Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    05-08-2024 20:23

General

  • Target

    Allfather .exe

  • Size

    26.9MB

  • MD5

    0ca3831b3edcfa589572d9c6da9fbb97

  • SHA1

    2414ea4e15839127dc83c5f1e7d1b4bc97bba389

  • SHA256

    35554d6a5e2e309d87a96adfbc29f26e319843f5817c840551773f1b358be2d6

  • SHA512

    6938b1edd48878ed4b42ab3796ad3a219f7d654a12cdaa6a455ba92fb2382fb3159f7b1e2f25d6f013a1217066c2fdffb87ec3e2507ea1b56c96f90b7ad1120b

  • SSDEEP

    393216:8QrJwHf/risap56FVQDfZpKULXUx+Zxrz/W:BJY7HfVQ3KULXU

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 2 IoCs
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Allfather .exe
    "C:\Users\Admin\AppData\Local\Temp\Allfather .exe"
    1⤵
      PID:560
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2804
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        1⤵
        • Drops file in Windows directory
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:912
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe3bffcc40,0x7ffe3bffcc4c,0x7ffe3bffcc58
          2⤵
            PID:3392
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1884,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1880 /prefetch:2
            2⤵
              PID:4144
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1968,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2080 /prefetch:3
              2⤵
                PID:4080
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2204,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2316 /prefetch:8
                2⤵
                  PID:3504
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3100,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3132 /prefetch:1
                  2⤵
                    PID:2720
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3144,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3288 /prefetch:1
                    2⤵
                      PID:2616
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4376,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3556 /prefetch:1
                      2⤵
                        PID:3124
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3572,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4776 /prefetch:8
                        2⤵
                          PID:4468
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4976,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4828 /prefetch:8
                          2⤵
                            PID:1008
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5100,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5012 /prefetch:1
                            2⤵
                              PID:4452
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4348,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3184 /prefetch:1
                              2⤵
                                PID:3192
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3464,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3452 /prefetch:8
                                2⤵
                                  PID:2352
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5020,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5060 /prefetch:8
                                  2⤵
                                  • Modifies registry class
                                  PID:4048
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5332,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5316 /prefetch:8
                                  2⤵
                                    PID:3476
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=212,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5372 /prefetch:8
                                    2⤵
                                      PID:964
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3432,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5428 /prefetch:8
                                      2⤵
                                        PID:3196
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5192,i,6084833756037008554,10743602149803635268,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5256 /prefetch:8
                                        2⤵
                                        • Drops file in System32 directory
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:3564
                                    • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                      "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                      1⤵
                                        PID:3428
                                      • C:\Windows\system32\svchost.exe
                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                        1⤵
                                          PID:3272
                                        • C:\Windows\system32\AUDIODG.EXE
                                          C:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004E0
                                          1⤵
                                          • Suspicious use of AdjustPrivilegeToken
                                          PID:3972

                                        Network

                                        MITRE ATT&CK Enterprise v15

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

                                          Filesize

                                          64KB

                                          MD5

                                          b5ad5caaaee00cb8cf445427975ae66c

                                          SHA1

                                          dcde6527290a326e048f9c3a85280d3fa71e1e22

                                          SHA256

                                          b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

                                          SHA512

                                          92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

                                        • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                                          Filesize

                                          4B

                                          MD5

                                          f49655f856acb8884cc0ace29216f511

                                          SHA1

                                          cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

                                          SHA256

                                          7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

                                          SHA512

                                          599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

                                        • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

                                          Filesize

                                          1008B

                                          MD5

                                          d222b77a61527f2c177b0869e7babc24

                                          SHA1

                                          3f23acb984307a4aeba41ebbb70439c97ad1f268

                                          SHA256

                                          80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

                                          SHA512

                                          d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\114b0837-edc0-4e55-af01-08de9e83e047.tmp

                                          Filesize

                                          196KB

                                          MD5

                                          cc4b30997e033a9e6d09f3100ce07e8e

                                          SHA1

                                          76425d60ba54f02b28439cf73c94827dd5cdd90e

                                          SHA256

                                          7fd5ef4f22a0b6a5f9fe9f021fca98524673bd21a2d2305aff35427ae3513242

                                          SHA512

                                          c843538de43b6494db578d1420efcd19d6f711f24eb33e310f80b763cc0f86d5fc3f5339132e12a3d521ff7bd37ddb3380e9067c05e142e26a9bfa946b0be925

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

                                          Filesize

                                          20KB

                                          MD5

                                          644f2b0ee81b56ac7303031ab3ca10e4

                                          SHA1

                                          7ca67423f0ded5ff534f0a0d42df416b44d36805

                                          SHA256

                                          dda33f363084c0f939d6daf5e648ede370fe5be24bd408a6ea0e6bfa1042e6cc

                                          SHA512

                                          461b910c1c3d43d5e62ca18d8a2ec7c9a3db196d649c08ca56d92a8a5e39a991fa5dc53ee20572ecb93b3315b0ba2e2a0ba9f5644c61b2d2c81ef74c05abc39d

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

                                          Filesize

                                          32KB

                                          MD5

                                          e73310a5ad5e80e34806532d931b6a6d

                                          SHA1

                                          cae9a5325fe3131f80e817f195ad35552faeede2

                                          SHA256

                                          328e93bde79a16b713f728802fdbf8aad939455b40af68f15f479e1e8a57961f

                                          SHA512

                                          ea1ed4ddfaca09a21e838202f0acdb5d9594d57ea614d55a9cda50ed71edfefc044d33bd07a0f57397397562840d7a65d376c6f8f09dfbc400f0356fb8bf6657

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

                                          Filesize

                                          32KB

                                          MD5

                                          9c14da42e50b2e167bec77d3ea93350b

                                          SHA1

                                          3134a533899708740220acb3108c47872e792a2c

                                          SHA256

                                          32836c50b4c42baaddb764ee10a9a895865ccebc9eebc66a3f0d47ee09131b4e

                                          SHA512

                                          f93dbf35d425a25ff4285228eeae0b43dfcd93a368d5a27cc8f4bb80759da8ecdcd26facc2d00722c8b3131051558747fbb9625113b161cc6253a7fa9fb8b3a0

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                          Filesize

                                          744B

                                          MD5

                                          ae5020f50bb60bf2c060687fe34e2792

                                          SHA1

                                          0d7e8a72386ba60756120f871a8b0947db8b7a0a

                                          SHA256

                                          4fad06bae8751560c80e6cb1a6dc49dbf5ecb43afd0f8ba87511256135353d7f

                                          SHA512

                                          e377afff7d52b6f826da47d9abff6e231903078165c460cc500fdc2ac1a760962c4b52a79e04aae3a90c7d9e70a52c01aae90436d80b97317d2fb512890a236b

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                          Filesize

                                          5KB

                                          MD5

                                          607ed5d4d204ecfa5c97e08de30cb2c9

                                          SHA1

                                          df2ff55c4ecc4167964ec20249fef4965fd35e33

                                          SHA256

                                          5143265259f3aa9b8110a22d90eae5e5b1c7802b390d6096226e21b4dad98113

                                          SHA512

                                          97a96ec67e1c798692e0d87dd573bbf465b5a82b32c9859bdfe833b4e149acd80139641d5c098d263f93c2ce84cd932b5d7c37c23ad87321184cbc55a5732f6f

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                          Filesize

                                          1KB

                                          MD5

                                          c1bdc296ab41242515b7efd5371803da

                                          SHA1

                                          4cbdaf4ec66391f687deb418d923055bdba6b10d

                                          SHA256

                                          ea5fe37cb9e5ba6e0d52bc69ce57dd5f1618c25e4d6d6084f08714210ba3bfb7

                                          SHA512

                                          87714e4a8f655578a12643b9d3a5829382605a8797f0296afd1e4c760bf3011a6b70a1885474377284f56fb8b800a68b0ea25c42aba9c17c6f929abb33e54164

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                          Filesize

                                          2B

                                          MD5

                                          d751713988987e9331980363e24189ce

                                          SHA1

                                          97d170e1550eee4afc0af065b78cda302a97674c

                                          SHA256

                                          4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                          SHA512

                                          b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                          Filesize

                                          857B

                                          MD5

                                          46cc187911ec7709f5219e7f9436160a

                                          SHA1

                                          25b91cffb7d982b84097da2695d6e0284a29cd4a

                                          SHA256

                                          53c5b73bd86535f78ac31560d121ce193df49e4c8aced88f809d6a9731792731

                                          SHA512

                                          494804944c1bc9c22c79969eb7dc1247adfac7bfa3e342062f5b79c8fd6b8e892040d04cd1b7015b9d7bd87aaa684c3bcd93f979c65a19379c4d74f653dc505f

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                          Filesize

                                          859B

                                          MD5

                                          173f7368da59348cf2955e5715a26cc8

                                          SHA1

                                          71ddd1273bfcb9eae605318da860274486e5c7de

                                          SHA256

                                          0e1d09f36ea319f59727874a6bbb2908b07e45c8acb5e9f340e4250fda33c4f8

                                          SHA512

                                          23a1f4629f88ce270beaff265d8f6c480afef90cf0976463f818bd181c6046f21cda03793e73c7ad693a8348e647285031b37c9da00a12d154202dc14da3d024

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                          Filesize

                                          859B

                                          MD5

                                          9d588bf5cc3f74b5d866ccf10d76ad9d

                                          SHA1

                                          fad3ec8556ec0e0612d0df9ffdb5213f5e6aac8d

                                          SHA256

                                          de85b87e628c9fc106c40c2b39201330d7fafd32968922c115f6cc3e391c267c

                                          SHA512

                                          a7e122925634fbe361cda377f145ff9c5686a49abce3a669eceae50661712876802c2e9447f179ed845e78142f68e76ab72c2ec206f5898b2c9d5797239bc306

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT

                                          Filesize

                                          16B

                                          MD5

                                          46295cac801e5d4857d09837238a6394

                                          SHA1

                                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                          SHA256

                                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                          SHA512

                                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          10KB

                                          MD5

                                          9b3a27ab187752e2f47c8627a9574c13

                                          SHA1

                                          e10fd6ad699a067858d41744c05bdb169ee0d812

                                          SHA256

                                          4e2eb57354cf69c13976859bd47891d2ca713224aa1b744335f2334a9e131695

                                          SHA512

                                          79db816c5f4262ad554fcebed5cbfe6081b467ccd2493d96535db67fb945d7fb13148dd37df945898cb4a168b61608b553c5178799e9fc357ff1e6ed98947a93

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          8KB

                                          MD5

                                          6086791244adf27789f10263e7b0b8c3

                                          SHA1

                                          b6b2b06def72c3713ed18ac35b2fee270f70437b

                                          SHA256

                                          bb71593213f7a4b5c04d9245298f8a1b8dcc8cf3876a240c03394c19bdde61ab

                                          SHA512

                                          7c9ef8a0834ca85eccf64ced66883710655f2406c26aa54193d1c857f5d3b66cb206ee5dbff2332d4ee7a2aca90456ea8200f3467ac180310fa3ed43099e40eb

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          9KB

                                          MD5

                                          b85b35d4d86f42c2e7211c72d75892d5

                                          SHA1

                                          a8d9871aad575ee95b190b2f9038e2497e6d5e81

                                          SHA256

                                          cc58fa25291f733797a954ee3dd92c066bca0a357d0793d5acd8df3a975cea38

                                          SHA512

                                          39f5eaa1f604154998bb14d1e7d6060d7daaad2b977fac2f69167af81f72aa6f5ae2a5195b26ed169c17b62ccb93304bc8492435a19332862816b6a54f153001

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          9KB

                                          MD5

                                          75ac11efde0018c3420b422ad6352827

                                          SHA1

                                          02838c32e810cf0d407d587509df95d7bb16df84

                                          SHA256

                                          7cf7977daf77777a793f8509355123f758419077e03f869082dd8afd69605e07

                                          SHA512

                                          0106385e3e38de906266367ebd09e4602a6d91d1d8181240115242f503314c6332245dce805a96147facab52d825432926a0f48b9793656ebaeff440ac217ea2

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          9KB

                                          MD5

                                          3823934987c17af3e250463ae6951910

                                          SHA1

                                          604dec93e2f08c3759cba25dc3a730e85f8f81ec

                                          SHA256

                                          e185a859bcd115c285889cad068a2499f3be353556bdeb40d6fec338dd1398ad

                                          SHA512

                                          45a20189572d3edeeea8f0b5c273216709d6faace31ac8c7057de98707799d4c17ebc9e53e96e6fa6bd1a5b48f3ee0554e12c0ea6d3284fb945f326d5063749d

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          10KB

                                          MD5

                                          b660d4777fd1ddac106e9563c949157b

                                          SHA1

                                          4c6796925a5aa85fb12a1ef27a914c7549108985

                                          SHA256

                                          63941a05fc1f47039d7826fada859ef0ef24b460484b88d1dc242fab0b1a038a

                                          SHA512

                                          9d1c78214cb3a515722e7a20664d78310b3dc541aa2b726001e159c07992c1928216c66234139386613ec828f788949d6585be515a58f3d6e00e4c56cdff65a7

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          10KB

                                          MD5

                                          212827254ac41eb55272d270658e0eb0

                                          SHA1

                                          311d896facf9254527e0c13911f9004fa85c3ea3

                                          SHA256

                                          a6141650b637bd9d61c4cbd6cf4b9c8a067e56d7301a781feebe4849b3a8f980

                                          SHA512

                                          a4adf8f43912f3dcb203e78ed0855d9e7aabda0e87d6d2179ae8f4bf8379e3f520c279e7edc673f3748218e2f78e671e3f5ed016a7ce026aa32ec4b662cf727a

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          10KB

                                          MD5

                                          039148b79315d47d6ca6d9bfd62e6583

                                          SHA1

                                          5a28d7e6c410527eeaedf7cf78c8ebbdbadcee03

                                          SHA256

                                          205dae3b3a7d2eccec54bfcde04e599ae691cd3a6ae99a3d8138ec270776fca2

                                          SHA512

                                          a7e58aa2ac42c8cd66ffc048838f92d408c4518c1863a26a84d007bee5de47eba82e356832d9ee6d812cf623e7eb98d7fb65162ab18ffd1e1874e8ebbc9406c3

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

                                          Filesize

                                          15KB

                                          MD5

                                          bc398e9583b0da20306120067099d873

                                          SHA1

                                          ca9f8fe697b0dede70a74610794ad61fa4f1763e

                                          SHA256

                                          ca3922e24af6beb77b5b368c584a5ace2e57650be77dc79f250ac8062156682d

                                          SHA512

                                          9a30017bb1e71458b503ddc4dad0d2e78ef9e93bef9f5b4481a9a3e2611f643e7936293f5774140e28f41570b4f3308a7ed304ee8c6e2b4de6fda9dc4b702c0c

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2fb5b68a-fbb8-423e-ab89-1c5dbe203b08\index

                                          Filesize

                                          24B

                                          MD5

                                          54cb446f628b2ea4a5bce5769910512e

                                          SHA1

                                          c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                                          SHA256

                                          fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                                          SHA512

                                          8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2fb5b68a-fbb8-423e-ab89-1c5dbe203b08\index-dir\the-real-index

                                          Filesize

                                          624B

                                          MD5

                                          8a94d0dd85229cec5e595c7d29ae301c

                                          SHA1

                                          efd03e004d4e3747f3e1b67843723593f55ccc51

                                          SHA256

                                          b436fd8c8a2b4edf2566ce848455a7aaccecc1e745215efc412318ee5941fee5

                                          SHA512

                                          98e874ba2bd9d91f96e7cb4594318a0fa10ee550319a6bf183358cce1511361213efa6e27c8e3a1eb2e44d4b3eb5af95274c3b72c402ea573c223f8eba781d8c

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2fb5b68a-fbb8-423e-ab89-1c5dbe203b08\index-dir\the-real-index~RFe589ad4.TMP

                                          Filesize

                                          48B

                                          MD5

                                          bbddea380d0f9907061fe707128bc992

                                          SHA1

                                          8ab5a307c1dfb4ffd3f0a8cf1b31b460611e6d70

                                          SHA256

                                          3a2a0a3b66c8aa59ad97ee561901ce9b49f661280338ed6a7b1563b83860376d

                                          SHA512

                                          cadb38feb9e6cf71d09d32ac57768456ff304073b018266778d0410191bac0b38c65bd965d8f7ef788eee7a94d1b3a93d1e93e7b156ee12ebec8a414444e988d

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\94f45a1c-162f-480a-82ed-5c1145f27c2b\index-dir\the-real-index

                                          Filesize

                                          2KB

                                          MD5

                                          4b60cd5f2710e57141d444955397bdb0

                                          SHA1

                                          5c2c4d3ef32c87598becac42cf3e78f5008d8da8

                                          SHA256

                                          62a27342662a6a8062ce03678144e2d18c0bce0a39a644969a92ab8131df2f0e

                                          SHA512

                                          5b564c1193e61952ff1573f1ef237a2b4e86d94bfd806513654f5ddc504e1ef22ee1253ec9cea8a91a3ff2fa042641eabe935acd0f0a3a707817b50096e84fc5

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\94f45a1c-162f-480a-82ed-5c1145f27c2b\index-dir\the-real-index

                                          Filesize

                                          2KB

                                          MD5

                                          3b9413e151356daba3e6a750094e28cd

                                          SHA1

                                          8fff1e48c7aaee38624ccd9c0d150edafdb77752

                                          SHA256

                                          fa68e6845dc30cfd189c436adbcd1d6492f2e4fc558f99d29fadb15c41736668

                                          SHA512

                                          4c2e283137a8b8b71232388b6fda14f427812b0232c05d75eb5e5641a7f2d1d7ec37e641390771104b31b65ed1408d188f6fa9a62df686e6fe2344becfcd2c12

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\94f45a1c-162f-480a-82ed-5c1145f27c2b\index-dir\the-real-index~RFe584188.TMP

                                          Filesize

                                          48B

                                          MD5

                                          6a109fc613cfd50611f39ca19dbdb3ed

                                          SHA1

                                          69325379a27006c11cdaf9dcf5522b45eea0824d

                                          SHA256

                                          a9ee1a36188e6c327a5fa0a754380123a51e6a38de768fc370d6dd143c11d4c7

                                          SHA512

                                          266bd8fdaec7fb1eabc35118710216b937a23e6fab0490da524ab493955194c453d5d0047e7c1295500ed8ec6edd4cdef1e0bad412fa59ef8e3e79d31ad81ba4

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                          Filesize

                                          176B

                                          MD5

                                          ca647fc857864f65cb9017c25dfc0819

                                          SHA1

                                          e44a1aec41cee26a80988522c4c52cb5f67df233

                                          SHA256

                                          e378642d9c0ca3cc18d8ee8d832f0266f1293056dc457a24453066f45ce65245

                                          SHA512

                                          b100ec5f34be2d2c2df5b04c23a00c8fdfd1f83ddd5900502b790f901a2550661c776661cd8dd7ec66d4e71974a63acd17610133e83fa8466b217baf65b29364

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                          Filesize

                                          178B

                                          MD5

                                          9b2db74bb7704b34a1792ad1a889726e

                                          SHA1

                                          3591b8d08c3bba2fa62fc6f7e4b575bb77f2b1b6

                                          SHA256

                                          1444f237873e20058910c859831bf7db447cf303d4af8a4fa31b751279a05505

                                          SHA512

                                          715d66bb4038d774d1b2d9ce7d3239d2e86074e519705c76acdd19fa2936268d3eec9d896aa51f3f29ec96997936c044d813eef02e8499cec109751750562d76

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                          Filesize

                                          187B

                                          MD5

                                          0e6484045d94f91965292687bd219948

                                          SHA1

                                          14fde091695738fa551fb719f17a51ec3d256e16

                                          SHA256

                                          a7cff3df4b74a463783db4d019ea5a22dbaf623c3e6b4a0532bcca803d434b7d

                                          SHA512

                                          20bbfad4fea8c9b6c12729be01bd00b984e338deb81b47399828a8218712a4158e3045bcb32025557265fd45aedd90bfa8aceb306cb8e87cb64d0362af85be12

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                          Filesize

                                          112B

                                          MD5

                                          29e453bd9d202b30519bd0b1623e8774

                                          SHA1

                                          c6fcbf5ff89b23ba1159609b28a262377a3aa205

                                          SHA256

                                          e87e818fec413c1b929856440a873bbbaa9be881d6997f7530ff8c6966e4c885

                                          SHA512

                                          56b4f3b16d128ce744243ad45ad9429c81b5ab40a4fc4df3463317543d1ecb8c337f9d5f03acfa2688d5b31db206d9858f250aa640569a21db6e32273b1faaf8

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                          Filesize

                                          183B

                                          MD5

                                          986f3518065be7c4bf099e0363f41ddf

                                          SHA1

                                          840ff9269163e64b1b78f6860d90319faeaed416

                                          SHA256

                                          69a4b8c6ea50bf0fba42685dec7645d22bf3dac84f447414d6deda9dabfcf475

                                          SHA512

                                          90928e1b6e51e5e4571777c159c295e4c3380ba34f4aaf62495b025302734ff6137c3533a7368c13cf821c71d7062acd247b36147c2599d3f500c3da059fcd8c

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                          Filesize

                                          114B

                                          MD5

                                          376df089d99fbd4301db0bcb811e69d8

                                          SHA1

                                          6bbb9ced2ba9e8feb382c4eaace814242b802de0

                                          SHA256

                                          8d802b86bffaa0e2b38eef70faea1756415cb39f15db90e647d2b81bb6b7fe33

                                          SHA512

                                          8c8663b0f57f5c773ba2c880e1a3f934cdb17449e2c8f62fed21a5edbf6f1059be40902874b530dcb277fdbbd92cfd2536a6b8d06959a282816883c4b79cecdf

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                          Filesize

                                          183B

                                          MD5

                                          c49fed5542490756fe837a83e576962e

                                          SHA1

                                          f11081022e10bbcfba9a2c904358820d1cefe4bc

                                          SHA256

                                          044a89454a8a23031e801414aaddc84fe0e883acd10e37a9dec6380863af2df4

                                          SHA512

                                          0c91153dab418c39b421a2d72f744569e7b0214e7a3cae268efe9281f9d37d22c1253fa5080bea065ba69cf6eb3f5e113438ca8ad702a1fe1e083982650888b1

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58248a.TMP

                                          Filesize

                                          119B

                                          MD5

                                          be041ff250b2822d360d94b8cc4e7ec5

                                          SHA1

                                          2027c0ea3b9f9f781e82e2bfc65e541fae21f718

                                          SHA256

                                          0bf1134b12730e0393cb610035b15ec3e771c94016a66fe2aaa945bf113312e8

                                          SHA512

                                          53fa6ebd672db1f145921249ef88f1ae477ad95ca234db7afcbee5faabcda9b8de32dc140626533780d49e4207bfaa6bc6c6203729df23ce326f844219393ac6

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                          Filesize

                                          120B

                                          MD5

                                          9550a4f55db39294ae068afec664025b

                                          SHA1

                                          86ca3cd8b0268ef5580bf0e7448b6cece67f28fc

                                          SHA256

                                          b51945ffdfa7638c8b0a505b0b3459a81c8a362dd85fc86af03da15f28e4f14c

                                          SHA512

                                          08ef0567fa7c28963aa6783b3f083f4d375ea342076cea39ed8ecd3e6982aa5d012fdde8312e1682c4da053961e73c02e01c041cfd80d61d54fc3bb4d56c3952

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                          Filesize

                                          197KB

                                          MD5

                                          2416efe0cef8dffe64877b95db1a2158

                                          SHA1

                                          16f1f5a799e0ae2b1b95ef77b3db15d75a95c5dd

                                          SHA256

                                          c8322b5086141a9780054d3dc3707e378d31150e7c6d46c236fe56a276d6fc41

                                          SHA512

                                          418a28dbde3bd8de4bdfd56aa197e69a17f6bd69ecae524c0727d42cecf9600dbf1abd367e0dc09f9f9e712ad883e3e1f2e7aacd6641832572b75489c7396ba3

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                          Filesize

                                          197KB

                                          MD5

                                          e6847a5b411a7c276deea9af174243f3

                                          SHA1

                                          24bd417a99fc959764a8f0741b3c03ea4b65e891

                                          SHA256

                                          5b603216d6818219d06df0143139fb3625afdc94f7f59a2eedc00a0a42d3d684

                                          SHA512

                                          bbd47ece4a89b91e6da853a476f6f5011591b09adbeaaf2535946e7ab822afcde0a9f4f49467e49872f815d75cfe0955f09014ede458befca4c94ef4e7b68ab0

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                          Filesize

                                          197KB

                                          MD5

                                          ca9605ac6f6db4fdeaeee7fb85b18822

                                          SHA1

                                          551025e8748610f8512e7bc25d258723968a7a6f

                                          SHA256

                                          d8350af96a811aa3e8e9ba5228fb4d606d88a33117f4db4d08218277af469094

                                          SHA512

                                          cf4140eb2db6288ff84cc8d36c6cdb7cf39f99cc82bab2648723fef17060de61bf7f667052f18a78c955edabe6fd60a5be838797eb2d7b1a039ac5cf0f07ef44