19dd38065798692a9d575

SHA256
8002338af7c12265c25b7e28c0f3ecafbb05776b14d2d6df774a4ebd42cd72cb

SHA512
ee5e542df1cabf7d40473ceca81a8c64c4110b1d653d9b0ce8bc8f341f0540a92ea4107961056030887d4c642e79c7ccd33eece5c58168eb05ebaf900b4cd733

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
8c8265e3bdb5880ced45f1d44a26f614

SHA1
13648b315af2b06a88ddc350a5388c8231496efd

SHA256
9e9cbb8bf4d335ccf6a2dc469510c44a4826ca5ed37b29fae024dcb5be240d8b

SHA512
41b0738c16c9184517322cc598cd586405abb92a32a6e7e2984c3939250fc6c44f5e100fff07474ab04f6ae1f1be8bc9d38795d4bb8c349d6ce2b770b87f382f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
0ccb4ce4630ecf086ca4c550e574efb2

SHA1
1373d77f61c759f13baee4eac0c4586123c7d06c

SHA256
bb17e6a8cc04fb8b7698b107aac38c05222c7a0acbc76b1d5ad1291ce4d59549

SHA512
bf442909298034dfc194262d4d349c3aaa9c7160e11ca4c84dcde6444f05ff3799475013ef35923d72980babe1545c83c032eb3efbb79bdbf3867047abe0ce02

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
706be63ce69658806fabc68aff691bf4

SHA1
f6139c47fcf4d3e8a79cca8a0fe930cbc3fa4d4e

SHA256
4060e72181401d1a38dea306ea2643b32ae76f6acdda18f741fd9d76dc9a8b92

SHA512
070f7f6011bf5c50384f26ff2266ef366340edfee409da334a19b8ca20ebe32bed9d7dfc772272a21806fe4b93d3e68ba47138a3b4d317ef4fdf4bbc73703d30

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
424ed6fe828b9cf9df087e77348174d6

SHA1
0daebcfd40ba31ec995bc558fbaa2942cc3d9816

SHA256
aad79b0d01f1926bd869933fe4061dc2376196e27a8410638d9855b0a27c9a2e

SHA512
a3bbc04a4f50e09ce2e362fcfdcdbd8beb4b771c7bf2107ddc8a8f3884655b0309f8929e26fc202e796155d4a64b245786887281a836ac0655ceb177a083e744

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
99a9e382a650a6d2e05cf026d5731246

SHA1
5bf5934d399a6184ed3d9babe378971071eb9fc1

SHA256
a397da8c141c6bdf507738be0f33298cd165279b093b73a7c85ccfbde8fbd57f

SHA512
a86efa8edf892a08badfaed117d94aebe085a2c706172bab114ec69b329a13305773c66efc5ddd2b147c05510f843879809f9fc4d32100adca07f75cd497ac77

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
ebca6ed0fee7201cd4bcb6d962daa486

SHA1
3e4d3f9dd4dc6e893f0e4b5547a664c9756d3c9b

SHA256
26c35c991a77bdf89a9b934ef20af87900f2b5f9fcd74625b1a6c8b4159ae59c

SHA512
87c37504f7c0854f162ab5bbaaadc3ac76b3a348601e74fc946db0115da68a59e6fbc33c925ccd9a863f4546e65a5fe62e6f67fc8de88627d66f17e846505bf4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
6b56429eec929107f822590fea3dfe54

SHA1
b9928b65627a8ae360d43926bcfb75e2ab59a953

SHA256
fc61d4e55f5d2edb1bf441fb9f8cd77c6cd4d9f1815df660e04ee472864a23a8

SHA512
dc048a7205379cf30a4d3a8767f4dce2f9c67710ce534915fbe7ca7252521b1387c81aa9de98e0564ba65e8ab022e70933532a04f1221f40bcfa9287f984f62c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
8720ac2b9057fc129ffb06a74538ece3

SHA1
8867ec7e19e9964dba749b04e197cc68f2873b1c

SHA256
cb902e59c8c19efb3b312ed4987e1aacf08859dc7e5c9747eb62ac08879389c5

SHA512
d190d535de88e8de06c4ac19dd02cefcb335355342c43c4b4ffd5f7dc3435224f2ced204ee39acbb4befb1b164cb5bfca0df36e87d69dcfdb2e8565148eb8b3c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
90b560fbd1c9721acbd1467c271c21ed

SHA1
86c47cbc16a4f6406a4d5356801e6ef440fb5cf9

SHA256
2a8e6553976f3db97f6d52a23dbb5138a60d81998625274c7cccc7f7d15d791c

SHA512
e0cf9f55d68996f3c92a4b4dac1e834aa6f9a3f2033c61e7c11b788f1a16760c8a621f41a59d92a44d0147d88c521a99475573bd65df082dd95c17edee9d75fe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
48420ee132de4117dabae3f4a3785b37

SHA1
e1162ad805f92a4f6c1aca416f24c77d2d40c853

SHA256
f7696c54eb32caa5a39da5d3f5553d0abf59ba3fd0fc0948dd94c8a7f0935491

SHA512
ddc61b4c7fd1ddabf25c6684df059b0d972e05711563733bf61a0f5f80045df53579ff344ec7dcd752bac73c6dbafe3b1ec2c4cd0687687b05cacd6e1b4921d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
63134c9920f80ce55a1483d6b7debf23

SHA1
1bc92bd27c28bc670e1101f922b6affa64abd53b

SHA256
d7a07eccc17d1d4365131d983e9b4eccef6660f2a39fdc8dfa41c005e1c2b432

SHA512
890ef5c0ad07963b87bd0ae0929321bd14e3cb0d89bf3742949913a70d7edaf67efbf117b34ac03d5378c1e38ccd13a6fc920af91492f0a2af64d83284b54c78

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
70ec8cb46d4980f190edc6aea1f4ef32

SHA1
ffeef6c981442ded4459e7308f5fa4d9ba5dfdc9

SHA256
db79f3c04573c967740a5d6eabcefe17015a596bc218a976ce2945fee9372aee

SHA512
c6c429207cfff14d44b8ba5fbea7746ac26341400604e6cc04240cc6c95ccfdbdd7711932c8964b352bccaf91a782a79b97b101eb18801cc3441a057d6ea56e1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
82719439528faf63ce3eb1882ed7475c

SHA1
f39082fe33a25d99fc51034f63aeadb06f7d5095

SHA256
fcb3f98cf005199bebfb4b4be2bb70fb1fea0f570da5ed2cc78b6d03f4804e66

SHA512
2cc3892770e30d327f2c056a4d8294c2607183ae39080deb999121f11989c3da75a1f5cf066cdb000e6e952ab3ffcd0b695db4eb6943b64580ad1b512e120d64

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
c6955b6be4b40e4bb39b59eaaaf8e063

SHA1
3d025a55534fc375e9e0b7f24177a2955c16b485

SHA256
3afdf3c1b52ea3da8d418f6e1252c704d988398a7fff5bebedcb6bb407a2f56d

SHA512
28ef6955586f0bf5d526c9264ed8fc0cb97c3b14a8957e66df93a30c0fee002d2ce352fc067cb197c9b98e2b4d393dce4165380b9cd0afbf981cd3fba15265b0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
7a1a1a682df847d463244fa2a99b7f54

SHA1
64235908d4d5a16856b2ee74b6ecbecd54ff128d

SHA256
b9b17f7e93db88142f704ed26e6c6f79c61aa4f95bf159afc665d9e6551a9f83

SHA512
aa14b36abd85439d9fdb7df69d0a71fdca7dd622e59a0d819c42af82fae9d349e5ad7d1b127e41ac6fa5c4000fd56f7ff361fb0c649defb3efb0372dfb1c3742

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
3019093a417787e0d38208f7a43d4479

SHA1
bf2e53c7070380114ce05fbbe8da7155797ac949

SHA256
c545cbdff633272a2ee38102746e0b62a11a062814d72590afc7f0bbc812536e

SHA512
5a4d9dc708ec6ee171a2bad21a1b09e0287f05222bcddb8f22321b6ffd37713d0d7d76b69a7632b0c6c7a10184e42499a3c2f6968879189be5d7e3cd98bd89ca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
c685a785d9d94616addbb606aabdbf6a

SHA1
ae2cb458bcb74883bb6e0ef11d51cba24def9fb5

SHA256
74581f7eed21cf2a0090917eab55e742ac125e4ec3ea3e44c2b76b4d2e6c57f1

SHA512
770f8f78dcc6419d75501b087e182a89adab9ef52a988b5cee437152649c25d0558f1923fc7713419d8edc494efa8006eedf8720939159f9839afe535a6a7e9c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
743a84a19ec6e5ac686784b65a6c92b9

SHA1
78b43285c029f53f7054c3d1692be0738ae97c89

SHA256
02a584edbede139c3a2b4c21b2acd0126e3cd71fa789a67ec8563b8fce7dbe2e

SHA512
ebf8400621c2d3c2cbd1a153c21b4fc036bd49924f8c70844a5f969d81689e942470bf8dcc5eb436daf4bef3b7fd9832e4c99ea705bb6c13175607dc12838eba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
5756eb4c8d90e976087af4f5bc52ace0

SHA1
7ab4782c0406e752b599bcf8d957dc825ee0a044

SHA256
0bc36e310282677a4541d8e65e14a48212e9d865e9b304e2708b4a8a93b2cc4f

SHA512
59fae108824aaa75aff11be8ca5a45d4e891516e971e4d2739104d32a528ba48b0c308b5bdc074cd6ea1539cd12c7b2a853d3b695e4947b21cd0e1df028212b7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
1c86c86a7423f2cfbc8673f28a4ef533

SHA1
2600c87cf1c51fd0432f3fb33aae9b8d68b280ba

SHA256
9c23c8ddbbb7266bec9e5c30b91ffe34b8034eb8b4f158bc68ce7fc956342b31

SHA512
7385294e051655930c07d9a7f464a1622f6ff05d844e8ebe9f24ed7f186de79b339d7aea303edcc67470547349c836abfa500dc41f19431eb6e3b806c8dc7a24

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
cd1613558ce5a6475f9023daac49e0e3

SHA1
e9f201ec73bcd534b5187a3d20d145c424f1929f

SHA256
1fbddeaaa874e595da94703a03bd044a2553799af826a997b7df7558d676d4b7

SHA512
98e3f065fb98a9fe0410aa6800570d07403fa0ad39efc5f367c4a8c16ba92c5a24297407f1ed4221d264241481ce8d200e5573b1b7a308e6e2a1a936c2351979

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
971c599143a0dd64151472fda4d4e2ad

SHA1
0eafc76551044ae93e8c7acfd93dc38a7d822a3b

SHA256
e54f5f019447b1362aff53b696e4bb0f50526ada52e7b19b84853030f606bc3c

SHA512
01d99708c7adaf91ad796c266b75e47a60a5bf55a6c037fb163b50e07f152f09cd18bfbc49d733559d7fc2ffafa98287aa0ef267e69082d1ef60bc7391bb26d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b6c4190453f6e252920d7cf134bffaa2

SHA1
5d38ae1422d78d16acc224ba4cbee9b4cdfa760e

SHA256
67025403bfda0c4a9dd966720a694014d461bdda6d23515040c590488346c369

SHA512
adfc3e2b14e5afbabe073a3c24daf8e3b1076cd6ebeea09849d5f997c11c11b1f95a598ef41023388cd53f5aa329631fb59633adf930051881280476848ace8f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f6e5cf581f9e1df14ef3444675f9bb18

SHA1
1646bdd9ce0a15cce020758a2d7c1e5ece969aec

SHA256
b1c5bc082d1a84a8d346b654f8e69fa24169a4dffab2795d0f23be49089ecd92

SHA512
ff77477c2d475933480463ce7f439db2a2abcbf44f6cfb1d58120f07fc8a22c3fd189f958c7eee933cbcefd0acc3caf28722b5a9266f7e6354478529bcfd5530

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
ad50c7c0cc14421a4be78a68b7b56659

SHA1
2967b256ddf7352cc75594eb5464da20131903d5

SHA256
914b45f053efa5b1c76fdee8a792c80a8a98c3af18c80fe63f13f454ac8d7746

SHA512
e8973f1ecf6b303bb5980cab8f004d192799fdcaed03f37f7623a5c017faaed399aa133dafed2ce7caea3301099915f79626cb52a52dd4a3d60c0c0ed469d6cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
86643ad42ad826d43505bcf97c32b06d

SHA1
597e2b7f0bec976678daa8dbfca8fdca7c279b5d

SHA256
11dfddc7c3bd5822c33f8af42beb44daa78eb5a902799c7a7d5d89a0eddc0b90

SHA512
3d5e610ba996332155256a1e8878040c5d655d22f4ff88df725824fd995f43e7442e42ed4373a10d029803a83c406cfc752d58e06dad78674aaa95320aee5b9b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
40c392180d536893ba4953e235272df2

SHA1
3142f1ea4f6312f4fb8773dd1df3304a0c579c04

SHA256
9e97b2ae1918dac5ef82841f0a0ac1497dce345f4f099b41551f5856cc908617

SHA512
f214f0f69716125cff41de8b4e3b37ff78ba934a107587ae9b443f2fbcc69774203548b5dc176d0b7e61dc855656f33dcad690d47d7988a948ed8ff2fe62baeb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b03e3cce403882a9c78f6244d5a3368d

SHA1
0540ebf616fb825f77e815a4bd5573c3ec82fae9

SHA256
18bdea199c4b813d025acd0aff2ab7bd2360e45523a451e1111df4ce2d8365a8

SHA512
241b46eefd40f93c6709d866efda85fb2d67c4c8418560dde3067d8f9056409ef2836d2ef3234ea05cf3ce24ba19c05346e04a5993c18881aab930d6a7ab1ff0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
6a515d6e442d7eb251947ee5d330d500

SHA1
13f2a2ffb25a381a190d202f2514d11835a9015e

SHA256
ce91ddb9a6525502bc19bb9fd37e08598df11106c141e35991451b1ab559adb2

SHA512
82bd5a007e8bde66a1cbcd6c18d51632b83cf2d815a37a4794a68257ee8a0ea9e7375380371869b1f2947f6c220999e7d9441b6995548cb84d29bb1cdcd38f44

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
c8aff3cae710e95fffd96e8070551415

SHA1
a976238052daffc1218bc65fbe60e0f7f4a68b8b

SHA256
6ac41b5f78e1420e584d75beb0036cf5daf0fdddb251b4d569c7150258d8915f

SHA512
a17fe46d9ba3e298b3bfadfffec01a03d0a521cf270978759772b1f0356b44d46903b7ce82c440829db78f4d53bc2e7ce44311f3f8cbb267e86205d8663cd247

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
76a995748a8991711f74af25d548ca0c

SHA1
83800e309e825308396221592df016edfb5a58a4

SHA256
2c17283c50876f8cf4457327c4fb938c7643da7ffd4120d970c3f2ddff64b787

SHA512
abe0fe5d4f6c522336acf5cd421eacf684398697d78c1dfcdff3fc8bc3aa4e348a6d6ceb34ae90c1eb6807e082979fd8646e07921cfd8c798f50b362f0a249f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
d108c7418d752a13ce837400f259a038

SHA1
ace3542af86f319eba1a5e08d45de0ec5770b171

SHA256
e320a593848a15c8fe559719335704dee24e468a32e30700594f277f854cdff9

SHA512
7980474cbac9286824549b411c2881bb6382c056872a781598efcde078cfbf8b29aac572f247bfe20a768a51411692f3df1ee76198d1d0bcbe6d27f46002ee5f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
e5f0816f468600aa74b5913f288ce0ba

SHA1
446afced302169ccd96bfab09f4c66b033de105f

SHA256
3e740ce448e13ba7e2a583a0f7634a589b8f865952bf91690fd2f1915b059e45

SHA512
b8a110849a3c242703bb798f9e87da6066033b447508b6c7786bf942604f334bc8ac0318d2f50fa26b657c4c98900b963c597a4a9c78ca0d7e1ff9deda8f759d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
7d8aebfb43431324d215e4747d4e092a

SHA1
109673d3c81ef9ed8ccdc3597f0afa80af40d156

SHA256
7ed0646c40ba82275b67b8216e4453c177be734155f27fa9aa54ca8dde63d59b

SHA512
6ac0fe60af42a272647d7335d9635b08b4db52a3f3eb0998783d297ee851fefe265a4d8fda2374ffb1375e6a2707bc09dee4c0ee42fa2bb3d03f40788acd7c8c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
7b8f0a19f4c056a839693f86fc1a9ec0

SHA1
fa909ec6822cef27d8ca0614991b8fcd125540ff

SHA256
a1d08f78b2c16d01825784ead933865090815de54c6b5a9104fbfe0a5458c368

SHA512
c1e96bd6b9fb810a6db21e8788565aea799c1c0471a06847c81c74d2e63f9cff372028a917c641f6a5c1c09ed7a77429f859545ac51cd97a676f4563320f311b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
3aa7229f514fae6b26d84a5c35f9f848

SHA1
5adad3f60665c8357b07daef75fb915645e8d3ab

SHA256
fedc762569452915697ef89cb3070768386983df27c841ededcdb21282829543

SHA512
25904cdfe2825f7ab0290cf7249266e02a78d5d178e32ea51ca5b75bdd784e70a7e0a005e24e41f1efef798b753b0a077615c37235cb2f0ddc50ca7c40d6f5c6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
8581030bda33394528e759c051e6a465

SHA1
7f6705196d58354f7242cc92d03343f66be3dea3

SHA256
bbd6f7d8a13047399e02ce45a7eedda409498511e3fe7c9279f8c93a01ebe78e

SHA512
fb8ab96e82e7cdfcb9c3b31b4781e6af83c6a2806a49ce8bd6f63f3e782e3d6720494cb5f6985d4ce3d4b7c6a84fa10956781da833e12c141f8164d230996e94

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
6a366892c1bcdb7c5ddbd9b4e107b70a

SHA1
a59d9273de9ccb358a602ffbb563683084f64f9d

SHA256
83e1a8530a8d9f1ae8de70333876225a373b4e4808bde3eda1d2d7d7b34af1f4

SHA512
59631f662537a78445648e9fb2b1ab758d33bbcee8a66ef469b3fed316421b4a6deb3eca516760ccddf8e57a19aa36f76ee70dba56451f12611a5c5372159f57

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
54855f2e04082893ffe0acfc50997d3b

SHA1
b52584ae3e34f7db7547cb6a77e4ee0bdbf9f883

SHA256
6ab99fab7a5a4b1ef6c1e64bfdc54c1018c5c620ba27af677bf7cc499d8b6072

SHA512
b3177a191028b6d9ffdc514d1b71008d9befa5cd3917e5369ad36c48a7ecdc01cc00e462e1b5bcb5f97f09b1956aee049c6e73d29c4456d04b7eb47037d53717

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
da18a7b2874f33ee9b5e06d7a5f00c0c

SHA1
18ff3568d4a1eb32aaa2ab38a066a8f8b5ce5024

SHA256
3845ddbb73b231b21d32c6ee1f1483472486545af10e822c87125bb85c70e389

SHA512
fbf8301f50e179e62714faacb90b437decb9a59e33af8e1a9d296e886907d07ad987b53059fc868ede00f113d495c46b63b052c077025e08571e09762d037928

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
90e8418a953dc416b55d725580ed425d

SHA1
be62dce13aa7d87b41626eab5e906390501c324a

SHA256
c8bae886ae4786f40bc70445edc5212bd865d41019987651a1e8b6893faa1263

SHA512
bc4a620e618866549f927bdfad01442f265201d91d1f6e2c502e16ea2ba9ee49762d5e1349075635310048e9626a100e696c846b83e9588c3e34a05af20c9d59

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
20b9e7fdc9ae889acd17be718e87f4a8

SHA1
3cb84190e545689306b87c3a5ecdc463d4a38f45

SHA256
9249d81b9effe106573de590988140888c7034b81aa6cc3dda917b3824e7781a

SHA512
39dc16fc2ade5a19afe9b8613f30a187f44510a4b22343b6d369f761c0198f3786e02d83b03959a6ee13214732bb2fefdd0618a9fa9a3f83804861e6aecb7263

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
bac2123558945d81ac8fef4b7aab9ab3

SHA1
f8ff36b6e203a33ea20481623f6155562819919b

SHA256
437dd446a97b083cb532ddbb3c4bdf68d77ea4449b70e9fd9c81cfee67c368b7

SHA512
e4e7b46ecfa176f72bed3dfd8ff697e2c4005646a3c0d92a9825aa8fe5b2dbbc5f493e0b734e1274d709be98c32f66f8d71db4efe5e35fde39d99c5416e9a315

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
c0c70c2011389f405c2590cb239f08d9

SHA1
097f77bc0f257cecf958334fc066fb5daf5caa8d

SHA256
07c2e12833719330dabc1a56c3329693e87ad27b06d160b1a062fe415703333a

SHA512
ca8c45ce6839ee3fbd3bcf116b8ab78ae9fade02ccaabcb49c6da13368c11839812d097f03840c0595e40f96db93d47e0eac884eb1a85f1f08008521860ae17e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
e740a8ae70332f92095b4ab121ab8228

SHA1
dede0716ea60cf535e6dbef3a9c0f89ca3a129ce

SHA256
13a069c1b02eb17aea8bcbca1b6a49f3140af9520f194eef272f356835515a14

SHA512
a597dc61880a584b84b731653c93e202c6b1c92b177069d14f58139471640eca86a25762069ff48b0afc5f35ec84a49a2c3617828a43394cbc7445feeed0a92b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a71ea69758a81320b60c9c9b0e58a1bb

SHA1
84d7b1b40cb9f271f077dfcdf5d2cd10833eb1f7

SHA256
908e1f85c75929a11a5275eea39414caf1de59c8d5b7055f646de778db561a6a

SHA512
e8be75af1f4af6e632b2d77e6f2fbfcf58cec8b40938dd912670db4f3fc4d7665a95f6058b559b2a89ad58132e50c6174920ffc99553525594dcada071dd0b50

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
d87d185f94e95075890822805466a139

SHA1
d86e24a6bc8de63cc2d2e81ded04883b4c06023b

SHA256
eb6f7e732e1e49ad54522556d102ca3ee5cf6d5dd992ba5a6175a967f4c47865

SHA512
32d9c09c6826a2843a415e29534e5fb19a7b7c6fa3aa2cd3f7979f12e34323600b9bcfbf89ce33d9d79e6aa93d5348f31700fb5b4af8a1f1b39f379868c04fb5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e2caa8a7f813e5d602b3162294c16ab0

SHA1
f24341badf5ad7ef4540fb9bebd5039343e47dda

SHA256
b81ebb89232c7ed784cc958489e8926cc13fda60f0a5347aa3419cae347eb838

SHA512
a446b9bd13f389d7353340f884ee044eddfc86b43f62e2143337249c89d2607824b66ca2aec959f781f28cf2f7a3e59cb3e57f645cded2d241914f4fcec23876

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
af19f201118102c11b8fa75391f7ee59

SHA1
ab6a3d425ae68b750a8d295116e5396507219a2d

SHA256
52126c22b28b832f3d3f27983a597d94ab4254c0159535327fa95044643b3b78

SHA512
c40e6569239f8e626d324bfd0693c461aabf920ac7cd5aeebd0dc79ea2ba2ad3d4982d7495a21b4e95f64077858f2e3a83aaf58aece116713197b65adf4fb03d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
88239f6e757ba4567bacfcc9ec06743c

SHA1
206de13ad7e373403364a10b1d50c0b4745a6340

SHA256
f6470fc1841bd66fa6af628ad74a0478dd445d2f5a7a51a5cca7b97642634dc9

SHA512
a05d8aadd9cd0ba821a86aed0f265bac29c01115dfdccbe363c1bc483ac582e602464aeb8f9d804e5f404ca2234d1ffb90c7a144cba01f18218fda700f57017f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
79caff8c73134ed64cbcc411e2b4afff

SHA1
523f29027b6535b86ae6085462ef9a8e60a30c94

SHA256
300aee708b6b66091241a1b88781b3a51b5193266294e1dab08e84f165a2b2b0

SHA512
c00f59a84bbb4342d5f30b6485f55433fd979de33efb765049f17a8a15130ba60f8feea9bd1ad6b41fe7610e815f548d9540931e0974e998f829959e6363256e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
9d71ca2f03a275075d100b2aea22db91

SHA1
54d7170bb6a55c90197821500c8a03f85c514efb

SHA256
ebcbb0f5746fc5260b393957d0fdc3b6caed427ab73525359f2ad7e4d343ad35

SHA512
69982c7bac1fbde11254a24ef169037c28afb371503458131c534efbe48fab4a4348581b0ddfb675b358ed65e4128865009faefd6c91a811d2bcabb186e24a18

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
08c81818a2db9d5613dd8552d1092bce

SHA1
603f13c15880dd69645e1bb71736a29678d436e2

SHA256
200850223572ddface101d98301bb1d851cf667ecd2ce281eff25b69e8417773

SHA512
97e8ff27160fb64da1d30e84f386afdfd3ed8d60ac55881a44634f3b3897d2c0c2c0a16afd5811ad6046b87fe985d44d6a4ac2a39f919f4802c2aa08570b8861

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
f2ba6e33f7cd61a94f2656448492db30

SHA1
118b4dcf0408c00ce3469df5055bdc268c9484b2

SHA256
c9b3ec5c378dc1f469369e08d0807bf38528562b25f6c7c2c00e2393e853844d

SHA512
2a6e8be2c0aecc4e0141c67aa4390a4987b9a2501f74100efe5480d6500b4c34d32e45b9b6e6c438bb044c570058631328e857b36754d4db6919dfe76363209c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
9b9bb3aa02a43b289d7b28263574e262

SHA1
19f15d58e063d5cf4cb0aacfa2967ab33ab60e17

SHA256
62c57b6f14e6d57e40b25f5f1848a7cf7b3078c9b94dd1e1494cc22b92198f2c

SHA512
fb126ec91b98d3f5aec9ca8695765635a1f2b33627c411a179c4d5b4c78877bd9225e8b9dcd05ba6c5624caf929128a385442c2b12391ce33f8bf882eedb14ee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
86b0da0cd19aee27ac94edf4d0d63775

SHA1
69b1f1d34b5e8e41ecd2f339578665700ab569b6

SHA256
cc3fcf60bdceb6349d2a3d2bf692e8026532c76cb72545ee5466e08a7a3cb717

SHA512
63abc392673a1c99dd982bafb637a9e862d814ef6a9fafdfcda80fbddcbcde4d54103dc1b27c54083d0fe3a5be88782705540227d1c7b4c2e8e49e0e73ee52bc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
610dc0b161931daec9854a459b959da6

SHA1
babbfd0b18483832b4e0f927b4762f69d1dfea2d

SHA256
009f7d6acafbab1a996f50a914ba3c37d899190720d65d5f9eeec17762fb22d6

SHA512
8d29cbcd7bb428d73f5115ffcc521b56a88c05a0ec96e12a744de7c41034bc04f96f61c0c5d83c345e6de16510711e339e9637f02d73ca24d84b8dfc25873ca9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
d36d8c734aee5eefa0001b52f5ef5801

SHA1
3e42974cc0973d10784a651384e2838a3443000c

SHA256
6777cf8418a755ed6af1791d6ebb9eae81c45e8f6e23310f26d8f0be703ba565

SHA512
409722f657e6c826d1538a0202b4f4f61c477e342160e1c595bdb6b2f57abfd7229a9ff4221b3992633a71371881c4fbfbb243acdee77915132b31180fc5b898

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
60bbfc3f3a07ddcdb06e932895621ab9

SHA1
e79eb6060575dd2657b4440fe0c9c8cadc2226ba

SHA256
ff2af30c638853b4628bf123bc2737335b4a14ac21e8a97fee4afc087f0290ed

SHA512
eaac9dec397c3b2beaa3d1e205c7f6edf41f954dd03ada7720636a17447ade772ea117fed114075c76b445cde2d61a1b5444147803e1c4234eff318942437800

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
50c8ca84ea3c130cc807cd02e0d66863

SHA1
e3fc92175677578b9fbe1446f010c6680d6ca65e

SHA256
9b29c1db4e12052ec48b291deeb55aa4bebac64ae80aba2ce57906ec6485bfe3

SHA512
0dc73060490a4dc5f1a301e14a2aa7f94584b1d79d082fdb9090db071b92cc6093fede6958638b23c82eee86d534e61f0a433512634b63100be95c94859766dd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
df250b88730c2feaa7d04875448a43e3

SHA1
b8284355644e312d2d568289a691fe071dbdd51d

SHA256
a228de958643acb3aef71f3cedeb52737876c4b8a2ee1b4d81b62bc9551b30bd

SHA512
d1ca5b37cfeb7b4e13b028708a74f2ad76706e654b9e8189c3e747374cbb071fcac50f5f7e541a686c28be6bce29ba4aeaebbcea1750712f22ca87b796724291

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
b9c0f89c2b75078b7d83e7be26d4bca5

SHA1
faa373cd45ecaf23b867b3097252783923b9bffc

SHA256
390bbd5f9aeacd1990dc5318867389404cac42368146fcb17155255792d429d4

SHA512
49ae8b09798a3011b97f7103a03f1d1b174549fa3dd68e1e03b760023de491092794dda632a10ac1bf50c8bbb0741e4cfa0697224f8c9a4c063ead61dd23b241

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
3b8afbc085af7ec51c6511060df00656

SHA1
3758fb3e7b7fc4085438e214ec0a598009f91228

SHA256
10956d1390d4a85d74410d452a6f2d4422ac838eef98cdd6919c8a6d2a7f5239

SHA512
e563baebe40251e4c40e068f5715029d6f084b235e909f2b61a7dc4032b26ca9421e854c5948c2a0397a8d7b4d2d224a57babf208f92318371ad29dc66290593

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
e02fc440d2c6805cb6fe4eccc702f36f

SHA1
482ad89fcbdb6a4092141b7624bc424d8ad5827a

SHA256
f6a193b696c72fa0abf9f95169bba7b9135d326d8c028cb22550c3f86009673e

SHA512
67fa327c9f3e1f0d5d10f5900c8ff7e7aabf1eaeed11cbc5eeb44918066c6d242267a4e5723f6f48d62389b7bbde87560c3e464cf5823ba3df3e90ed0fbf32a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
5a0c33cdf6299adcabe8675a84dd903f

SHA1
3353ee4d309fdd6eece93a7376999ab078248cf8

SHA256
3799c158a9c0038e06b45ce2c6ebbeb6e684b521f953be884e0888d74271f33d

SHA512
040c59345eabf565b6431f346a98af6df753e21a81b64a693e29d3860b3d74b258d602d9449a72d5ec22043811aeae8c9b3ca1d13658db78f81076264fc1f6f5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\03ace25b-f3a7-4256-aae5-d8aa25ddbc57\index-dir\the-real-index

Filesize
624B

MD5
1dfd6880648b001dfcb58441dc94d845

SHA1
27fa84efd70611592ef523c6627352fa1544a4e2

SHA256
5dfe85114e40d21a27fce40419571bd4a53b8683b5ef7560d8bc9dc692ef2304

SHA512
ff8cda497989fd741f4c1a6634f698e16f8f47ee45cfaa94b5e9cd4d1e1e805d1dc60730655b9973497cda2038542abe009b6ae726ff8434bdd7da70aca892f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\03ace25b-f3a7-4256-aae5-d8aa25ddbc57\index-dir\the-real-index~RFe5cc357.TMP

Filesize
48B

MD5
f11530145bf586d16ef1e0c1f6d05e13

SHA1
c0c42bce326ac580c1dadc82dadd0292a2b0d4e0

SHA256
3d72408499d648829e4e7579a91a76e08073f4a06b89ca7ee33e38985389d096

SHA512
145fdfbb26799c3d6c41cb6c6d69cdb094e2b5a770a3742d905f674e0c61902e64d1f1bdb56f5b6a07f93174f72336a94ac13de8aa176863abc403020bc2153e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\69bc7c47-7a13-41c9-8bd1-10962ff2d933\index-dir\the-real-index

Filesize
2KB

MD5
1e238075bd66e2041ebac775cc910362

SHA1
d5f674589e5d1ef79fa253dcaea6dc2702fb0e38

SHA256
7d6ddda57d11b881fe6fe453336101f311e2559e865f55aa10583baa85466842

SHA512
53c7bbc400a2ef30ca3640e89007621d6b30819a771f7ea56b288bf7e02d5fa33a760e515fe59e38b1aad0a94c61b32ed2ed191e7bdff2acefa27750aa84908d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\69bc7c47-7a13-41c9-8bd1-10962ff2d933\index-dir\the-real-index~RFe5c6336.TMP

Filesize
48B

MD5
bb63e5b6d4967661b2fdcf8ee74f5a0b

SHA1
364a8c96bc2a3e602596bafc6da877b77c43b151

SHA256
66702df137426ddaeb3c6e15e4db6d7ed6609854aaf3dd0edd96f3eb50788c4d

SHA512
7481ee5040a129b4d94f137290a6e9a34dc460fcdf81e46b21e701619c3a72fa7eb0cee74a20751e67b283af43fc95de20793b4509a265861cb1e56f048a1a41

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bc0016e7-87fc-4dd2-a3ca-e0614c14ca00\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bc0016e7-87fc-4dd2-a3ca-e0614c14ca00\index-dir\the-real-index

Filesize
2KB

MD5
782440b4da890d81d0046c7c33de6d0b

SHA1
24be916561435b514b7efd767b4b03f2fea26347

SHA256
857ee50bbe29645b0a633a3d0d290369aa885a5bfb37f8dd8e7b0ff57d1d11f9

SHA512
d6108074bc9d57254671f9a5ac1c5926842b6303423867d606e12918751eca57aee4d7fdcfdeebc86d07b4edb0e44bb4ecbec8fad841ba471d46d859ecd59205

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bc0016e7-87fc-4dd2-a3ca-e0614c14ca00\index-dir\the-real-index

Filesize
2KB

MD5
56d20cd3031fc39691bd334b6bb52f05

SHA1
f74e0d41b602bd037edd835e3b4bb231915c0baf

SHA256
d7ab9bd16e08391062deed3d2279033d2b30edf77befb718fb1a77bfd5872158

SHA512
d955f79a0d05ad40282aa71109abf192348e4dea1bcb51874df17209e59fa58c0cb236a53156c23df02bd70e92cb4a3c7a07f76b1a3f93fbd2b32e547f801abb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bc0016e7-87fc-4dd2-a3ca-e0614c14ca00\index-dir\the-real-index

Filesize
2KB

MD5
a41b499e2265ef8cb4b706bf36b129c5

SHA1
0c100402669a3de7e6479c764863edc06f0dfb41

SHA256
7cf6199b52822a3815b3ef79f5ac70e71960e71c4664758f62293da89ace154a

SHA512
c1458af49c135dbd9a3f549c314e3af481a62f0ee9265777164519abe3aa5d6974a38974b5abdc496a389ac177bee4954baaa36734aa3dd767c07166258a9e1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bc0016e7-87fc-4dd2-a3ca-e0614c14ca00\index-dir\the-real-index~RFe5cbe95.TMP

Filesize
48B

MD5
abf2940228173dd3465bba55c388e2c8

SHA1
338203e1ba65ad8ca6a98c35ec62548c5aa161c4

SHA256
f2b27cda1fc73bb1cfe403dee7f64aa4ee33bfe2e30cdcc417f00bea72772586

SHA512
5dd165a7f423c6368157c8c09b21a0c4a6971cb5e177ce8f73a7b620ac23da59912c99f43cc0aa433082f89fbe189e9ca542bd1d93953c115c382ed60eab0abe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
176B

MD5
45fd362e32bef736c77b97661b25dca2

SHA1
1c4249f4bcc546737a893a5f0191312e3f1563dd

SHA256
c4d8d1ebf631a50c629604d9cccba394773adf6a090cfa62bc3bb9e9b139df6d

SHA512
86010c246fcc3f883eb74821d880b3d0da06702378de6b556b9733a3a92fd294adeacac79a5c00666b1cc312e746dbbe72e7d83039b52dcba943b97c93c8a695

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
112B

MD5
301368c329d4191ca854521f7b35bf4e

SHA1
5ba93bc549054940a6e3bfd88ba979043bf7b5d2

SHA256
4feaaae18db2171ecd77bc220b3cd0f0c5820fdc8c8becac21a97932ee180e1c

SHA512
05efdf687bc2dea7c7cdc8623b65b8650954656183dfb69759bc6e13f87164ddc916b0f695d1faddac087791c71fe176c883bff009c561068b49512da95b5e37

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
247B

MD5
02974918144fa720b33d6628484d7a86

SHA1
202edd2ad15333bc473854fa160183e123855364

SHA256
b922d27a7f2e8e77a485b93c5886752ba21ff63328410878c67ab6731b38a9f1

SHA512
abd5ea70fa99d7777cde46299e4ea64dc8bc8f5ca35a1c0fa6f9ad9df18d80678ed54233cdcfa656eaa60cd61b68274039f387b2234e6c7a7679c2a4723875fc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
120B

MD5
82697e1543131f66c9db488efe330303

SHA1
e3b9fbd2e2f768328493bab0ae669c157f4d2273

SHA256
9812f628148751d8a6ad18f4b99cea9e3737bbf38a40f8737e1ac557ffba83ca

SHA512
75772f8c206a308980f5ffa33cc529739bf3c0c4fdd968fcfbcf1b54063cfd53aaedae9f2629a079f1614babcffe3d3e85d5ce862be5723b71ba589909f6d54a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
176B

MD5
24b026acaf45818191eba12f073d4967

SHA1
676f1109ef3eb6e254f7da7b1ab8e7b3b9c9eb86

SHA256
f842c027c3ce8f8495eb64067d5c13dce66bdaa0b424bbdd92f63c93326879d7

SHA512
82802e527abe6b0c24f87d321a45097700cc4fa30001f8cf32b36e0b4ddcd36518b9f87f1e6ab96f854060e47ae0b972b1f3f7c9ffc1689921403daf09a37b5c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
185B

MD5
ff8bfb92c6e363f3bdea0f4381b72ab9

SHA1
bf476c190d56fa3ed31f87e2b1943407989abd30

SHA256
e6543bc27dd241c6d63b4d95f00eb628c6aa5fddb5c63b91cd7f9ee859ef91ee

SHA512
de9c68b56a4e503c66cf19f3f499c01fb93ad7f2101b4b362d87b5cc187455f87e2760509be640554e5159d029e80d568a24e5f79175c096c9ecbb0e512c1298

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
56B

MD5
94275bde03760c160b707ba8806ef545

SHA1
aad8d87b0796de7baca00ab000b2b12a26427859

SHA256
c58cb79fa4a9ade48ed821dd9f98957b0adfda7c2d267e3d07951c2d371aa968

SHA512
2aabd49bc9f0ed3a5c690773f48a92dbbbd60264090a0db2fe0f166f8c20c767a74d1e1d7cc6a46c34cfbd1587ddb565e791d494cd0d2ca375ab8cc11cd8f930

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
112B

MD5
b8e28b03b84a5b15aa73336b8e52eb57

SHA1
70c746c68864f1b2bc7dd9285f085dfd6e6f87c5

SHA256
f403eb2971acb52b3068ddac65d3ce7d7f3dd4758992be44934165afe6f7c128

SHA512
34b9ca9e772ad57c4acd8211679705ae3814352d48064cb03575175f3268cc1ce61de54db317c231e2099d4d5c8b863d109ec55bf4f32accda089b0a0c2403e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
183B

MD5
8f8d42d79022beb881aacf07b3c3f634

SHA1
eb9bffc8891fea97368764f0152b5f9d1c1740e9

SHA256
faced6dea25245111e965a061af9036b2b43515701958729cde9abbb6ef722e4

SHA512
680cd76062d65feefc6e3ccc2540b13429dd61ed3d489e039d2ac9f134a224d66b8cfd3d42cd7138665f2447170a9b3c152dfe8c202fbcb255a84ea11001e72d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
183B

MD5
8c122315ba2a3ce1d487e0a8ebafd3f6

SHA1
098ed8fc4af697a6dc6392419f33cd0b80664b9f

SHA256
34457452d394eda2ef0d9332f3fec29d55bf1bb8a0c03e1f23aa825dc13c6ad5

SHA512
1b730f51e7eb9181c47c2d9452522b98fde4553cfae8b702ec6646816ca49f1bb47cab5b521178189cbe8c4cb7ad26ccb9b4b4e2c27906140c78cbb8ee145370

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
183B

MD5
cd5f4f9f41183a20c48b44d8468ea0c4

SHA1
d7a48f3ebcfee88014b57a61eedee7ab31b8156b

SHA256
31a8de5880ac75b6f040020061bc8f97cbf412b2141982ebf0da5e18620826b1

SHA512
9f892929827426fd15115c08bee48c2a5963813e67fcba3054d28ef72f94daf9d3a1f8a2f7b21f6bf5dd8213b41a6fede097aef67d8b765e81c093224d8b8e22

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5c1d92.TMP

Filesize
119B

MD5
b78eed4b13e99f743b7e48193c3bd464

SHA1
f0baad3c4399720329fc6d7f92c60f5d6d006ba1

SHA256
02b87dc0506de115621d5c9ea5d3f5af5add1cbbb9a440447b4f527816897683

SHA512
cdc81e5ee999fabdac94b1e5c2a23f88403899a831ec6141aa33c526af467443550d06122aff83bb25afdd5d615ba873771ca47eb160dc53bf741cf0c9a90824

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0

Filesize
153KB

MD5
1b132d6e7176446e150a0f46ee665c68

SHA1
d33b203d644936f8d1fedd58022843cc0911e069

SHA256
9fa0376f0e98718a5ba67df0563734b785723dd95bec8240aa6e1e91d6bb3233

SHA512
8a0a704bfdfb0fc2985ad54188012bc91a45cd84b72fb8a98fd4b8cc07ec3a16301afe7b661969647bd929a6c0900dad60a8b8bfff490106117849be50bb5df3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\67a473248953641b_1

Filesize
410KB

MD5
10c84da24383e9f0685b9f94ad5468e1

SHA1
778c114f14acc48ba70a6fc83d883372c9b35bba

SHA256
279fc610e53238280c77a593cb6d702e85112def1d5269e75f45f61f8fdc6eaf

SHA512
724457ea946fddcca2d1cb908c8ef2769014863ea6d60643c5d376769b544fb036fd4f795632c130a717657484f06255969bd9ca102b7a42171e7e130480318c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0

Filesize
16KB

MD5
654582404734d1f9fe9e399e0f6f1ff2

SHA1
7be5586e7a0de45a6ae45561e6203e616918f17f

SHA256
b07884e8c057b14f9cffbee98fee021a69511e4c828d0ac2f80f9bfa6c6e023d

SHA512
5fd02b5a01b42b8279f9b3d51dfad54d6981d8652064331554010f996b9e15289e723edf3ce7fb06ef92f45434eeefcb741426aea1a1f2f40864b79afa2d5501

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1

Filesize
11KB

MD5
3df99b66f59be6ec1a6220f26d04eb70

SHA1
6b65368d8e4ceea2c1be042b8733123dac9fb66c

SHA256
81595bebc5b8ee6e3b30368e3bf285c919ce197103b0241547458be6374ded71

SHA512
1b6bfbb3499653fa84048b3ae048f9ee7c838e4fa8295ac223c075a2806a0daf1482fa9254ffda6769410768061da838b09ba5fd64b21c3d16e5112bbb445eaf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
144B

MD5
0b3cb5c1658a3d48f88291c48f067e0a

SHA1
da821c6507d16f4ed18b08f32aa803fee1107bcb

SHA256
0b79fc951409627c760f06ba1b14b6def1077baf535b000f738b5d9ea5925d86

SHA512
0510251c54514be7960311ec90e0c4fe58a7b1d35c7e7d84f23806be2a7451f2d2d2a741007775aaf37a65957aff1c73ceb1dc57c96c6ec35ed8ac016a7e6b34

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3880_637593782\Shortcuts Menu Icons\Monochrome\0\512.png

Filesize
2KB

MD5
206fd9669027c437a36fbf7d73657db7

SHA1
8dee68de4deac72e86bbb28b8e5a915df3b5f3a5

SHA256
0d17a989f42bc129aca8e755871a7025acb6292ce06ca2437e95bedbc328fa18

SHA512
2c89878ec8466edf1f214d918aefc6a9b3de46d06ffacff4fdb85566560e94068601b1e4377d9d2eabefdc1c7f09eb46b00cf4545e377cc84a69edf8e57e48b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3880_637593782\Shortcuts Menu Icons\Monochrome\1\512.png

Filesize
10KB

MD5
529a0ad2f85dff6370e98e206ecb6ef9

SHA1
7a4ff97f02962afeca94f1815168f41ba54b0691

SHA256
31db550eb9c0d9afd316dc85cdfd832510e2c48e7d37d4a610c175667a4599c6

SHA512
d00e2d741a0a6321c92a4aab632f8f3bafd33c0e2875f37868e195ed5e7200a647b4c83358edcef5fc7acbc5c57f70410903f39eac76e23e88a342ac5c9c21cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3880_89447758\Icons Monochrome\16.png

Filesize
214B

MD5
1b3a4d1adc56ac66cd8b46c98f33e41b

SHA1
de87dc114f12e1865922f89ebc127966b0b9a1b7

SHA256
0fb35eacb91ab06f09431370f330ba290725119417f166facaf5f134499978bd

SHA512
ce89a67b088bae8dcd763f9a9b3655ed90485b24646d93de44533744dfcf947c96571e252d1ad80bdec1530ff2b72b012e8fff7178f1b4e957090f0f4c959e0d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt

Filesize
140B

MD5
ab0a1ef1fc81433d285277192de042e6

SHA1
0c7a4b418096ff36c9022d01a123a91ef38ae491

SHA256
66f091cb2d085cfcdb1d2c06b6110bef28b5013317a7191491ee0b52e14d719a

SHA512
770691b5caa29f2dac32697c600fa41913da1f6ac9c0de3470c2ad67e2c31509f4e23a2320d0390b75dbf645a6f8a3d4c5dbe960dcd3f02afa3e299e378c7bdb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt

Filesize
140B

MD5
528779313b84bad724ecc826549a8c58

SHA1
d8ce102763ca01fd521a115509981c99f22fc700

SHA256
6fae1409ef00d0814c7f8783be8c810c81ad335750aa3d561c688bd4dff7f3a9

SHA512
decda8b142b75843ed0a5bde8aae49d7c88d50239db82bb681517a4d305fba8b0272426d7dd4ed8f4b5a4e7de266df5fcbc148d8e309fe9d73cb13af1208e2ee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt

Filesize
140B

MD5
33dff13dacb9b210621b21f6a769155c

SHA1
23c818516d98b7488ba3a1f90f2a1dad287f99ee

SHA256
f82dc8627f29413cbcaa27d8215eca30556370d9f3d76f95395421586876bb40

SHA512
45c857da2a326ac09239722fec55d1fc5913426f3ae4a95582abaa7e7f42505aecef57016aebf16fb7ad1b700b12c1775475da5be66f006c4756226d86a721eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt

Filesize
76B

MD5
568e7e61523398473af556dae2918fb7

SHA1
4091b1e52408b3ab3d34683f0b442fa35e661f9c

SHA256
5a4c156e40caf101ec0a0cc726e631af8baee8c05a74c2822d16a4d9d824f541

SHA512
e58b30b6b81c7992eb7754974941b789b465e9caced2cb4fc27709c77da9eb0ec6375f1f4294ed2d3419abb7d13224dbb96bb93008ef94308670f2daa580cbb5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5e9604.TMP

Filesize
140B

MD5
eb7f4497adb8c04ce8e7e4034d194803

SHA1
72f2db0186e6bf99c9bf3345a701e0b0604e9136

SHA256
e6d7361f5e25053a6d4b0bb979e37dfc9f8b75582e8e8ac0d1828b5a805a5f68

SHA512
dd2ea91a894156e0052685bdfbee476d5ce6b4104c67bcd3c92a3d64f4e1d13a59f4bf667f73f2ee529e44eb7339e765e891885cfacef306234556c090a2f936

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
2fe45ff131ebb2a4fd778986a2d494f4

SHA1
74a8701f302117e3245eb752053d7d90d9d39991

SHA256
82701c5776d1a448b019f03afefb7efc6c860f97cfabb55bc5c292792392f384

SHA512
0ba1f87205c9777b8967e28dfb036224cc159be5f3ec00e667f44de0421fc87e528822e92cf6b7eaf2191f764725eb6a9df3581a33bb5dd4f5d499c269778155

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
090ddfc69bdc71c1861dab6dbe05d848

SHA1
482f1f521fbde3ace0134e0846d7369efcbc4cfe

SHA256
b29e62227c36ed019556d2894d41cac10fc7d332cf6a0e240c88ba43a867b061

SHA512
db46b0acc5d53e52584c96672e0db5d0df5bd4b934412604edd59f3ab8a2f6d030a3f71ddcb1588055948ebed6cdac4eeef263290a1f0f3c53ee1fcaac51e599

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
e4fb38eda55dcb9f395b72c5cfa693fc

SHA1
331a2a6a2de0165433a664928fdc1127d9caa332

SHA256
bc0f0703c4ca08e2aa50b1528ff2fdcd3d092f7afca6e308fddf7de113980b2d

SHA512
8f92c710ab4d7f96362d94af63a44440f94de1065faff726087933b74f40d0e52b5ca7e652bc1c92c8a1ce50e53c12e2caff24c21413b44931dcdeb8df48bacd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
ea1af68947bbb90b2e072049a5144bb8

SHA1
5d4dd3b21e1f2d96cef364356c16702f25c7ee80

SHA256
501de14561705863d1f687837a6e8aab1d93209ff8cdd3cfce946a979fdcc1be

SHA512
f2419c9dc54dc9383dfa2bbf2ce67303dc429d27203546b0fad5f7b569a002bc4217a3d0ad99e7021b1b49709ba893bccbad2a9056a6f7b190da236ec5ba719d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
b2df808b72cb321e6661017ccd670aeb

SHA1
e040fc44356b99abd45689faf7d06d526abb3408

SHA256
43e1c10eea2df05aaae18486a2a8faec0ccdfcecc722ddee98e413f5daa5fa54

SHA512
7da2c91b1830f2137dc4f17cf20fd8fc4be19ba9ea1711db1a76065c312d53b6b991ebc5d85fa19027e74bfc5f4586af6ab8ed727710cf834b26b1f826166c02

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
5ba3ea12900a8c91560b4cbec8c6161c

SHA1
b52f81df77a69a40fa257c346436a543284c0354

SHA256
f1c326a383c6a4618df811a9473a1fca215139f25839ecf40504ed50b223bcce

SHA512
4a92c845e2cd80ed08ed39cc0884162b1a673ecc4c19267a6fcb20f6d4c72687840c1e9b29b11be6ca08ba20791f4703ead42c526b93adab363e672ddde9b298

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
e3a62fd431806c3a971a6a32fe2b96ed

SHA1
cb00a3a26ffcb3f07d1a99358e2c87cce5dab5d0

SHA256
29590dc8dbfe708e1680c0061f6c3eb336367bc572d6ae3cf2b67f8b52ada148

SHA512
67fd3a6c56a14aeee28d7dc1a80e7b6a54177ed6c6ebd6be3fef9e005f6562a9ab047f9f58d378aa1247d28bdb8c60caed00641277a2fbd086549eecd6c196b9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
b16f276287f75b065e06a36ef4c2273b

SHA1
d12a1cd5143c6639da4570cb4a099ebb65c90a2f

SHA256
4e73aba61a57cca39ce497d040a7f07912fde4ba02fb33126305d5bd39b2e366

SHA512
80e3260ed88d2bd5478ef666a6ffeb47dddde266ff0e9917a41a1ace5a4ae78d83259cae5f6adce5649f797946ae6a33798e550a30a17ff1bcab17cdedd11a79

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
f1ef282492aab8a4e8ae041288806f91

SHA1
d4484d174ee1de46b19d882f9cb2cc595c2710ab

SHA256
8ce3597f64ed296fd1bb29a4a49e17fabfe057a00734196ad407cce03b597d70

SHA512
4c3a98b3048a8dd24cf555db64f67f2e5f519e6115ed01091782ed9f844c1cb70f532c017eed160b106e3a99c7599aa74e73f834faa2523c71981173bb58c692

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
5d4af940fc8ac88c261cb0620eb128a0

SHA1
cc1fbecab1768e25b4ea43a3054d81c5fe6694cf

SHA256
af4e4f58d3b9a3ea74f7ec4ee426cf3525713816289a927920fb5307c301b66e

SHA512
6c8efb3e3567e433db8848d1d08f274f36a39fbc3b67170a3d47152459a2fef5fd7e463515ff418c065ad0da8d8ba9968edd97ab33a88ced50808ff0bfaeade6

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\Growtopia.exe

Filesize
39.8MB

MD5
eaca97167873094e5561a7a8c270edb0

SHA1
039be5d64c9fed35ba20e3bc049ff7a80d8bd69b

SHA256
ef525f5c3ae61a24e99fa290043e6a41b4bbe73fbec799addf7545538814044d

SHA512
912ea2fbf9e85f4828424d86535f3f86275b86865cd861ce7709321cd29cfd7828f32478e00b5cd938e3131f6f0fc2c7981d7c7fa7e2d90255f289dc91f0e6bb

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\SecureEngineSDK64.dll

Filesize
28KB

MD5
023ca3f56ce9d9aff9e4839301e82c82

SHA1
fec3bca7c4f43c9c44ffcfca1f41b5a480cba78b

SHA256
9387fedbd201f2886a28f32d1ec155a69ac86ea78e331381f6db521f8b4b5a11

SHA512
18bea9d3fde048dbd7ed0f039d44c36ccb112334b4188632772c35de06042e6d4077e1dc68ce6ac4f3a8fc4d1134940d24216a9451c79a813cd0ac33c56d354b

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\anzu.dll

Filesize
3.6MB

MD5
259a32af5b652b64addf145b389f6b60

SHA1
fe51dbf8bc1e4d8dbc3dc6dfcc48b54775b8e924

SHA256
d869244c77decc4b15dc20ba3207d9286cd67fd4599e8219a3df80edf66f7279

SHA512
f90dc7f0ef44fcbe14f08ee9addbc5c405f0b8dc8527aed7822d33f82a969a0d89fde8f6aa73bf9e5666658e682081aafd563758817c3358921a400c69829e09

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\audio\click.wav

Filesize
18KB

MD5
477c1e4d4ba5c340c13a77fd52a03cd9

SHA1
fc05d5b94d33a9f472133c7c47f52aabd3bc1edb

SHA256
e46278f894d538b366acc40925db83b8ac4daea030e98276cba5ab179ffe563f

SHA512
3322db0bd62a56f7c70799553390f6d38e263a8222ff709316da11c4cc3523dd940f8d6789d7d870d37c9e2954c0b7e67ba9dcbaea689c108183aebd8a49f825

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\audio\dialog_close.wav

Filesize
74KB

MD5
ecba2775337d1b8decfb99a02b7959f3

SHA1
49255870ecafaafcdaae37cbc884124f2feded19

SHA256
9e3c2a988db4d0d55cf77e8fd732a72296291146096fb702001266c2baa6cac8

SHA512
67286388c3a2288a9bea3fe32bc04178eccda82e26709bb5dc3025678086e0edc19ea145ddff69e647e49f082b6e7b4dbb391ed6777a8bc40db01eee9fef5d8c

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\audio\dialog_open.wav

Filesize
81KB

MD5
fe4f751da37697ed5e4ce1de6982c22d

SHA1
65d317693eb30cb9c7b58f67f300084509e5e334

SHA256
ded246c0f02639e9edfdb2066fb3d221a924f869be4ad0a9b491e83da928c8c3

SHA512
c8f92e92e8d7b5827e4fa050dab875bf84d3bcbea27c1dab8cca263aaf7a92c2d1b5c76b3dcf3475c30af4abc31abb28182a72f4f6ed803584a727e0e21c061e

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\audio\ogg\theme.ogg

Filesize
1.1MB

MD5
4c89d42656669904b3ced470ddf7400a

SHA1
3498e8337cd4a1523f335afbf20823711d96833a

SHA256
2f0492ef34b4e5f8de1022ae9cc429eee1e260e0aac5ab260e55402a15ff7db5

SHA512
9cc2c31ea944198db44afb5996da9946df892c19fc5687e438c3621773969c8de5db8cb3d3c86c53f4cebb0ced7e3071b2c57759eb89b962c93993c52564acb5

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\audio\tile_created.wav

Filesize
8KB

MD5
0b90c8a37d49c71ab7138f9bd3717feb

SHA1
dfa178fff3fe10651802fcbc6956203ad46037ce

SHA256
0b6d5b3b0a71d75afe4e7cd08798c0aa00de97a577fae7686b9e09e5ac17fd7c

SHA512
5318272b0d0910fa1ced5bc842c4f6065ae157e8aa93ca6789dfeed199cbb93c6fb682fabda7bb02d979dff9ba3836305105227b47c056cc98913820eaa5b9b2

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\fmod64.dll

Filesize
1.7MB

MD5
29b36598d48261aec75b1eee69dab669

SHA1
ae3143a5603badeed76a36f5f2429999ce4e7015

SHA256
e5fa4e47ae9ac18d7d2927651130a1630bfff97546f01646792384b9f3552f79

SHA512
6f316cfd68b3b9294e5ae929eeac1fee317ca17c64f3dda9e6e8504a16a8022ad19ca0169b4088fe91697cc48c33d8fb9c25558c5a364602e1511ed440ada5c0

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\cloud.rttex

Filesize
5KB

MD5
7022f170a353e67d64893b617302307e

SHA1
0af46a0b3331fe7080966323c27908e462ecf1ed

SHA256
f369d04d3b5d43c8bdacaa49cddca19132f64ad2a806d520c8191927831c9123

SHA512
ec279cdbea794023f28f03218c276e7a9d6a3628608b1a11c6fffd6de351a37338af63b4e5ebe3213d6f5549d8719513602fdbc93ced7101e551f610bd55f4bd

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\gui_box.rttex

Filesize
529B

MD5
d70d128e0d20aedbe2a0cb488e77b0ca

SHA1
a3fa6f1214cb74ab711813cd92052f47ae3d87c1

SHA256
306710de94944683c093bcfeb3ccc588230e9c950fc6d26cb2ebcd54930a2dd2

SHA512
bb405c6b1ae95d8bb7ebc04cfa1843bbe1e4dcc417dcf9befe43c569676684a26cefd7e463eced7791d5ed616d63419ecbb7e9fb1b04461253fadcb030839a8d

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\gui_box_upwhite.rttex

Filesize
363B

MD5
4af9c77ce2ddb7ea19a3864e29277624

SHA1
5b14b1d36163d6ff07596e1d6ef84bf04a6846cc

SHA256
476cc50d752f1c171a3e460dd874e16681a43faf003b58f7f3d19c4e7059e948

SHA512
316c9a315b21c4e65005807094902bf73e6510fa3143abc59c2879c3c269664eca628a83bd8ab95a7108808ad2e7849a4b439ff6a0584d6aa5842ad1384de1fc

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\gui_box_white.rttex

Filesize
500B

MD5
f4715cfff579b5d89d412e788e29b126

SHA1
d4937ad1d75b80bd56b1aca5c6440f95abe2a59c

SHA256
b241e30e6cac259326c4e5a450c7f7364380a0a813cb7f0729fdaddb35210a5a

SHA512
9f85ca23d316dd0155ad876f2f74a013a61a239588fe43542f8770b758efe47b0910660f365f386f957fe3b68604c92d5cd6111b493227afff3baeafe83e4173

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\gui_itembox.rttex

Filesize
4KB

MD5
1cf9565bc0846f3af58fc255f6200f2a

SHA1
ec34ad178546ff476f43019bbb0d20fd238442d9

SHA256
c08c9333fc74cdb5ded5768796f7a5045defa37a7b30b185a5fe934459e70a8b

SHA512
fed9e48f1b759264d06a6bdaeff93f03c8a8439178d00c8f61ee033e8bd8ff2c4df4b0a6d4fc5a81fa000fef493fe068da5c4c12b312e247bf60088b34854f96

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\hills1.rttex

Filesize
11KB

MD5
b679e2d7f84f309806256e68e83964d1

SHA1
9be8657b2634457e9e4fe20e1ef4c96293f803ee

SHA256
410c970ae0fd75227521e96c61f6e6e1a1d8e20e4ee0e0690658c1e563ddde0e

SHA512
2e72f18682d491531fc31d295bd7c4ecba12710a30bdaeb0c532c6b125328a450f09f2b10a0bfb8090bae6bfcaf3080a2b5c258c37c8227b564b1a70d5b5a0dc

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\hills2.rttex

Filesize
16KB

MD5
f98e85342f4ba4e029825343d2edc82a

SHA1
addc9a7c89d5e2e8941e1ff285977c11e427bf95

SHA256
ff6cf5f5c793164477194bce42a553cd1eb9692b2159787bd52f92355bc5c400

SHA512
e4ac471c62cc1af92ea9bd18a3f900a6528bbc1338c8ba32bb2b1adf48329c4fa3caf926dd702fceb31b3d30ef6f498e4418272fc1b4ddb379e0dc87f73b9eea

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\hills3.rttex

Filesize
19KB

MD5
1f698b5c5fdcc605929421328202e196

SHA1
7271f8ea43582522f42cdc67688e099c1b438ff2

SHA256
694863f01093c74f89ebc77812dcc5a9ebcc07574b658ac783fbbf59ad124caa

SHA512
bee8e7df9a31c0099d6ca0bd104dae60ffe422f6b62c1f9467787aea435821091bd740e91f4d3ddb581c5bc40b51f2fc3489fd27c574e0ec253a2544cbdd440d

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\inv_select.rttex

Filesize
484B

MD5
df2a13dc1d74a7c51c1ae245a05ed460

SHA1
0e439131ca1249110009aafe7c30d45ac54aa39a

SHA256
ed494d280f5e20fc6f6818a82f5f623638f706f2f6af6457cfc74501e5c7bd74

SHA512
0a611126222780bb2f8a81fc432041609da11d8a192d112eda91520888825ff2ed8d31593064d4fcd6ca1904adaa0453ccd43d821f5dbdeb049d21047076bf82

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\game\sun.rttex

Filesize
6KB

MD5
09dae892f07dc20c3192a03ca8cada1e

SHA1
28f1e09a28eae0586cb82915753814b85eba09b8

SHA256
43bff2cf3ec876b887b0c42a35d64f4b1434fc95d308241cfafa16dc825d41b1

SHA512
72d7ac5c37ffc192b2644ba857abf87d314738fd4e29849a8b26af5d33252e09e90f1e52bdce68d5d9c32a9aa14db9e00b66e528eed114596e950ef57ade5639

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\checkbox.rttex

Filesize
1KB

MD5
a59f7b73db9dad0f0a279299705f4157

SHA1
8abed5eb872d131bea257dd145710a3994aca9d6

SHA256
f1e181ebc2470974f961f0479d322bbb83f0a0fde735d31219164beb76c6859e

SHA512
7c9587756513d7378af3c196f5b781929c6452fb9544e46e77f438da43f82f852efa3dea48d9ac74c2d70417d0e17d464a9d1ce6bc7e174070336da7b7aa4a0f

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\currencies.json

Filesize
1KB

MD5
f0bd1fc33690fdab5368c6cf128ce7ec

SHA1
c7d72977a9189687625c1f8b3bce4d6f6329426b

SHA256
6bb20302f6215d609e8c9ef970d02218861dea9662f942be5cabec1cba3d6052

SHA512
faa209662895eca79e2c0be92ce6c6fdae8bd2dff69254355e95a10de2d62c998b5ceccc9a87b5f29e613a56dd8e6726ce1a60543ece412a9dab316d132ca651

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\font_century_gothic_bigx2.rtfont

Filesize
108KB

MD5
c8a90412bbdaa39a814d27a10b7670ff

SHA1
fb5784b59adb4831bb5c693a6c2834d5ca94c01c

SHA256
bb51befa9db4d2a891804f4e750c89025db89a2ae033c9ec56aa591ae94978e5

SHA512
a1bafaf82bc3a05738a6f51f87b836cfe556f191cf5363e31739ff06c32bbe4db310a9856884a3de3af28114ef620ed6dd542f0a328688bcb5fa6ed48662ec6e

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\font_century_gothicx2.rtfont

Filesize
35KB

MD5
b89c4ccbd3180f627cd3e2ae2336733f

SHA1
d9481a501fca4ff2e9b732d1d24e9bffc9e9bc06

SHA256
be0bad0e4b3688573c2fd97a47869d624ef4651f7042ce2362752bc95295561e

SHA512
24e0f62cdb9ddbd800d72063745314946562a439257554d4e7c96b88dce51698deb145e05cfc5959090700bd8a96bc81a8abc457c3ce26cfaf5aabd5b15ffe50

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\handle_big.rttex

Filesize
798B

MD5
77f818cc43c94e92c318ae8ba75226ec

SHA1
bb6ed3d0bfdbeb66666f557207d727e983e87984

SHA256
4299f19cceb8ed82fcfafe86fc31ab79038f91ca9028b4e86242c294e864be85

SHA512
3ccd27477e519d1a48fae8c5d7ebd0b73d67fa49f5a7c326f59eaa6b8585d3f44c2f1f160633cfa14573993a63c41306cd7b2d1f0f745576becc8a5f21b52905

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\iapFallbacks.json

Filesize
9KB

MD5
a5b62eca5732ae853ec51b453cdef5a3

SHA1
f11cf164411bc891ce74a4301ce66ec8d8b66de5

SHA256
0d18ad6bb57a4ca065648fc3f97594dd60fa77183f0a11b417e864cc6da9ebd5

SHA512
ac7d7e6bc53008dbd7ed1d04b0af7ac725791ea810cffc412cfe7dfa6ee631165886eef5df67d59ea7e22b43607ca636c67639110d078e40af3f97125c9f1388

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\large\az_4x3_adv1.rttex

Filesize
67B

MD5
1896385b19daa70f512320ba52a1fdf6

SHA1
63f2954b2cd949e45d02c4f1d4c3f35063aec757

SHA256
71fa2aa665788dff80d37cc26db1f6845685d7542bcdac61779a95a51bf95309

SHA512
f23b50c201e0cf1ff42e4e543e6ae856573cec3e11fa6cec66a8ca661fe69f3cbb4728b3d0e4e2762cd9f2b98e44297d9969ba1a93224dedf8e8e044d37febc1

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\large\game_title.rttex

Filesize
139KB

MD5
ace9c653e2ae8ef4d5cb6da6fa207049

SHA1
7296d34d8985a60fa03c7b9a8db7e484a5f73af2

SHA256
85996c8e9d490ef6656e2a31643d691ef53de42ccc89e00068413fb700403ec8

SHA512
c98db7cbe7bec53370326ac172b5dcf65a1f3597f4b3285b7a466da039493add8c0f41630489c1818e77b99e3c65341b1191b901ade32af8a7c86f4702a8b58a

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\large\generic_menu.rttex

Filesize
36KB

MD5
fdb01cc88836cd7e39cea68f55dd74c3

SHA1
99923a57d3c16dfebbd7672c5e106f9630e66720

SHA256
3ec5f42da3db318dd04d6746119a56fb43f1f9959333254035c0e25e904f1271

SHA512
63b2f1847034fe384ac07a30d14b13b6d522905837f8b43dcbc1d10525308c44326a8056425aeb289e2e51505a51d80414a93d9cec0e22cf88f8649de5e8d589

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\large\main_menu_bg.rttex

Filesize
8KB

MD5
8a699381434d8fa8dd71f25bfe331887

SHA1
14ade3cd6dcf8961b539fb4301b410d275aac483

SHA256
1e888b2a8519ab39b06f6dbcc60d0b0c13057e079cc32b5caf666130dc0c8871

SHA512
e9ab499a26c30f6e6f69e9fd8de23e1abc32434e8bc6b22d836f4aa1efaa900a4126e0412bc4cf7c9a082c2d2ab60dc7b6b5be8101e39b7773ee075f0bfefe81

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\rules.txt

Filesize
2KB

MD5
7360abbb023bba157c19e8305af2b479

SHA1
fa787fdeb4bc8343cf3b0866bd4e958436729d8c

SHA256
d27ef2cdcc21f248e03e833ccaf7c6fced2a8dec98c327acd387485177407768

SHA512
6e482dc89d0b608dfd6f70b5e776b6b376c18365cebc15d537ae5024f7d0eab6fd4a95f355551850d89b361ce8337cc7fc67252c39ce19feff25875bce8a15e2

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\scroll_bar_caps.rttex

Filesize
161B

MD5
8760d0574490808e17f8561d97a3e1d0

SHA1
8da3acb30a64f64791fbeb68e58f3e9b20fe9e58

SHA256
bad41f5865fef38c2bdf77d43495013e7c33ba6a23174f8588afd5690df499f9

SHA512
89e967c8c95cb9a897b183de4e100800421ba66241734892ea061731a57491a41dddabebeb81ae0bdac69b1259cc7fca8f9dcad7b15618b810646a58253e123f

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\interface\slider_button.rttex

Filesize
1KB

MD5
d368d3d5593559f9c547508899e3f0b2

SHA1
26e8304bc03ea10d0010017c0e0fe967d6eecf51

SHA256
1b56a9617947004fe17ac977416c08f17833f65f8e98415597b63843c741d474

SHA512
be4613563376c4cdc16d891057867f54e851e02083d5bf7aff6cb566c9b33379c75aabf81fad3bd719c2744ec57d14099ea0b656a850da3cde94c6cb4b3c24be

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
458B

MD5
421d2090cd9d4cc7bdb293b6db01ce91

SHA1
605ad1fb2b3c0ed1dfd1c2abb9dba544906a96fb

SHA256
e025c1d9b6ebf78d8fe26ccf7858988874a95409d759436604e2190819d7fd34

SHA512
fce2b95399a5a024f94edf593c803e20cda49a77a716cfcc5af16b7cb002d9e85005e69ccb7b1773f246c63b2d144eed5c86a7646d4ae229be0a3f5ff51cb789

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
1KB

MD5
af847f48a809d21c96ae9115a04f6fcf

SHA1
3e5e76003f83ce6fe667c51de5146b6b51790d34

SHA256
b4e57339600d5bd9808698c7daf7ccd3b784cd920861440741b302bb56c0a674

SHA512
9522705a2a01117dbcc647c01d93e802e31f13b977d9d2aad47fe6907f677812d46d59f74f4bf97d8a04b5602603d7574b4a6e585a1f82d9596d91bae9644505

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
1KB

MD5
230d1a44688c0ca1effacf2955533696

SHA1
cc47b755137e6ca6c197d381e78f43067addd030

SHA256
a936b42163ef4fe1a023ae2eb0c3ea3447b2d31ea0f63cf916f4e9830b42088f

SHA512
68fd62eeebe40ef4237d6547c1fefef840eaaac90b852d772a482481ba381601b72e2c7a8865c6582b9be1c57ae530d3d6c3da8592bdc0afa695f9dfd3f442ef

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
3KB

MD5
2850a9489f6e409358adf396682d0931

SHA1
0480a5dcd9de43eb4651843f1bd336433e4d9802

SHA256
243f5c5440503ded26fee87df658e2cca42c65c59181abed904a767903ae45d2

SHA512
de7153bc0e96e3b69c247e3e3eb51a626fc67818671c7dc89d353643a030f94d521f139e24e2ad589a2141df40a5306c4782f739bcc6db7b224a17d7977edfa6

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
3KB

MD5
b40e07ad714d1cef7da78e139a8b4635

SHA1
96e3d09971e7ffa49ae223e027b832bf9b9a65ce

SHA256
dd98b437e043ae44e7ba1c50a52c6b449fe23b1311d04f432d4858b3113a7863

SHA512
4fc54a712c0135fedd203c6bd6cbb0527b2ad20df95733b21f0b6f12cfd3da8e0820aa073fb1f323fa92199794c622ddf5065d7fa423a50f977e5ea217dca54f

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
3KB

MD5
80eb537041cf2a18cf7b55ca1a18ce48

SHA1
9a94e121b17ad233c143b23d671fc54ab787c661

SHA256
2a9a962f528befea38051f663e291fedac36be7b53e9cded3f287e2bcae74ebc

SHA512
f7f9655373fa5e7fecacb4fd6014ef3e012999fa12acd73e094cea261d00dab8d44a0eaeead9fc9babfedc7484368b0b1aad6cb5d2d5a2c8659b8b5b631a0ae1

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
3KB

MD5
c6f5351f63ccb2ab941294e0d47bb322

SHA1
74c17125b0571feef856f4eccb303ccf27ace162

SHA256
f8a4c48fb961fade72b241404e2a7c105b9a71b8ca0bd292d7bf9cad84477c42

SHA512
d9463e0f61330d555f53918c65e72abad4c427aa3fd6851ff83632ee299992d7ee4ba28eb4c1c28b8a861c691378e1c9d0e1160764eec0abe9d89e4abee4ade0

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
4KB

MD5
c86a2ea53b7759b776ef5e7c79623706

SHA1
1a2941dea22dcfb4cc02668e018ded5394f663b4

SHA256
bbcbcf51773e5698a4840305faae902fd5d7609e24b0e1a1b7927718de5ad049

SHA512
a81f276ccb943ad48c6d0097e26f78d904bfc5f3bbc06636b634e30d4bf7c4eb2591d3e920872a69199578738aa522581f62aeb4102adc667b6f21c3f932940c

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\ColorFill.fs.bin

Filesize
185B

MD5
2490b24610d47d01abd21d533fea6cf2

SHA1
0601b600014e594f28ad3c11b155224375cf5509

SHA256
990ff2a6ae6a46b69ae41783abc8b4282f43e008d1fff7761257f6eb5cacc394

SHA512
ae88495bcf99fe3cf27d7beba65b25c3d63f10440f12f7aea7530e45adc6a711a6088a3fca2096ed0592f02d08420efe2f4d7ccd09f6a8316ca7d7ec3c0530d5

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\ColorFill.vs.bin

Filesize
285B

MD5
194766f9fae6fa806a7381b75c77fcd0

SHA1
f7eccd5b802964fffc69291cac8224cfd7eba2d7

SHA256
8ad817a915116c4e14458ad946c325feee7806a5d2d9df138131846435c59be5

SHA512
eecc509f60d7773cf8c38b5fa79b9b4dc5d9f8df21b4586fdd03624f2fbb6b8cbfaa93c7e0cf817f010145e3341d26dcab49adb6329786c4635939622d48ca07

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\ColorFillAlpha.fs.bin

Filesize
361B

MD5
d54d62508a41510b22829411d7ba056b

SHA1
229619a0ca1cd953304446d89dc7ac19006dae77

SHA256
d79d5a8d142daf4c381ff098f025dfcefa176cc0021bbece76dbcd4eaee0f6f9

SHA512
f8944c85d591ef6bae39dee28372506e0c2285fc478e4bfff95a3ab1f96923a66d46e182ad0201c1d3ea0c9b707e902754b27fd9d5020b17c553cf34159fe943

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\ColorFillAlpha.vs.bin

Filesize
321B

MD5
961353ad14b394a14b22175f2f455fce

SHA1
9e66f9225a7811e339c10c403e7aa6e3ac39ab58

SHA256
57a02d45cd858acc8b0fd9fe7f16229224afc4c9db7c63633ebcb5384a3b65cd

SHA512
ff4f6f872b6474aeccf254fd05043e9cb7c5ca1dd11d9e52077377af26146138a2cf6e86b1c22b83f3200c2371f76b66843492d73a0b89b03a0f34b0f0921ba4

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\ColoredTexture.fs.bin

Filesize
576B

MD5
9aaefce5e0e153b233a35bac46877af1

SHA1
b84aa4dc962e0abc7b4663259262be8851ed01f1

SHA256
ac39c7b02778e3c77bbff0f02c6e3f94b5d427486936a68ea75daabccae21779

SHA512
d3b19e186362d2397f26c8b68f92404815b251e749245aae91b21766f08b980344ed84365f7ca539146a0c503ec1d8cf3369df6f7413e7933fd719bb63e43da8

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\ColoredTextureAnzu.fs.bin

Filesize
297B

MD5
474fc16185173461e5a6e18dc8c4917c

SHA1
3b424efc9d23e7e771e8c2d45c4182ecd028870e

SHA256
25708f9ea71cceaa172caa8a2b94b17c3d502bdf939c9b84551d373531221fde

SHA512
ad57c45f366d1193b79c4c8e82a669528bfbd1f322c158d6c0f498418a880a0b828d1b85bef526552ee998939f8d7fb16ab98813ba8ea1a2561312d13c8e84b4

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\ColoredTextureAnzu.vs.bin

Filesize
422B

MD5
79e035efb884a7cd9f1375647da79beb

SHA1
c7638e5f3b7f700697e643f8e8d02da0119a92dd

SHA256
b37917a965e437b7662fe279a825896ff72f3a92d472d3ffd77900e933902cd5

SHA512
794ee993652493a7d3f540a60b3a4734c7c8353675ed5d47edf3e720bd2a58c2101f72c8803c9c7be2a43b259c5b2fa6378c911876133ee6d75f8ebdc4fa29c3

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\NormalTexture.fs.bin

Filesize
990B

MD5
456bddf60219d3e690caa9a5d00b2080

SHA1
477a17c205ede060eb44f217f0fbfeba603f9060

SHA256
7d344c9c2e8978a31d790278e0f55b945bcd0b75b71bf93cefe22119e4d4f176

SHA512
27d21390139ad507fe6e508d19676bae86fad34d3f976ef3eddefc1337147293f279b3d001d8e013a328886015374d57913c2877caa6fdb4a1ab01116e9bd66a

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\NormalTexture.vs.bin

Filesize
543B

MD5
eaaf03bd658d094184315c849c9c97c3

SHA1
73e1af5b673a91498013b33669575cc183643c36

SHA256
9a8a94921ff59a86df7a498aa823f9f4f2872a6680700da139de78ebcd70e21e

SHA512
bff34a336815d8b3cc687e169949c4485c34cc59e14a3fd9332904830dc1d73a01936e51f05b91c52701b112c69715310c30f1cc43526f66960128cff72885e6

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\VertexColoredTexture.fs.bin

Filesize
530B

MD5
3bb5cdf656f942b87d7bde085745aa06

SHA1
d4ad9f694cf03dff976191cf78b48abfdc4fe32f

SHA256
ccb251b1d2b8560891e5e0d8a2f71ecde2839b144c5fcda4b423988453b5a153

SHA512
3de185eda05fd2a6d0e5bceb35c9740fe8225eddae9226717b3dd0b5575587c515af7638f5ce1f8b9fc40cd4e7803674111580a9b5feb1826a56d97ec7c3b5e8

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\shaders\windows\dx9\VertexColoredTexture.vs.bin

Filesize
357B

MD5
0add8827ff49dc83639bd943813abbfd

SHA1
ed7c72df1adddb6e7f62c128661831cf7e5479e7

SHA256
2590528de3747576416f751bc3ec5e399987b2e07431e828872962f7e7aa6e33

SHA512
ba0ac2424015c849f8977e0d82db60b5cf091665fe3d7cdaab22e7de92a8f7d06a1caa6c70b637f581a016c368c3e66556172161b99ad3a7965a8ef0f0d02004

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\vc_redist.x64.exe

Filesize
13.9MB

MD5
27b141aacc2777a82bb3fa9f6e5e5c1c

SHA1
3155cb0f146b927fcc30647c1a904cd162548c8c

SHA256
5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3

SHA512
7789eabb6dd4a159bb899d2e6d6df70addb3df239bda6f9ead8c1d2a2ac2062fce3a495814b48a3c2bec12f13800ad0703e2c61c35158b0912011b914f098011

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1f5ddc8fc892d935ecc45e28a2272b01

SHA1
a00b175137e9f846efc18f64c74742ef91a99b2e

SHA256
a0d3f0412d2d24ae05d78f634037da4514292a00f880047edc20e73a0bcca0d6

SHA512
3dce50a505741320bd3e7ea58ff7124a0b2e428fa2426709fb436d05ada03ca8aab6c14bf582b8e747887ec68a0d34350ce8498865d7c8386f7eb9512a4932b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
8KB

MD5
11ef7a8c8bb0ac337a2a2d53a60f2cb1

SHA1
c3097a9e48c8d1bcad96a1e97792701fcb0444bf

SHA256
dab5685dc93eed6a4a0874196139bc5c9f589f42bd8eec7846bf37561ff47fc7

SHA512
500cb9c45f79b401653966ece89a73ca4a0794db9c59972c9eb9e2e43ab90272459b9841202239b99aa15465fbcb24559bca7d4a167fb86733e2a8fa834afa0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\dcd.exe

Filesize
227KB

MD5
b5ac46e446cead89892628f30a253a06

SHA1
f4ad1044a7f77a1b02155c3a355a1bb4177076ca

SHA256
def7afcb65126c4b04a7cbf08c693f357a707aa99858cac09a8d5e65f3177669

SHA512
bcabbac6f75c1d41364406db457c62f5135a78f763f6db08c1626f485c64db4d9ba3b3c8bc0b5508d917e445fd220ffa66ebc35221bd06560446c109818e8e87

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmD811.tmp\InstallOptions.dll

Filesize
14KB

MD5
3e277798b9d8f48806fbb5ebfd4990db

SHA1
d1ab343c5792bc99599ec7acba506e8ba7e05969

SHA256
fe19353288a08a5d2640a9c022424a1d20e4909a351f2114423e087313a40d7c

SHA512
84c9d4e2e6872277bffb0e10b292c8c384d475ad163fd0a47ca924a3c79077dfde880f535a171660f73265792554129161d079a10057d44e28e2d57ebc477e92

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmD811.tmp\System.dll

Filesize
11KB

MD5
3f176d1ee13b0d7d6bd92e1c7a0b9bae

SHA1
fe582246792774c2c9dd15639ffa0aca90d6fd0b

SHA256
fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e

SHA512
0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmD811.tmp\ioSpecial.ini

Filesize
565B

MD5
d8f11a76659ccb81be6034f3f9b6d6b9

SHA1
8d1e6ac1c28d96a414bde7b14fe1fc730d8749c7

SHA256
be79ff089c09faf99782db07c4bd2e6c5f2063d3f6e6b4c614a8920bbfba9fda

SHA512
e08c0233844511480f684653b10e3e4e5db2882976fedc7f111c783f870fee6a6835819178542d1e37535e37a6c4ad26686e6a09dc37d6d6afe75f4fcedded1b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmD811.tmp\ioSpecial.ini

Filesize
776B

MD5
7945d637f763afb99ee151ba69a71fde

SHA1
4c5ce1ec0da4301dff9742a02d3808cc1351274e

SHA256
182a9955ba581aa7986f725febcc25d9a278f1557ceb2841a68396fa7c2310b8

SHA512
1e2dc04cb6c06e2ff42e32222ce3896312d9115a90b92772ca8a6751401128544ede591a700e0e6dbe23da2aa8a7beae48c7b3d804bd4368846506abd3ae3013

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsmD811.tmp\ioSpecial.ini

Filesize
802B

MD5
6ae408a37fb733b3761e401f09389409

SHA1
07b6bdcf4bedd3f16618925f0e666f3960adfe20

SHA256
b66f3422d3317f7d48764841bb0a30f00860782166885270f8c919cd0d78c602

SHA512
491ae7e88452f31411911f5e76a5e5cf7894cb100643fbae414ed71746954073ea7dbef542e6878ba63312d71279725791edd7df6784a97bcc8a31801ea58acb

Download Submit
C:\Users\Admin\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\logo.png

Filesize
1KB

MD5
d6bd210f227442b3362493d046cea233

SHA1
ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

SHA256
335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

SHA512
464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\wixstdba.dll

Filesize
118KB

MD5
4d20a950a3571d11236482754b4a8e76

SHA1
e68bd784ac143e206d52ecaf54a7e3b8d4d75c9c

SHA256
a9295ad4e909f979e2b6cb2b2495c3d35c8517e689cd64a918c690e17b49078b

SHA512
8b9243d1f9edbcbd6bdaf6874dc69c806bb29e909bd733781fde8ac80ca3fff574d786ca903871d1e856e73fd58403bebb58c9f23083ea7cd749ba3e890af3d2

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
8KB

MD5
78fca980c391480df6dcb19c176d45c5

SHA1
926d7823fcf65d2200f1c892d31ef5b9f7bc9447

SHA256
9718eeebe309fddb7d362346ff06370bec73331a1069cf027ecdcd2e8691334f

SHA512
4cc9adcac3c899014303ca9ecd13eaf52a6c87f1a7b1d1f82d1be5cc045a32f83e0f9e62df8ec2620d9681d729c7db1b46920d175695fa046349afe407de4e1c

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
13KB

MD5
7951ccdaf0fe6ccd8d2beeea0a2e7d15

SHA1
8bffdd97b380779c59dfbfc641585dd88b3bc6aa

SHA256
cc40bfbeb218265abe54a858f42da22fd4d7a32cf67b9a18ca77fff48e957bf1

SHA512
aeb1f15f475b8c9328446cb0b136d676531db58738e1d708f4fcfac335e3e07bd3f8c71cb5e9df32a2bb8c9c8fa08bfcf6dcb61a3f99126d572fc03e316f5d44

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
10KB

MD5
fd1e3b7cb9745deb612ed98f1ad15133

SHA1
b39b2542259547213ec5f09fa6f7408a091b7321

SHA256
f7d64446768a8a37f17c9abafa682e9aa534f8318c2b3163197313793ce80367

SHA512
6e139659597fc3af16b6930e1ce634d465b7aa59f34a5865ffdcd8df344a521d0e6746c908140e47fadfdfaf5a6673fd8828ef4c54d0e38a6ccdd53299ab3a4c

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
13KB

MD5
a4993126c85973fa0c446e96cf9a0059

SHA1
230fca539812e9cfa5a8c8dcae724bdcbf754d9a

SHA256
7ed4b01ca67aa3bb8354575a4da1453cbb81aa0d84c4397b8c00836921c5beb9

SHA512
3b323b6b73fd1f189bede7dc81c2768d92c10cb0fc1f02e91ee9d8a3a1577ed1a23fcb72b3e36b0e12679d8605fb613da52650b564e9a785548b38e46872a327

Download Submit
C:\Users\Admin\Downloads\DarkFarm.zip.crdownload

Filesize
1004KB

MD5
91a5af1ca93771d455e7ff8da083d1eb

SHA1
313be5782d2afcfcb766211944b85c4ea4492af0

SHA256
0a49a0d119fc8c33cb10ee67c1ed47290e527e230df4be4095e69fca4cf7ee3f

SHA512
7397a13e17dd10135c19970f80abff53d96e149cacd418d7cce3ec580303f2505e65a3508fb3c884a871d555b64f197b886c9571b69f4ddaa07f6fa98c1b93fa

Download Submit
C:\Users\Admin\Videos\Captures\desktop.ini

Filesize
190B

MD5
b0d27eaec71f1cd73b015f5ceeb15f9d

SHA1
62264f8b5c2f5034a1e4143df6e8c787165fbc2f

SHA256
86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

SHA512
7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

Download Submit
\??\pipe\crashpad_3880_KPWIANGDOQCICYAL

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/4856-4808-0x0000000002B30000-0x0000000002B80000-memory.dmp

Filesize
320KB

Download
memory/4856-4809-0x0000000002B80000-0x0000000002BBE000-memory.dmp

Filesize
248KB

Download
memory/4856-4805-0x0000000000760000-0x0000000000854000-memory.dmp

Filesize
976KB

Download
memory/4952-2703-0x00007FFF86450000-0x00007FFF86452000-memory.dmp

Filesize
8KB

Download
memory/4952-2704-0x00007FFF86460000-0x00007FFF86462000-memory.dmp

Filesize
8KB

Download
memory/4952-2705-0x0000000140000000-0x0000000141000000-memory.dmp

Filesize
16.0MB

Download

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads