Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    253s
  • max time network
    261s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/08/2024, 20:59

Errors

Reason
Machine shutdown

General

  • Target

    OBS-Studio-30.2.2-Windows-Installer.exe

  • Size

    133.3MB

  • MD5

    51bc832235635f695486de858cd4bd70

  • SHA1

    ba8f215b86f5850890054fc94bf436568f792611

  • SHA256

    c11eb303330b9638936bad26cf02b8313ca43557d2a63f5e5c00d1eab2a9682e

  • SHA512

    7d41be2f8acdf88d508e696d7a622407940ee173914bc5c66f917851ad5038edf43d48c18058c8b2d8c67efee1e061c0623f22286238eae26696ae7e36cf1753

  • SSDEEP

    3145728:BcXZ1XDmrk0sggh/IWONMkBOvBX3A0cZHcITZYjRZucclhHJ+jqJZf:iixBdJPQRdclN

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 15 IoCs
  • Loads dropped DLL 64 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Drops file in System32 directory 51 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 15 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 26 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 26 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\OBS-Studio-30.2.2-Windows-Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\OBS-Studio-30.2.2-Windows-Installer.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:4228
    • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\check_for_64bit_visual_studio_2022_runtimes.exe
      C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\check_for_64bit_visual_studio_2022_runtimes.exe
      2⤵
      • Executes dropped EXE
      PID:4416
    • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\VC_redist.x64.exe
      "C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\VC_redist.x64.exe" /quiet /norestart
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3112
      • C:\Windows\Temp\{E9DC6CE7-A856-483A-90B9-BBB82E38802E}\.cr\VC_redist.x64.exe
        "C:\Windows\Temp\{E9DC6CE7-A856-483A-90B9-BBB82E38802E}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\VC_redist.x64.exe" -burn.filehandle.attached=556 -burn.filehandle.self=552 /quiet /norestart
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4560
        • C:\Windows\Temp\{66E8980F-A7C9-4F22-8834-17C114F8DEAF}\.be\VC_redist.x64.exe
          "C:\Windows\Temp\{66E8980F-A7C9-4F22-8834-17C114F8DEAF}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{04AA0602-A338-4D73-B574-B15AF7105788} {C685AF11-8669-4E32-8F4D-A9499DC94F2F} 4560
          4⤵
          • Executes dropped EXE
          • Adds Run key to start application
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:812
          • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
            "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={5af95fd8-a22e-458f-acee-c61bd787178e} -burn.filehandle.self=1080 -burn.embedded BurnPipe.{743265B9-531B-4A8C-A45E-102851F56ACE} {337FDF9F-B94C-4CC9-8BD2-7D46FB2BB369} 812
            5⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:4296
            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
              "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=516 -burn.filehandle.self=536 -uninstall -quiet -burn.related.upgrade -burn.ancestors={5af95fd8-a22e-458f-acee-c61bd787178e} -burn.filehandle.self=1080 -burn.embedded BurnPipe.{743265B9-531B-4A8C-A45E-102851F56ACE} {337FDF9F-B94C-4CC9-8BD2-7D46FB2BB369} 812
              6⤵
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:2468
              • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{F4487FC2-A088-4103-9CB7-EF13E2B4A270} {DA65384E-B697-4F50-A356-20CAA6632D02} 2468
                7⤵
                • System Location Discovery: System Language Discovery
                • Modifies registry class
                PID:3140
    • C:\Windows\SysWOW64\regsvr32.exe
      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\obs-studio\data\obs-plugins\win-dshow\obs-virtualcam-module32.dll"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      PID:1616
    • C:\Windows\SysWOW64\regsvr32.exe
      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\obs-studio\data\obs-plugins\win-dshow\obs-virtualcam-module64.dll"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4928
      • C:\Windows\system32\regsvr32.exe
        /s "C:\Program Files\obs-studio\data\obs-plugins\win-dshow\obs-virtualcam-module64.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:3260
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio\OBS Studio (64bit).lnk"
      2⤵
        PID:5080
    • C:\Windows\system32\vssvc.exe
      C:\Windows\system32\vssvc.exe
      1⤵
      • Checks SCSI registry key(s)
      • Suspicious use of AdjustPrivilegeToken
      PID:3760
    • C:\Windows\system32\srtasks.exe
      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
      1⤵
        PID:4472
      • C:\Windows\system32\msiexec.exe
        C:\Windows\system32\msiexec.exe /V
        1⤵
        • Enumerates connected drives
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4556
      • C:\Windows\explorer.exe
        C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
        1⤵
        • Suspicious use of WriteProcessMemory
        PID:2772
        • C:\Program Files\obs-studio\bin\64bit\obs64.exe
          "C:\Program Files\obs-studio\bin\64bit\obs64.exe"
          2⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Checks processor information in registry
          • Modifies system certificate store
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:1688
          • C:\Program Files\obs-studio\bin\64bit\obs-qsv-test.exe
            "C:/Program Files/obs-studio/bin/64bit/obs-qsv-test.exe" 4b6c 4c96
            3⤵
            • Executes dropped EXE
            PID:928
          • C:\Program Files\obs-studio\data\obs-plugins\win-capture\get-graphics-offsets64.exe
            "../../data/obs-plugins/win-capture/get-graphics-offsets64.exe"
            3⤵
            • Executes dropped EXE
            • Suspicious use of SetWindowsHookEx
            PID:5080
          • C:\Program Files\obs-studio\data\obs-plugins\win-capture\get-graphics-offsets32.exe
            "../../data/obs-plugins/win-capture/get-graphics-offsets32.exe"
            3⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            PID:4560
          • C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe
            "C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe" --type=gpu-process --no-sandbox --log-severity=disable --user-agent-product="Chrome/103.0.5060.134 OBS/30.2.2" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --parent_pid=1688 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\debug.log" --mojo-platform-channel-handle=4944 --field-trial-handle=5124,i,13333333980602472189,321193657766756443,131072 --disable-features=CalculateNativeWinOcclusion,HardwareMediaKeyHandling,WebBluetooth,WinUseBrowserSpellChecker /prefetch:2
            3⤵
            • Executes dropped EXE
            PID:3104
          • C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe
            "C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --log-severity=disable --user-agent-product="Chrome/103.0.5060.134 OBS/30.2.2" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --parent_pid=1688 --log-file="C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\debug.log" --mojo-platform-channel-handle=5216 --field-trial-handle=5124,i,13333333980602472189,321193657766756443,131072 --disable-features=CalculateNativeWinOcclusion,HardwareMediaKeyHandling,WebBluetooth,WinUseBrowserSpellChecker /prefetch:8
            3⤵
            • Executes dropped EXE
            PID:3452
          • C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe
            "C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=disable --user-agent-product="Chrome/103.0.5060.134 OBS/30.2.2" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --parent_pid=1688 --log-file="C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\debug.log" --mojo-platform-channel-handle=5236 --field-trial-handle=5124,i,13333333980602472189,321193657766756443,131072 --disable-features=CalculateNativeWinOcclusion,HardwareMediaKeyHandling,WebBluetooth,WinUseBrowserSpellChecker /prefetch:8
            3⤵
            • Executes dropped EXE
            PID:4832
          • C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe
            "C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe" --type=renderer --log-severity=disable --user-agent-product="Chrome/103.0.5060.134 OBS/30.2.2" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --parent_pid=1688 --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=5456 --field-trial-handle=5124,i,13333333980602472189,321193657766756443,131072 --disable-features=CalculateNativeWinOcclusion,HardwareMediaKeyHandling,WebBluetooth,WinUseBrowserSpellChecker /prefetch:1
            3⤵
            • Checks computer location settings
            • Executes dropped EXE
            PID:4820
          • C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe
            "C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe" --type=renderer --log-severity=disable --user-agent-product="Chrome/103.0.5060.134 OBS/30.2.2" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --parent_pid=1688 --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=5464 --field-trial-handle=5124,i,13333333980602472189,321193657766756443,131072 --disable-features=CalculateNativeWinOcclusion,HardwareMediaKeyHandling,WebBluetooth,WinUseBrowserSpellChecker /prefetch:1
            3⤵
            • Checks computer location settings
            • Executes dropped EXE
            PID:2456
          • C:\Program Files\obs-studio\bin\64bit\obs-ffmpeg-mux.exe
            "C:/Program Files/obs-studio/bin/64bit/obs-ffmpeg-mux.exe" "C:/Users/Admin/Videos/2024-08-20 21-04-31.mkv" 1 1 h264 2500 1280 720 1 1 1 1 1 0 30 1 0 aac simple_aac 160 48000 1024 2 "" ""
            3⤵
            • Executes dropped EXE
            PID:1824
          • C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe
            "C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-sandbox --log-severity=disable --user-agent-product="Chrome/103.0.5060.134 OBS/30.2.2" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --parent_pid=1688 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\debug.log" --mojo-platform-channel-handle=5100 --field-trial-handle=5124,i,13333333980602472189,321193657766756443,131072 --disable-features=CalculateNativeWinOcclusion,HardwareMediaKeyHandling,WebBluetooth,WinUseBrowserSpellChecker /prefetch:2
            3⤵
            • Executes dropped EXE
            • Suspicious behavior: EnumeratesProcesses
            PID:4940
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x408 0x4f0
        1⤵
          PID:3952
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
          1⤵
          • Enumerates system info in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:3840
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff92daa46f8,0x7ff92daa4708,0x7ff92daa4718
            2⤵
              PID:3456
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,4900280987323314814,14672387871369398384,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:2
              2⤵
                PID:4356
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,4900280987323314814,14672387871369398384,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
                2⤵
                • Suspicious behavior: EnumeratesProcesses
                PID:2028
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,4900280987323314814,14672387871369398384,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2940 /prefetch:8
                2⤵
                  PID:1648
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4900280987323314814,14672387871369398384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
                  2⤵
                    PID:4544
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4900280987323314814,14672387871369398384,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
                    2⤵
                      PID:752
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4900280987323314814,14672387871369398384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4216 /prefetch:1
                      2⤵
                        PID:5252
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4900280987323314814,14672387871369398384,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
                        2⤵
                          PID:5260
                      • C:\Windows\System32\CompPkgSrv.exe
                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                        1⤵
                          PID:4044
                        • C:\Windows\System32\CompPkgSrv.exe
                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                          1⤵
                            PID:1532
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe"
                            1⤵
                            • Enumerates system info in registry
                            • Modifies data under HKEY_USERS
                            • Suspicious behavior: EnumeratesProcesses
                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                            • Suspicious use of FindShellTrayWindow
                            • Suspicious use of SendNotifyMessage
                            PID:5664
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff93caccc40,0x7ff93caccc4c,0x7ff93caccc58
                              2⤵
                                PID:5680
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1888,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1880 /prefetch:2
                                2⤵
                                  PID:5836
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2032,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2136 /prefetch:3
                                  2⤵
                                    PID:5848
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2284,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2408 /prefetch:8
                                    2⤵
                                      PID:5896
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3140,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1368 /prefetch:1
                                      2⤵
                                        PID:6112
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3156,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3180 /prefetch:1
                                        2⤵
                                          PID:6120
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4572,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4536 /prefetch:1
                                          2⤵
                                            PID:5388
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4840,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4860 /prefetch:8
                                            2⤵
                                              PID:5580
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4844,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4872 /prefetch:8
                                              2⤵
                                                PID:3876
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4032,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5304 /prefetch:1
                                                2⤵
                                                  PID:4780
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4728,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4868 /prefetch:1
                                                  2⤵
                                                    PID:4356
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4720,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4560 /prefetch:1
                                                    2⤵
                                                      PID:3512
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4580,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5360 /prefetch:8
                                                      2⤵
                                                        PID:5592
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5476,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5488 /prefetch:8
                                                        2⤵
                                                          PID:4976
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5552,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5604 /prefetch:8
                                                          2⤵
                                                            PID:5584
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=3188,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5572 /prefetch:1
                                                            2⤵
                                                              PID:5396
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=3268,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4696 /prefetch:1
                                                              2⤵
                                                                PID:3900
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3376,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5544 /prefetch:1
                                                                2⤵
                                                                  PID:4596
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5556,i,9007061304441179354,10479691120500270624,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5992 /prefetch:8
                                                                  2⤵
                                                                  • Modifies registry class
                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  PID:4500
                                                              • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                                                "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                                                1⤵
                                                                  PID:5372
                                                                • C:\Windows\system32\svchost.exe
                                                                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                  1⤵
                                                                    PID:4896
                                                                  • C:\Windows\system32\LogonUI.exe
                                                                    "LogonUI.exe" /flags:0x4 /state0:0xa38f3055 /state1:0x41c64e6d
                                                                    1⤵
                                                                    • Modifies data under HKEY_USERS
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:6068

                                                                  Network

                                                                  MITRE ATT&CK Enterprise v15

                                                                  Replay Monitor

                                                                  Loading Replay Monitor...

                                                                  Downloads

                                                                  • C:\Config.Msi\e58494e.rbs

                                                                    Filesize

                                                                    19KB

                                                                    MD5

                                                                    00725a397f019bddb23ffedf743bf78a

                                                                    SHA1

                                                                    f8be96d4b7aa39938d4d2de692b4380910ac4a0b

                                                                    SHA256

                                                                    3b2e668188675e85a302d7203ec0edcf213e60c4a73679a22aa456b52931ce6a

                                                                    SHA512

                                                                    a5aa4a058900d1ca0d6c2e2e93d0e5970ff396c54bb8aec13f64adbfde0b81b4b641aab95d6ea25923e194d67b3fc7d8d05d0d9e0a308628e3d5231e9f9b018f

                                                                  • C:\Config.Msi\e58495a.rbs

                                                                    Filesize

                                                                    19KB

                                                                    MD5

                                                                    b95e479d4b1955456ab251787ee40452

                                                                    SHA1

                                                                    b6582404e9e95ca407fd33cb945bca4436ecfa1f

                                                                    SHA256

                                                                    27a1ecc9d6cec3959d10a5226ac89c663fab28fac79bb3ae4493d49ebab5740b

                                                                    SHA512

                                                                    554a940ab3991a79a11f07abeca05df88dbcb71e07c78b1d851ef7553f2aba35cf8997cf3e87cb44e0490578723034707614ea151767058355c7417d614c287e

                                                                  • C:\Config.Msi\e584961.rbs

                                                                    Filesize

                                                                    21KB

                                                                    MD5

                                                                    9650a354a5d14c1a23391de5c668759f

                                                                    SHA1

                                                                    b17458e91095f332ddbb1e1565bc78471c29ea8a

                                                                    SHA256

                                                                    26e0b6ae204722692c1dee92dd3b7df22497476d3dab23f2a856db3ac4aa3820

                                                                    SHA512

                                                                    6031f257bfa310698e0120a0fb71c33c94c4355acde1163e30e9b8973314bded30d459f614b75e09c424550b62a30ccbc38321fee89444c69ef2095328932a58

                                                                  • C:\Config.Msi\e584970.rbs

                                                                    Filesize

                                                                    21KB

                                                                    MD5

                                                                    d56b80e66d1213cbcbd25636694ad748

                                                                    SHA1

                                                                    dcc9026814db3926fd27d8ccaf5bb8202bb444d3

                                                                    SHA256

                                                                    1b6a0f2f331dc4632c15f2db30422e2ec179d00e826addb885a060cc97e9260d

                                                                    SHA512

                                                                    c8f99b1a80976b5294ba729b35ae9e9f4c77e23f152ee664a30848373265fcf0552c3cb534f6684537ecf9c72cb3fb88da0f1ef984a2fb66b9a075b6c1277e94

                                                                  • C:\Program Files\obs-studio\bin\64bit\Qt6Core.dll

                                                                    Filesize

                                                                    6.0MB

                                                                    MD5

                                                                    0762b88bcacebbf522d913012d91ea4b

                                                                    SHA1

                                                                    e731a4d58f05c3def45e73ef8827cb0553619ebc

                                                                    SHA256

                                                                    de5cbead1bc26924505aa081350f233b9ed472bfcf5a17d76f6f8c490e07a76d

                                                                    SHA512

                                                                    02b0f34416a634a5874f8dd66390a81311d91aac639d32344ff535273afe5173f34fb9826e7b1bb333cf4a8dd94e96f637e877dde913be239e7c55f1e779dc20

                                                                  • C:\Program Files\obs-studio\bin\64bit\Qt6Gui.dll

                                                                    Filesize

                                                                    7.3MB

                                                                    MD5

                                                                    f8ffa256dd82305d8e8126846360f1da

                                                                    SHA1

                                                                    89f5c5536cd346e2bdb4c65ffd7144937cf752d8

                                                                    SHA256

                                                                    b200628e8b572be7c191743775393b119672e8d05ac9e939783963124cf777c8

                                                                    SHA512

                                                                    ffcb56eaf79435821f52e72f08007bc914770b9ebfef2a9c2abe19b7bda1e4f39e0355cf0d7258508c076993f928e2fb548cd68945defa7194a444a19a90636c

                                                                  • C:\Program Files\obs-studio\bin\64bit\Qt6Network.dll

                                                                    Filesize

                                                                    1.4MB

                                                                    MD5

                                                                    ddce05d577d0d2e6c3e93a144f128e23

                                                                    SHA1

                                                                    7fc12702f41536bd73f25864e0e182f32f91d336

                                                                    SHA256

                                                                    8ebf56451bb054cb7adc802bd30f48ba5aa5ebb05b2df70d9d31e7d490458b30

                                                                    SHA512

                                                                    729ab8df0f8ae48954c0977724127de2659836a1dbf2517820a2703b4176f2fcb2f550230efa4e828a3d1fb3e172910ebef676d10066def5775692bcddccc78e

                                                                  • C:\Program Files\obs-studio\bin\64bit\Qt6Svg.dll

                                                                    Filesize

                                                                    369KB

                                                                    MD5

                                                                    1a695937090d5650bf0139b43dfabd49

                                                                    SHA1

                                                                    f3c0b976fdddccaef0ae72afba984ebcc1db859e

                                                                    SHA256

                                                                    e2d1856c1ca01d4fb9e81dada32faf522e4eede08cbe0cefe409b6d435eb0b5b

                                                                    SHA512

                                                                    d10a4cb0e1d4a2c6ea61e4255d13f7e0d944ef302ab91b917fa49fbd8449aa040e7d0252728b4c426cf7e49f868352e08b9eb3657a5d5eeb90f5f0257c4a0339

                                                                  • C:\Program Files\obs-studio\bin\64bit\Qt6Widgets.dll

                                                                    Filesize

                                                                    6.1MB

                                                                    MD5

                                                                    e6848de430c0d895eb7e2a4c857710f8

                                                                    SHA1

                                                                    ed411a88fda01cccbfc10fb5cc0c9f0695f860da

                                                                    SHA256

                                                                    efb88805111bd064c6a2832b311729c17236b5d8c63437b19e207994ed1db921

                                                                    SHA512

                                                                    18ebcb55b8f5f908b26757fd09ff03ab7aa402d37a4c920f186b774cdda721bd2916f99b8d040db44ec6d43352d750889575a0e7c2a52e9dd8ef0b51842c5007

                                                                  • C:\Program Files\obs-studio\bin\64bit\Qt6Xml.dll

                                                                    Filesize

                                                                    147KB

                                                                    MD5

                                                                    9f277e952a04d33f809ef0f0641b4b7a

                                                                    SHA1

                                                                    906936a5483a4f029822f91dedf11a6c55c8a3a1

                                                                    SHA256

                                                                    66ae1d526082dcc52ac0d503bfd12525f0f463f44ecf6020df68f0323cebe29c

                                                                    SHA512

                                                                    dc4d15140899b6e7dbf00ac1760831f094f7e558e054466d13cbbb91c7275d389d1a1cf553db4c7bff857886ce40302fe8b554badb3f1b0ebe1bbb5a483867f4

                                                                  • C:\Program Files\obs-studio\bin\64bit\avcodec-61.dll

                                                                    Filesize

                                                                    33.7MB

                                                                    MD5

                                                                    8f1b9c7b3bd443fca6d813bf8db3d7c8

                                                                    SHA1

                                                                    1686c54937d626a53d0ce29d0de1ccfcab0c7ce4

                                                                    SHA256

                                                                    a96a34a1cf09e9e137c3e660432327373a39b97bb6996f120dfc596588d271f7

                                                                    SHA512

                                                                    61645810499e1017212ca605f9d2d27405cdcd2cce246a352c64bbff1f50470c0ad08ce4fb8e05875d2dd8f58e70bd5cb56b0c0f961e55bbd8fd82998aae05fd

                                                                  • C:\Program Files\obs-studio\bin\64bit\avformat-61.dll

                                                                    Filesize

                                                                    2.2MB

                                                                    MD5

                                                                    e0eccd9f5ca450d443eb90fb1c49516a

                                                                    SHA1

                                                                    f1280bd7fee74f5674ea7672808639d95e171b6d

                                                                    SHA256

                                                                    bc59f2f176887ef96d257392c5fdfbf220e44e850226482d29e09c0e499570b2

                                                                    SHA512

                                                                    19a32a8016aed12a0195e0bbcda3d665e6ebd11a5734798d9c705c0f4a62e84ed2a2cfa09b3ccbf48e07ce2889b1c2b47b4ecc8461d55fa6e2d61a6afff3e250

                                                                  • C:\Program Files\obs-studio\bin\64bit\avutil-59.dll

                                                                    Filesize

                                                                    905KB

                                                                    MD5

                                                                    1b9a6b04205cee41ffc62f71d644c451

                                                                    SHA1

                                                                    cd49ccd6fc64b20928a3462a4c4accaccc9fc2dd

                                                                    SHA256

                                                                    db319a558f1d7bdc1f9512b3f4d5304d97fd1002d75fddaa460760395910203b

                                                                    SHA512

                                                                    28cfcfbd9979777f63270ed67a8b453ad283220a51274ec8caeb1ee8732b14c652f45792e8a00a0b08c9c78670e7610f243a4246692dbc0b695037b025f68a0c

                                                                  • C:\Program Files\obs-studio\bin\64bit\libcurl.dll

                                                                    Filesize

                                                                    554KB

                                                                    MD5

                                                                    46616276132e99de502535117af6aab5

                                                                    SHA1

                                                                    c3cedd0f355e551ca93e58c721c73fb06227bca0

                                                                    SHA256

                                                                    dd1ee50bf696d361c3b2c81232ca3374ac826acdaef8431cf85cc21c3a20ff1f

                                                                    SHA512

                                                                    848f612c813770f851b868249c916fa127ee54de4c539f085a7699e5bd57f90958c60bf628ef79fe60a0cb7620cfe9a0fc2cf8dde4d2bfc8bd838bb5ec963908

                                                                  • C:\Program Files\obs-studio\bin\64bit\obs-frontend-api.dll

                                                                    Filesize

                                                                    39KB

                                                                    MD5

                                                                    f3747839c3b931b430f63a28fce6b0ee

                                                                    SHA1

                                                                    e42c74e64256d20e4ad54b1d3b1b20a1cf7751fc

                                                                    SHA256

                                                                    76b4219c0c31e9c3523d2a888ce1adee2a946bacdbb7b4e7339cacf2dcf764b0

                                                                    SHA512

                                                                    4ef948541424ed1058b8ed48f60279f251cc8493bd536717c7a6a848b1b8438f0d47569d5ac558a3e36a34018021e25e1e048808fa45aa086a12fbac28debe68

                                                                  • C:\Program Files\obs-studio\bin\64bit\obs.dll

                                                                    Filesize

                                                                    1.0MB

                                                                    MD5

                                                                    dbab8ea71b62001473ee033c5116c730

                                                                    SHA1

                                                                    afc8d7d2323ded9751dfd6fe9a5533828aa8deb8

                                                                    SHA256

                                                                    6dfa042184abc12f2fd586b985e373bfa36cc6653fd57eb453c92e5419d3a910

                                                                    SHA512

                                                                    869d20ebc0853b6374734a40beee146da75849537d908b896c0abd888c714f353cf34a1a79c1f6ad92660a08c7907507cd8d5bd52338eb55dc9aa425ef9a09f8

                                                                  • C:\Program Files\obs-studio\bin\64bit\obs64.exe

                                                                    Filesize

                                                                    4.8MB

                                                                    MD5

                                                                    f57c0c3698e1043aa79b09422b3142f7

                                                                    SHA1

                                                                    9f61c05f7f6f9b7f0313426c5563af105f1af233

                                                                    SHA256

                                                                    34faa2f7086942a97d10685d70a2788676c337894b5ad09f8e15e6b0db35926c

                                                                    SHA512

                                                                    fab0aa9ad2f97172e9f8e82dd6da3f806e9de1683d66b611ae5b2bad3dfb1d561d2952d7211dc0cd8cfa23230bd5c9eed055048b47ed8eedc6447bbd67c8c0fe

                                                                  • C:\Program Files\obs-studio\bin\64bit\swresample-5.dll

                                                                    Filesize

                                                                    128KB

                                                                    MD5

                                                                    ad52689aa55d9d89bd7e9e4b05cd6729

                                                                    SHA1

                                                                    f70ae4a337928964704a832b51a96dfb3b308be7

                                                                    SHA256

                                                                    cc68bfbc0825db6ca6b802dcea6cf8d151acaaff1974853620968a9f763bf365

                                                                    SHA512

                                                                    ce58b3b3ce7c96bab4757d97fb791f766ccb539a1cc8a3845a63a0078c4a3ebb1385bffc0c152add0ebd453bddef0cc851686ccb47746652e1acb5cedca9f948

                                                                  • C:\Program Files\obs-studio\bin\64bit\swscale-8.dll

                                                                    Filesize

                                                                    571KB

                                                                    MD5

                                                                    e46d4f133c67fdb94eade7e9b2df9bd3

                                                                    SHA1

                                                                    20d2b407cf36cbfe54a83867c0b4077936886984

                                                                    SHA256

                                                                    9d80a884f369bdc0fffdb36bebe677087f5b5df27400a293a52a8c5eb97b8e2d

                                                                    SHA512

                                                                    f091f35ceeaf0902a6ff6f6b87cdb8797f2c03501fb4d97cc175a5509567e481eda218477e40cea5207ff41f46cc5a039216be0c46c5613f34ec682a1b7019ec

                                                                  • C:\Program Files\obs-studio\bin\64bit\zlib.dll

                                                                    Filesize

                                                                    90KB

                                                                    MD5

                                                                    da44376014514541164830e404fa63e2

                                                                    SHA1

                                                                    69b02a0e1a9981dd95c557083162d37778cfea16

                                                                    SHA256

                                                                    642caa6f51426589698362245a66358248ba7252aa55fe2c80e8f42106b35a27

                                                                    SHA512

                                                                    0d5649c6987bdc439e8f5e46f147559e5d4096650d871549347e2e2da3294eaf6eb72ff66e5199d5eba7a86ad2867edf0b2ba3480c3686d7bdaca57a9ae38ad3

                                                                  • C:\Program Files\obs-studio\data\obs-plugins\obs-qsv11\locale\en-GB.ini

                                                                    Filesize

                                                                    1B

                                                                    MD5

                                                                    01abfc750a0c942167651c40d088531d

                                                                    SHA1

                                                                    d08f88df745fa7950b104e4a707a31cfce7b5841

                                                                    SHA256

                                                                    334359b90efed75da5f0ada1d5e6b256f4a6bd0aee7eb39c0f90182a021ffc8b

                                                                    SHA512

                                                                    d369286ac86b60fa920f6464d26becacd9f4c8bd885b783407cdcaa74fafd45a8b56b364b63f6256c3ceef26278a1c7799d4243a8149b5ede5ce1d890b5c7236

                                                                  • C:\Program Files\obs-studio\data\obs-plugins\obs-qsv11\locale\oc-FR.ini

                                                                    Filesize

                                                                    18B

                                                                    MD5

                                                                    0ebd4c9db48f04f789e6254a92af4b97

                                                                    SHA1

                                                                    45f98976d001a97e4b18489cb73cca2aadcb1cf3

                                                                    SHA256

                                                                    54550f5495ca78de8ab1b4d32ddec042077823cb5654808e9f9f003857125450

                                                                    SHA512

                                                                    9b3ca441b80f23ff89094175bca2a2647d76e38277830420e933935a631a82ee010743410b632078750f4272cdc6b3362a56649ce9694a2c712367e0ab7f0e21

                                                                  • C:\Program Files\obs-studio\data\obs-plugins\win-capture\schema\package-schema.json

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    cfc8555dce7c954555346ec0ef15fae8

                                                                    SHA1

                                                                    da1983d90d8bbbd3eb778ebb92d45427f1b35f41

                                                                    SHA256

                                                                    524437addbda00d3a64413b639847211054905a959786a4a5609fcbbb1f101f5

                                                                    SHA512

                                                                    4add0e8632568a665d640f63ec9eb992a3f50a21675883d48d26e784caf8b25c4bf6de706c2ab705fdad325adb02cd681779eed632976dfb042caa88a16d390d

                                                                  • C:\Program Files\obs-studio\data\obs-plugins\win-dshow\obs-virtualcam-module32.dll

                                                                    Filesize

                                                                    177KB

                                                                    MD5

                                                                    081c54279a2a7ae4d76dc7f90cb9e1ec

                                                                    SHA1

                                                                    895bde93e6f5bae8c488945c3a68bdb71cd3a8df

                                                                    SHA256

                                                                    6011593d53905e59b0d238857013dcce05d623de1e3d0b593c0eea93ba92a513

                                                                    SHA512

                                                                    6adeb7d5617bc13e4bd85397f0fe3e45df7f6bddc4628b7341545e76ae48ff6b76ced0dee19de507a496c1477ff7efeb8e6f9ddccec036bac8bec9bcf5dbf79b

                                                                  • C:\Program Files\obs-studio\data\obs-plugins\win-dshow\obs-virtualcam-module64.dll

                                                                    Filesize

                                                                    221KB

                                                                    MD5

                                                                    ff132dfef15b8175c651ae453c8339a2

                                                                    SHA1

                                                                    ef6d6cc3a8be8a1082066f263baca05db05aa6ef

                                                                    SHA256

                                                                    5bf0e7a2efd1f0a7fcf339178d6485fd4372f67a31276f6557f4c217764670fb

                                                                    SHA512

                                                                    d074ad73418b7927cc4316da536f3dd6317849c5efd0451b63a8ab61f6b1e6c9d4197c471635413b159d50545aa4d8a5541885930fcbd3d0ad84946f2c58c21c

                                                                  • C:\Program Files\obs-studio\data\obs-studio\themes\Dark\sources\media.svg

                                                                    Filesize

                                                                    558B

                                                                    MD5

                                                                    7de24f4b717974d92d44505a76bfbf14

                                                                    SHA1

                                                                    7695bf5a0dcf4847644ebceff8564f0e5c214dd8

                                                                    SHA256

                                                                    0c3127f56d6c3bfab49108c5d7f2e405f7e3c80f8ea9f5c407fa0902f02d919f

                                                                    SHA512

                                                                    75023a1588843a5a91c12787cea903b42da052a06106050885160dcf90386cdf8693fc0323d60802c767b524c7d4e83083815cb2a786aa6c082e88bf12c45640

                                                                  • C:\Program Files\obs-studio\data\obs-studio\themes\Light\media\media_pause.svg

                                                                    Filesize

                                                                    526B

                                                                    MD5

                                                                    b2e1d7d541b7fab7513d295f0ffdbc6b

                                                                    SHA1

                                                                    50fedc18267466537fc9c1d9b362143cb3621b01

                                                                    SHA256

                                                                    d71fe1d398ab1a31a0906c1054d67b022954ff3df6a750bb6c5e66375ed9a642

                                                                    SHA512

                                                                    575e068c38119ee7f873dc2243a15ca390a409ee5b9d2108ce5ea5ed5fda2974e3316f9d53e5a6a155c1def25f15f1bf575218347be71bde8b5a9310c9799ba3

                                                                  • C:\Program Files\obs-studio\data\obs-studio\themes\Light\sources\media.svg

                                                                    Filesize

                                                                    558B

                                                                    MD5

                                                                    782275b15439d90e21c0595b28e1f251

                                                                    SHA1

                                                                    a40a166994402a2fe2e782864c3612dbf2619179

                                                                    SHA256

                                                                    16440c1cf957bf20c8cb01d2a490ff46d4f2812376275d35051b659b62ac888d

                                                                    SHA512

                                                                    704da362efe3ee13771d589d1c3a94a8a85836d5c26d35aa76d02f502f683417e162df4067fb7fc26762c858d708b921a5fcf6c80f6505ef90dfa68c102af738

                                                                  • C:\Program Files\obs-studio\obs-plugins\64bit\obs-browser-page.exe

                                                                    Filesize

                                                                    537KB

                                                                    MD5

                                                                    8c1bc669ad41709082f99e3c831c196f

                                                                    SHA1

                                                                    470431c23c7ea1f218e588fe4b6698735c591c04

                                                                    SHA256

                                                                    6b4f7f963eec9c5d63d9e1287da653f28d77e953e50817770e0e445ef7209442

                                                                    SHA512

                                                                    f70dfe56516798757263d2c1e9f9c5e8991b204b6232af3a1e0848ff2ced9688bdc0fda3ec72e5b6b395e7343e33ba25bc11d597235d917738bc91838b7c732e

                                                                  • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio\OBS Studio (64bit).lnk

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    8d4c3606ebed2fe9e51dd972dbc04591

                                                                    SHA1

                                                                    a05a3dff364add5ddd6f6677755447863e5d6c57

                                                                    SHA256

                                                                    5cb585cb9dfa7ee84528414560348633935d472f14baf4364aee026cacf115a9

                                                                    SHA512

                                                                    d2a145bbd68fbff78e1c0fc2c3d9c8864d46f4a0277d44b6f4dd3613a1a1288d419013bfa5ba16b398c1188b298f6a03484ef2763e3e31b8eb4b1ce342c2bc2a

                                                                  • C:\ProgramData\obs-studio-hook\graphics-hook32.dll

                                                                    Filesize

                                                                    235KB

                                                                    MD5

                                                                    891bcb5c7115497ff65b0bcbaf1efb96

                                                                    SHA1

                                                                    7e282b258681289b1a1250c1131ffb54a21348a4

                                                                    SHA256

                                                                    6ef9c4277727f4a440c36b727fae16e9383bde9559ce4980fb51f3b3bb282d85

                                                                    SHA512

                                                                    05dde6906377d7b99059f14ea0821c315f836641d067b5dbd4f653827ae00ad37ca39694546819a67d3170971b7ea8541eb092e157235f9e66d20479ad914fa9

                                                                  • C:\ProgramData\obs-studio-hook\graphics-hook64.dll

                                                                    Filesize

                                                                    297KB

                                                                    MD5

                                                                    aafe24d6bccc0b684d4a7811cdfedcac

                                                                    SHA1

                                                                    242fdc3037529b1be4a728e400f0fc1d24c1bee6

                                                                    SHA256

                                                                    2d1ff7b5fd1ab7764121549295611731a1c0a2c8fa9e6644009ca22f95c15a76

                                                                    SHA512

                                                                    91013fb37be75a8449e31145a95ddf726bb39be32d584ec06c0b2a848c897f3b72ee5b8ed50cc732cf217878488f81086daf692ed83c1adab620e84cf28a96f3

                                                                  • C:\ProgramData\obs-studio-hook\obs-vulkan64.json

                                                                    Filesize

                                                                    514B

                                                                    MD5

                                                                    4a0ee9e5f72aec20551148f649ed58c5

                                                                    SHA1

                                                                    f5e897db4a7c311b2afbe6054fe28ba459712481

                                                                    SHA256

                                                                    7b6b0813fb58b276847a8583eb5c3f94aee7d7ad0ae3a1ef6133d5d8771f20f4

                                                                    SHA512

                                                                    8c7977ba8781ab0ad9d0ddeabb230d9466da6c9c47f33cbcee6380079734e832a1000e4a55218ea0d5acaee500fd458a3be76c6d4cb2831767cdc07c3930aad5

                                                                  • C:\ProgramData\obs-studio\shader-cache\1ab7aa1b854459a7.v2

                                                                    Filesize

                                                                    840B

                                                                    MD5

                                                                    0b2301660cbb980468bf1b8b4eda87c7

                                                                    SHA1

                                                                    ef3c7bf64ca477dad586d5ca3aa16318b27f4e72

                                                                    SHA256

                                                                    d913ce5b4ace04b97bb8f05bf49d777a5c231ce0737dd5a63bcd3215d8c63bd9

                                                                    SHA512

                                                                    b392bf58b9da599c8896f233c4a01e61e23546daef235d279b771a8849ea718a13b457b768b7196e3800ab82d24b946e066d334299142551bf3565d96673cf80

                                                                  • C:\ProgramData\obs-studio\shader-cache\4545d6ee7b176b7d.v2

                                                                    Filesize

                                                                    964B

                                                                    MD5

                                                                    925008d85689f03f9c2c19b2a58864ef

                                                                    SHA1

                                                                    9707491fe67342b0428924976a5d4d4cca787fef

                                                                    SHA256

                                                                    b03ed79f9d040f865ac250b25a7a99ccebf244c5bb9d2bae4287f025bae8edc1

                                                                    SHA512

                                                                    097e0733c12a57d148ffbdc844f9444026fd13359a52d8fe73d172e8ac8479d4e23dc1a00be3b04f2880e2f094a7a322fcafc3ba00603ee7f89c586a75cf84fe

                                                                  • C:\ProgramData\obs-studio\shader-cache\62281a72182c4ba6.v2

                                                                    Filesize

                                                                    908B

                                                                    MD5

                                                                    a09b098bf807333abd23734e543dc2e5

                                                                    SHA1

                                                                    972a560bbdcad956b41b96d5a5d98b74b3744aeb

                                                                    SHA256

                                                                    5e7044f39d34e7f45770264f93647c2701bed73c904f8f233dc5ea94870b4403

                                                                    SHA512

                                                                    bfced55e2eeeff8f5393a84b23ca0bec0391411a1b649be153cc1563c1e736e3e124b502fb6df18c5bab5ccb9f6dbd6369cbb5251dd03acfce8078ee96d8eb05

                                                                  • C:\ProgramData\obs-studio\shader-cache\6a755cdc9e6092ae.v2

                                                                    Filesize

                                                                    840B

                                                                    MD5

                                                                    a301b07b443e54d2763c6cdaf88ffcef

                                                                    SHA1

                                                                    f2da06b9dd608eb5786ad2fbbb42aa77f351c39e

                                                                    SHA256

                                                                    fccbe79d93005236718ff168a3ba2267d228b4f93cbc848a95eda3b8482b6697

                                                                    SHA512

                                                                    db51188f09eb3b13baeb726f80f06dbe36d1ae8c960aa75a7f88eedf42e67e286f3e7f33034fbe9a16c7cd339058dc4782e58467b0c033e94073bd326dcbebf9

                                                                  • C:\ProgramData\obs-studio\shader-cache\7a6e3fecabdd460d.v2

                                                                    Filesize

                                                                    888B

                                                                    MD5

                                                                    b1695633020889910efc1cd4fb9b02a0

                                                                    SHA1

                                                                    09eb2ec232b08bb092fe2cfcee795ee57275f93f

                                                                    SHA256

                                                                    3b625049381ef7d97538364c28efbbde8e5eb28f010f077afa36ef5a74778333

                                                                    SHA512

                                                                    2b4be7f4c6c8182a119d440204505e1022d017d9199933a9162a35ad5b2092efee29be847caddaf7e73d310a320f69481381a4527a59a9847ded132fc42946bc

                                                                  • C:\ProgramData\obs-studio\shader-cache\7f0084f9c4106e16.v2

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    15d39c0e4271b5ccd51d06dd38ea848c

                                                                    SHA1

                                                                    beb07872ec6f978633df7a92ad12e239a41f0587

                                                                    SHA256

                                                                    ea9109f443a204812899fc727c2e3e779a9114136db0afd729deec2e817a2db0

                                                                    SHA512

                                                                    16ab1fb86f5ac7dd412c1e3f87668a8ced4881a578739077ef74f68869e3be4d802fad72232aed270be0be25712de494473b2f883a94acccd1dfa7342a83bf7a

                                                                  • C:\ProgramData\obs-studio\shader-cache\8d390f4ad08d5c53.v2

                                                                    Filesize

                                                                    936B

                                                                    MD5

                                                                    edac8cc11ee6b2f4eedf0767d9bd1a25

                                                                    SHA1

                                                                    816ae2f8507a2dd7f87da5645e5a28f144811539

                                                                    SHA256

                                                                    442e3643bab4f98c14485a18e239d2580f18989831f9cadd19129e3df30789e2

                                                                    SHA512

                                                                    666d64b4caa7229b888bbffc58db1995c791c8a6b1518fca195f466b6e5f6062f5928f897ed5ff14b02518df6fc078dd45662bbddb5d5805a6cf34d58e4026f5

                                                                  • C:\ProgramData\obs-studio\shader-cache\9ea4a251d7aa3c18.v2

                                                                    Filesize

                                                                    624B

                                                                    MD5

                                                                    e8f1aac1454a9411ecfd28bdf322b910

                                                                    SHA1

                                                                    12ca860dff45487c176212e2e4db4ced5112991e

                                                                    SHA256

                                                                    6c40664272501dab61c1507f87b612d40819510781d05971735443cef8ebc95f

                                                                    SHA512

                                                                    677dfc0140b6a75fbe9ae6e2c59dc0f305c8d5d7e34f858caad917893614c95c7eed8ddfb280d2f913117e3b02dc6613e369550ba38f97102fd6c4b197930254

                                                                  • C:\ProgramData\obs-studio\shader-cache\cd9cfd09db70c3cd.v2

                                                                    Filesize

                                                                    960B

                                                                    MD5

                                                                    a36fa067d5417109e7c2a79fa47109e8

                                                                    SHA1

                                                                    2cd916c1a5c0a21b021ebc424ab316be4cbcb499

                                                                    SHA256

                                                                    c0d87fc26b604a942bb03b1349794cb397ababfb1a14eb09fd8ea1de5144aed2

                                                                    SHA512

                                                                    d826b76826b10f675fd40fc36ebf3aaa8b5b69c41090282b491a7ffa77b853db80a3473f6032bd1afe406e5272d671585a93d0bca29d7cf9029ab50a140cd1cb

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                                                                    Filesize

                                                                    649B

                                                                    MD5

                                                                    1fefdc5ccaacd87ea64fa59fbe3ce5e2

                                                                    SHA1

                                                                    eb79c571a600068d4ead33f70603a9e86ced83b1

                                                                    SHA256

                                                                    d9a9b720086167caab2f453367c51a166d944ba19564d9d217ba40606edc8ad5

                                                                    SHA512

                                                                    5b1b364c837db80a711c9a90b3c820595fbb97c2891b997c68fba71101e1355eeb4d179430ce3c69a1c04137ad352468a685887d44b736e0d37889861dc33b0d

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003c

                                                                    Filesize

                                                                    51KB

                                                                    MD5

                                                                    f61f0d4d0f968d5bba39a84c76277e1a

                                                                    SHA1

                                                                    aa3693ea140eca418b4b2a30f6a68f6f43b4beb2

                                                                    SHA256

                                                                    57147f08949ababe7deef611435ae418475a693e3823769a25c2a39b6ead9ccc

                                                                    SHA512

                                                                    6c3bd90f709bcf9151c9ed9ffea55c4f6883e7fda2a4e26bf018c83fe1cfbe4f4aa0db080d6d024070d53b2257472c399c8ac44eefd38b9445640efa85d5c487

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000045

                                                                    Filesize

                                                                    110KB

                                                                    MD5

                                                                    c4c3b31fb8ed06e405e2eabfee6f0ca0

                                                                    SHA1

                                                                    b27d7a2473a56120d70d0f57fbb17435d6835529

                                                                    SHA256

                                                                    beaa2dc0346767d734f891e7c794c823bb768f2d719d96f6a2ea947a0af565c2

                                                                    SHA512

                                                                    53b1de893a6c3364896c739e84903311a6380921345928b243b3556be16670cc3c2de3781183f82429a7be412b4491be57581bfb40334d3b0381972c5e650393

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f

                                                                    Filesize

                                                                    87KB

                                                                    MD5

                                                                    4305088d30fb3f4303f5d520b7fe91a3

                                                                    SHA1

                                                                    e76d4fdd613b9fa1edce2ab2f4c6922b3c993761

                                                                    SHA256

                                                                    c34e23e91482e24bb4051e1849b8a83602c62f3a1fd457f2d562931c3eed977c

                                                                    SHA512

                                                                    5e4c4eb87af8486f882c15bbeb6aa26f265d949078274e4e759827a2627e6af5eaf886bb35ff0dc959a9802aff754d0e1ec21e4faf84779f001c960895cb2adc

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005e

                                                                    Filesize

                                                                    34KB

                                                                    MD5

                                                                    beccf1d0644de3564af9bc878c1c1f1c

                                                                    SHA1

                                                                    8108176dd961a3c4ec92be47670a158f3004f7c0

                                                                    SHA256

                                                                    9abb0ed62ba943ee07ab2a7467f7b32adb89061838d1c85058993f42e62f686b

                                                                    SHA512

                                                                    13089f28ea5b69bcd6f5eb748c34c5f7bb84d2169938f1a53b7d70606e4b0748babcf8c6509a96269aba0544a012f0fb69c7814645afd9c75b4aa40a12d727cc

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                    Filesize

                                                                    552B

                                                                    MD5

                                                                    c4a725c227d3962b646ebc7c873f6f19

                                                                    SHA1

                                                                    693f7b0da22b8e11cb8b039b724501f42daad36e

                                                                    SHA256

                                                                    d4813d44de219cb3222015ba1faaf89e17d124117005ca261c4d8fdf9e903baf

                                                                    SHA512

                                                                    9a60fb23dae01f6b7338fa996dd8a0845139a26dbdbd756ab198b2dcbbdfd5edcedbf75678a1977c8f99e4023cb703613c7256b4e6267de34fb6cf4c2b2e3330

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                    Filesize

                                                                    3KB

                                                                    MD5

                                                                    80dcf0ef6ce40c5aae02bfe2ca2a0c0b

                                                                    SHA1

                                                                    830fdea564f681da22eb8d889cbcf37252a828a6

                                                                    SHA256

                                                                    1737a5b8a74d2271f2d7b9fdf7372f568d2bc1b93fa00cea9bb63ccfc5890b7b

                                                                    SHA512

                                                                    5852e83a2364363186967fad6742d9407088e6eba7f5251f83aaca2b8c7b6cdbd42aa42fceb6e484c11067b3011b93aaf1e8aa1945e99ff3fe2507700bb63349

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_drive.google.com_0.indexeddb.blob\2\00\3

                                                                    Filesize

                                                                    134KB

                                                                    MD5

                                                                    49cc09e7d4fc1521ec75bcf5cefb502f

                                                                    SHA1

                                                                    13059e6213f45c92dfcb4a087bf436d4ccbfeedd

                                                                    SHA256

                                                                    b81fc5d7a5b4864a02984bb20fbd6e5b8cdc0c56a2e9027fba4354f4e34d859c

                                                                    SHA512

                                                                    0fe879fd9172778c7946f0d69eee1caac1cdf9c4b5417313e31efe2618a80878d66d8c4848df0af1fe481700dd62856d5d79473ef3eae226e536dd7cebd04b5e

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_drive.google.com_0.indexeddb.blob\2\00\f

                                                                    Filesize

                                                                    151KB

                                                                    MD5

                                                                    dc3479569060f30b0b0a43eedcb1f93b

                                                                    SHA1

                                                                    f468c331c8e894d0e2ae651532930728acdc01c4

                                                                    SHA256

                                                                    a2185578fbc09c0d6a3ce4792c572252fa0e21e15003040ff082122b35ac58e3

                                                                    SHA512

                                                                    b5ede1c41ed1fae2a437fae16a3d583e56110e925c42e5a537b2512f874b33b05363e7ccd30147f9a3c1a817bb74965f3191489bd54b8a6404ab3b41747c9627

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

                                                                    Filesize

                                                                    23B

                                                                    MD5

                                                                    3fd11ff447c1ee23538dc4d9724427a3

                                                                    SHA1

                                                                    1335e6f71cc4e3cf7025233523b4760f8893e9c9

                                                                    SHA256

                                                                    720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

                                                                    SHA512

                                                                    10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                    Filesize

                                                                    8KB

                                                                    MD5

                                                                    a3e7bb1297ae19657dbe45ddb8c1e91e

                                                                    SHA1

                                                                    dd64815dfe7a67e87423f92b15d48520ce1eb517

                                                                    SHA256

                                                                    c478a553ef8b838b12e34fd487e64eedb2f4eb25f50b93c038ccc7cd7ee8b304

                                                                    SHA512

                                                                    ac521ca343f72b68be4ffee13f0bd67274150f8948f2710ec8d4a901c01e491f6588288b5b4078fe59c24264813082ee741b73abb7fbd61784138ecfab33bd07

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                    Filesize

                                                                    12KB

                                                                    MD5

                                                                    031c9574283d485a7f933cc7a94304af

                                                                    SHA1

                                                                    44dbec4222f192f9c9a836daa34614af3270c347

                                                                    SHA256

                                                                    3369b1265b46645fa78e780099718fcff597bd66ee91877152d799a879147312

                                                                    SHA512

                                                                    6b010532b7cf277f5e7e26aee6abf34bc69329b2659e9558bd51f597157c38377e0a9a0f3eb86f71862f661ecd89a3b6501fb2301c6ea3c1536a7fa2a14a2de5

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                                                    Filesize

                                                                    2B

                                                                    MD5

                                                                    d751713988987e9331980363e24189ce

                                                                    SHA1

                                                                    97d170e1550eee4afc0af065b78cda302a97674c

                                                                    SHA256

                                                                    4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                                    SHA512

                                                                    b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                    Filesize

                                                                    849B

                                                                    MD5

                                                                    b3f70546d41ca0d48b472b5239124335

                                                                    SHA1

                                                                    fd715caa4ea4c3d9b032ac6492b82816b17a0927

                                                                    SHA256

                                                                    bc7694be66a804a2157bec6ebffb85b2c090b86e34910498f69f2f6b12b2e4bf

                                                                    SHA512

                                                                    4079ecd21eb23e23b8104e3e52ea79e006bb3857b24872a152c4e78ce5ddcc92a90480e5acbeefe54c974a16d954aefb9ae2efcec5b6ed8b36599c0d89519fb2

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                    Filesize

                                                                    2KB

                                                                    MD5

                                                                    262cf040b2a5174c7faf173d61d3babc

                                                                    SHA1

                                                                    9a5972cef535783386ee364c2c68c4f2773479ea

                                                                    SHA256

                                                                    fe645fbb9b169c3c3b680d2b850a780d9fcdeea86a51634fc1c859009eecc002

                                                                    SHA512

                                                                    382edb2dc80c1b15a0e35d53c61f69293928b112687da22941e9d1c859d870c348ca1d5faf08383b8ba5c39f555ed5a2a039e8ddd031b1ecc56c9f0dc4258040

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                    Filesize

                                                                    354B

                                                                    MD5

                                                                    5f32407659092383a9085a9dff667bfa

                                                                    SHA1

                                                                    536e774aae10ba416f83c2f583b6409f1f9259fc

                                                                    SHA256

                                                                    6829ab27cfb8bb975e102a967c0895e7f9583d008f26c932b2f52e68645680b1

                                                                    SHA512

                                                                    9bbce91c11f4ec6d77f1eab25b20df8ad0fc584476163134ebbde2ca839ed2eb32880a8bafebe4b7baa5c835fcd588d4456186f9a5e6acc6e7b72d6985473893

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    3beffe67435fccfe60ae5a0d35606a66

                                                                    SHA1

                                                                    6fbec2d0aca7ff4f4d56ca3c37b7d8c5532c346a

                                                                    SHA256

                                                                    44ac65ed6983a2f7f64978090f1f4958691d9459ad1f8f2d961cbbc9bddc546f

                                                                    SHA512

                                                                    924db81cbedcf2775b6844332f1efe581dc81936be2eeedce09da11ff0ce536eac8f7d82e9981ce803cde9f7d004813f181aab6d79370e1582762aeccf8d0116

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    4b9b263fdc77de9256f0dba6d727382a

                                                                    SHA1

                                                                    186570881a4620ec11225ac6899521b921fb65cd

                                                                    SHA256

                                                                    d095027cba4edbe92b51700e7f2357d6d4aef3792e3bc21e87535536c212d43b

                                                                    SHA512

                                                                    8c2bc4644299036ca2a2408e8e1b8885799ca0bf4a23b3e8b0f0d9695ec9fb008fc5b226567e725af2987c3c9dc5fe077bc56fca8472535729b27ce1ba9906b1

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                    Filesize

                                                                    2KB

                                                                    MD5

                                                                    1e466efc9b6194d5d019f042e8a1557b

                                                                    SHA1

                                                                    e397d612fe0f3aa8ae357de64ffc551e59beba08

                                                                    SHA256

                                                                    f8f7e314961a6629a25f31fa7c855de8dda256e68ecbd3d2c92fecd22a56e460

                                                                    SHA512

                                                                    98d3a31fe61d887ef91f4a810974cd18a50a5a0115962be0386e08e2dc7d89be2b5802ae0c72a20ee84b24ed35858ad45d9f2107c8b0526383209fb9a5fff492

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                    Filesize

                                                                    2KB

                                                                    MD5

                                                                    375b0bc74fd47ed22bef65f3db083588

                                                                    SHA1

                                                                    3f2df1d5a738e2f6261b4d61b659c53cd15c05ef

                                                                    SHA256

                                                                    813f67acfd9c34cd0cd206de58fa4d1d80460955a20d842d62d542f2647b400c

                                                                    SHA512

                                                                    099b27cf4bda6e7bb411d8fe7fe7bbde34a257ef79c214afeaa08f8189376fe917587dc3fe30fd10450165faa4b98b39a6cedeb45c914835343bb9972bd27f45

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    2eed4caa3240cac7979f420fe0b9703f

                                                                    SHA1

                                                                    1c55fcfa2024d683845b281f1e1929052b4860e9

                                                                    SHA256

                                                                    c93969d8cee4d3a59b4626b1ffdb4bac37066c37eef3c004dcddd05dbeccb021

                                                                    SHA512

                                                                    44791c28ae6a18ac7904be31ee4f8443c446697dac54225ffb2a662b2917f663e02d08d47d91a43df221d96baa9d94c24ccc4d69fbc39def98ff503f14e7ef94

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                    Filesize

                                                                    9KB

                                                                    MD5

                                                                    9126143531b3bffe37ca3837fc21231f

                                                                    SHA1

                                                                    2a17780fe0256c5ff2c87619984a046ac6926531

                                                                    SHA256

                                                                    814b289975dd1b6afb83b5ec37c7e2291905a1fc5a6553191073cfa2d569c5bd

                                                                    SHA512

                                                                    3f2a6b3c2c1e3d5d6bf8fb61efb93b2e45dc361468b8c09c59d7cb0a9167ca9fb53e2667e2e1bd1fe29904146bd6dea3088e16449ba5498c84d9faedcbd2dc24

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                    Filesize

                                                                    10KB

                                                                    MD5

                                                                    ea6135c7e60a8e5d427c5c21e0448a7e

                                                                    SHA1

                                                                    b10b96ee3cce345a40876f079eb0b4bf671112e9

                                                                    SHA256

                                                                    8b46d2d0642fa79584f2c973290bcd2bf9ed4efb07451f677513d9cd8e5f0e61

                                                                    SHA512

                                                                    f6edcc6d6462a6f0fa5d0c223a8c28a0c414e1d86ef21b34126a9594a10a705ea3b1208aff5878e59e7a1e0681eb4b49f125e2820cc0f0abd26dccf0cb4082f1

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                    Filesize

                                                                    11KB

                                                                    MD5

                                                                    988a9fb63b39324ae775f6c8f2d14585

                                                                    SHA1

                                                                    01043db8cb5f3844ec4a356f8fd6efc16cad1029

                                                                    SHA256

                                                                    e0408a0e8ceaafe0b407b4c047d5b71f9870624ac6f2151a847c154b7ecdd076

                                                                    SHA512

                                                                    4d819151c2d9738f8727a957b33395402f3db8babae07374e0bc2da512596ce8cd31524ef8da086cdd1e40b18a8be492435dcf66e821f3d03e2d1cf5073a8294

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                    Filesize

                                                                    11KB

                                                                    MD5

                                                                    dd772b8acd265b56e116881bcafc7e4d

                                                                    SHA1

                                                                    bbf8c795366b17799bb84a2f21b6f17de57110cc

                                                                    SHA256

                                                                    d3c66a397a7b4b7ccf64114fca806e9675875c136ececca81b25e775389477ae

                                                                    SHA512

                                                                    e0a154e226000e29b1192155111df4cb2782aeba2aa8802cdcb81ff7e5effd66bd270f497c77dad0a02494756cba11db21f385c9feb8a15ba09f3e2df9a9c55e

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                    Filesize

                                                                    12KB

                                                                    MD5

                                                                    7d3fa92bfbfa440dc25002035a8d55f6

                                                                    SHA1

                                                                    fdf3994c69e753139abd2030f57d437b97ab4e54

                                                                    SHA256

                                                                    743b48d36d0fb14384d3de54560e5936dad47d9e18432365fbe1f78803b041e9

                                                                    SHA512

                                                                    d67d86f030ff3a4928de4f902c045fade2cff6321991acb956d78119a2c30b3fef8b7bcec6a6b5fbfae7a154c8ce432341bba53037078dd349d0f6d3f92efb00

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                    Filesize

                                                                    12KB

                                                                    MD5

                                                                    17e58db9d32559cc30b8d8bcdb3d3918

                                                                    SHA1

                                                                    d82e0705e1c3eb071cd17cdd35413007605b180a

                                                                    SHA256

                                                                    95433971580db7f07582376b941d939ad831a355a662ff88a7cf84ff1ef84341

                                                                    SHA512

                                                                    0dddace98f5c181c206fcd17c1c9f46a3046dbc5cd9db6676ba2d9031e728498d093353c85c7c3fe94cebbb8dd34e403732dbfb8854a5e7a15223db872b00c84

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                    Filesize

                                                                    12KB

                                                                    MD5

                                                                    674f5c3df9024b6133bf958ee581c71b

                                                                    SHA1

                                                                    757dfa02b44c11796d0cef9aef4d244dc6a084cd

                                                                    SHA256

                                                                    ef83131ea6d8dd0f77ac8aed1e9c5c199083c9827fd5efcbea5ea135f67cceaa

                                                                    SHA512

                                                                    3fd48dd296d469adefaf9d19c7a75480c1eed96e745b61e19d4d3736073cc4c79fa963dcf6979e87c7930719b8e940e61998e9553191eae92e7a415614318540

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                    Filesize

                                                                    10KB

                                                                    MD5

                                                                    29cda2c73702e7ceba6087509802c37d

                                                                    SHA1

                                                                    f41fa3b09e13cb00114138184a3f369bbc66d6f7

                                                                    SHA256

                                                                    202e136a6cc399d37089b534ea6a914071a06a7ae5155fa1be6a7cd1a5d1ee20

                                                                    SHA512

                                                                    d588484d5b8345a5d2a1d26fdda076cc93b100af9603fd4a5e0e75f7e10f9a14159a1786b97e1fbdcf275c3416ab5a0aefade2d6bfe8b9ad8b6fe6fd8a6826dc

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\33ab1fce-6275-415f-8777-d51267962e04\index-dir\the-real-index

                                                                    Filesize

                                                                    2KB

                                                                    MD5

                                                                    817d9ba9ca873383a91d2e554e313250

                                                                    SHA1

                                                                    b1d87f3ddcf7475ee7764d9888111f3f4462db67

                                                                    SHA256

                                                                    52b8bd33ced40d2226cbf13c2e82b1cf5d9d093b6ed27c773dd69b4a8f7971f2

                                                                    SHA512

                                                                    c98ada69f37384c0d83c8e9ef1bd254a02891ad333fd2f098c5c51f3bfc8739bb0b564fde7b2dd6a84f132708a551cc058ff4308bbe4a025b75db8febe241cf1

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\33ab1fce-6275-415f-8777-d51267962e04\index-dir\the-real-index~RFe5a35d6.TMP

                                                                    Filesize

                                                                    48B

                                                                    MD5

                                                                    69f3b0a1d65247b7969febae5385a74a

                                                                    SHA1

                                                                    d1c3b634a173e8f14d3fa2cad687c44c43d5c82f

                                                                    SHA256

                                                                    182c2da6076a20ce68805d2e8ffda61f01c58b4b8a8e18ac563a0691ecb2f170

                                                                    SHA512

                                                                    66f34d0a4d6daab2785367d41ae4d09d98464f330548e6d5f8b88a996d9ec6eca9f0b554104fd5fc53b08196e02ecd92ae8f6d60919d461be8f915e2c566bdcd

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\95bd7a4d-84e2-4bd8-a4f0-bb984dc0ae36\index

                                                                    Filesize

                                                                    24B

                                                                    MD5

                                                                    54cb446f628b2ea4a5bce5769910512e

                                                                    SHA1

                                                                    c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                                                                    SHA256

                                                                    fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                                                                    SHA512

                                                                    8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\95bd7a4d-84e2-4bd8-a4f0-bb984dc0ae36\index-dir\the-real-index

                                                                    Filesize

                                                                    624B

                                                                    MD5

                                                                    1971208c7442ba764b9892aa31d41800

                                                                    SHA1

                                                                    084cb6d3da5cead51c21f0019bf6e4b0b50bc44d

                                                                    SHA256

                                                                    89fa8d4b4dcb4b58483b08f2256508693f7e432c5799cac388043a034efb7ad4

                                                                    SHA512

                                                                    4c8705d07f8fce4b40ea213cc9d5540bb0d0a42d07ff0e2808d5c75161da78903031028508faed2fd5fde57d5f42cf2eaabae13b69f38530c9fb7452bd57a430

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\95bd7a4d-84e2-4bd8-a4f0-bb984dc0ae36\index-dir\the-real-index~RFe5a3d1a.TMP

                                                                    Filesize

                                                                    48B

                                                                    MD5

                                                                    36568cf7361d9551d183a9da2997fe44

                                                                    SHA1

                                                                    b52bc572e479131843b8754fd022030712a6e13f

                                                                    SHA256

                                                                    5881b0a0e14ccb398dd2f5d4bedbcc508ac74ae56f9cebb9db1f316ccd4c7e28

                                                                    SHA512

                                                                    decf68ac61520751350ae28f2a92952e21fdf2b10856c3479ade1df6a5ca5a662573eb65e0391c6dcb471e60d0276da72b7278015f96998e039e9a84809600e2

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                                                    Filesize

                                                                    183B

                                                                    MD5

                                                                    ead884ce90d275ae2797b8b7b51008bf

                                                                    SHA1

                                                                    0dd04ec481afaa0113489f53473122811c32097e

                                                                    SHA256

                                                                    eccec020ebea987d3a2b92bdc19e8f455997664a10d88dd09063ca590e0ca81d

                                                                    SHA512

                                                                    9e15e22a64fb6b75ddb8ef115c2a541965a5b7d119bb5bf3dab2cf09ad2e2bd7d56f21730c18eb3643a9a25235d7a17e938767ec5ea66440437f2f6dd6d4e199

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                                                    Filesize

                                                                    176B

                                                                    MD5

                                                                    38ac0596e21fe08aba8c6ac4acf7b1da

                                                                    SHA1

                                                                    0066375a4de04f9fdf1728c256ab1d6306f082fb

                                                                    SHA256

                                                                    e114b1c848dcd42b2ec398ca3ec825a22a2feeb11a6bc8c77322b86331848572

                                                                    SHA512

                                                                    b939351f489701568dd2894bb60e77783ed008d6199fa166aa9a3950ff4da1ce6bb3913a31bdae82b0ffd45e9995c78844ae4d64fd86c00f7c95831052377033

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                                                    Filesize

                                                                    187B

                                                                    MD5

                                                                    f7aed925558eca8f65b3f6a15801f90e

                                                                    SHA1

                                                                    6980759ebf5498f48ccf172a89b92631335a806a

                                                                    SHA256

                                                                    97d5e063624c6335079d1e1c8d07f7fa6ff255d81a53d3489ec0df27509270bc

                                                                    SHA512

                                                                    be1896352024e10268095dafd02c44f7cd2544545f1311da30f0d797972031b3b7a900b8a7f2b40e2de516e052f8570bc975b02e316e3ce76020dd881812da3e

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                                                    Filesize

                                                                    112B

                                                                    MD5

                                                                    724143f2ea87cbbb70f35c08404655a2

                                                                    SHA1

                                                                    4c928d48ad1dad1a6616799b115ff1d8dab82070

                                                                    SHA256

                                                                    f5aecfcad66bd193d8d2e89789090db18a94c61f762c12811c6e8e185abf6fb3

                                                                    SHA512

                                                                    3af40fde62c2e7ff92a05d141a640a23420a9c48d8427262622695db6304f5a4ad6a49d2a17be5ef919e9e461715beb523aa96b3cf24e6c2eda2018aa11b5939

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe59e277.TMP

                                                                    Filesize

                                                                    119B

                                                                    MD5

                                                                    1fd9a2a99466eb80614e4436d6938a1c

                                                                    SHA1

                                                                    35a351243fd8f9814da302534718c70fded33415

                                                                    SHA256

                                                                    42c27b8c72b880c8a306fe9f1226132793230873b239e47a7a4e1c29711b00dc

                                                                    SHA512

                                                                    a4d38c72be2244dde78cdedb706076f8e16e5ef4d108d5ac55da2329a6eb297828d9229786f8990894601f8a2146d221626fe51b81cf4cf3c56cdba807a0fa3b

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\eadf114e35641d8a14aa9648d8e1c01b4b3bb3f0\8889bf11-cac7-4bab-bb7d-4b4a3f9ddcf3\index-dir\the-real-index

                                                                    Filesize

                                                                    192B

                                                                    MD5

                                                                    dcb4f1d2155e3eb921634f8629e21cb7

                                                                    SHA1

                                                                    cf636ebfe8fabfed0517ec2c4e44a125889d6f74

                                                                    SHA256

                                                                    8ec7bd50c65593820d5f696e9fd2e701c0913cc102e1c2e12e4c13c2dca5b6f1

                                                                    SHA512

                                                                    24c9d9d2b6eeaa847f5556fa3e28dc0d51901cfe35453b8a2f00d19a7940c256834da345074cebbd489119364451cf687afc53cc4df0163bcef330e18c33a75e

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\eadf114e35641d8a14aa9648d8e1c01b4b3bb3f0\8889bf11-cac7-4bab-bb7d-4b4a3f9ddcf3\index-dir\the-real-index~RFe5b1b54.TMP

                                                                    Filesize

                                                                    48B

                                                                    MD5

                                                                    51ec8294022cb785189c76421434bedf

                                                                    SHA1

                                                                    3ad16bbde9a5c7b418a44de0489a197c9d880030

                                                                    SHA256

                                                                    3f9fc122c3208872903e11997f3b65ab99abf907926c5370e1c8728d5f619682

                                                                    SHA512

                                                                    d18557db4f9eaf144e1653fdb36e6b4d812753cf9525f9c365b00ff3247e1762ef0b1671c48f97adbe1ec8543795d9f16b31082bd40f85eee7a64a4e232eccae

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\eadf114e35641d8a14aa9648d8e1c01b4b3bb3f0\index.txt

                                                                    Filesize

                                                                    151B

                                                                    MD5

                                                                    13d90c87fc822f33d2b17e3ab8a36973

                                                                    SHA1

                                                                    e0c561036b8b11b732ca5c52c4e93810e9eab821

                                                                    SHA256

                                                                    66aecf35ed210e19de9882134029dac00a054343cc25c5d14add27a773414d3f

                                                                    SHA512

                                                                    f2e3ef665c01dadb6c579c230d0f42944ab931a7438438570adda1b252215a740d86df50cca3c9770feb7f75ce8d374fad0ab7ca1090e4c7a10f596dd649a955

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\eadf114e35641d8a14aa9648d8e1c01b4b3bb3f0\index.txt~RFe5b1b93.TMP

                                                                    Filesize

                                                                    152B

                                                                    MD5

                                                                    1846a3a2a5e49574ba019f1fb22c1991

                                                                    SHA1

                                                                    c3c6be0ee826674b42c2db1e61f652b77b10b8d8

                                                                    SHA256

                                                                    4f454e5c2887f4ec419ee0d63e3620449405d7fa66b093ed3e4816a79e02474b

                                                                    SHA512

                                                                    4d1b7b424d22fc6dedb4f7e3d9251f669b959e2fea90a9f8937ffc45752a274d3ab2c524fc75980bc647ec90417768b33df19135402d6684f7897b774ed1f4ac

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                    Filesize

                                                                    120B

                                                                    MD5

                                                                    7415fe02e431d006b5b125297e743817

                                                                    SHA1

                                                                    fb5b32e03b889a02cef20a327d87a291cdf0c3b1

                                                                    SHA256

                                                                    030272025a6e15d84af4ac176d9b36b8e43eee31cad9be295d6b74ae4f237273

                                                                    SHA512

                                                                    f52083d3ba9389933c0876f81c5444f46098e194b83cb329b5776eca81d1163dd12e99c69b0d1cd22904b219c5457659142f1c1371742b35c86d9c6d96939888

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                    Filesize

                                                                    216B

                                                                    MD5

                                                                    337fddb1d2fa8c84fe328c1c164ef327

                                                                    SHA1

                                                                    8822de9352112921ec2fc57c24e370639abdb319

                                                                    SHA256

                                                                    cdeeae8a58a3568d5524c18cd5c401e80cf94d6f6b7fde7c59bc216b6f0e3d63

                                                                    SHA512

                                                                    45ddc9fb375c4a96a11a47e523c09628931163dea1637a20bea03e3c0b2821f1f786636d4152a91f1611d698d5b30e35260406c6882f4a581cd84a947741f3ae

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                    Filesize

                                                                    264B

                                                                    MD5

                                                                    10b1501ae055f5b239afde19abcf6d20

                                                                    SHA1

                                                                    f73de30b3e30e644de512e02ae6cbc48a4081cd6

                                                                    SHA256

                                                                    3bdc150fda6ee05267d62f0592771b05ef69476719f46a560ce4c2bdd609ae44

                                                                    SHA512

                                                                    da6ce6de2b62fa2db155c72a0a645f3a42be91da6234d105e9f9232980ccfef2637867b3246fa11355ebb294217b22a58579bb4d341815b967495b4ac8f5dcf4

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5664_1202346235\Icons Monochrome\16.png

                                                                    Filesize

                                                                    214B

                                                                    MD5

                                                                    1b3a4d1adc56ac66cd8b46c98f33e41b

                                                                    SHA1

                                                                    de87dc114f12e1865922f89ebc127966b0b9a1b7

                                                                    SHA256

                                                                    0fb35eacb91ab06f09431370f330ba290725119417f166facaf5f134499978bd

                                                                    SHA512

                                                                    ce89a67b088bae8dcd763f9a9b3655ed90485b24646d93de44533744dfcf947c96571e252d1ad80bdec1530ff2b72b012e8fff7178f1b4e957090f0f4c959e0d

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5664_1958091447\Shortcuts Menu Icons\Monochrome\0\512.png

                                                                    Filesize

                                                                    2KB

                                                                    MD5

                                                                    206fd9669027c437a36fbf7d73657db7

                                                                    SHA1

                                                                    8dee68de4deac72e86bbb28b8e5a915df3b5f3a5

                                                                    SHA256

                                                                    0d17a989f42bc129aca8e755871a7025acb6292ce06ca2437e95bedbc328fa18

                                                                    SHA512

                                                                    2c89878ec8466edf1f214d918aefc6a9b3de46d06ffacff4fdb85566560e94068601b1e4377d9d2eabefdc1c7f09eb46b00cf4545e377cc84a69edf8e57e48b2

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5664_1958091447\Shortcuts Menu Icons\Monochrome\1\512.png

                                                                    Filesize

                                                                    10KB

                                                                    MD5

                                                                    529a0ad2f85dff6370e98e206ecb6ef9

                                                                    SHA1

                                                                    7a4ff97f02962afeca94f1815168f41ba54b0691

                                                                    SHA256

                                                                    31db550eb9c0d9afd316dc85cdfd832510e2c48e7d37d4a610c175667a4599c6

                                                                    SHA512

                                                                    d00e2d741a0a6321c92a4aab632f8f3bafd33c0e2875f37868e195ed5e7200a647b4c83358edcef5fc7acbc5c57f70410903f39eac76e23e88a342ac5c9c21cd

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ba23c86c-4947-4e03-bb9b-dba990b577cc.tmp

                                                                    Filesize

                                                                    15KB

                                                                    MD5

                                                                    0287ff6e92baa356966da5440be1fde7

                                                                    SHA1

                                                                    d814bb9ec20b08dbdedeb948ecb00da7bb2a49b0

                                                                    SHA256

                                                                    c97b5d9909b1ba4c8c5a8c3f9a569e203069ba318d637e9d22fa7ecb8a37c9ac

                                                                    SHA512

                                                                    952020c47d3878d2e8055d53c16873098cc68b074bc4bcb7f3d94f8b9520061f8b8c5f74ad05218019990413ecd911148b3f6c85b7c5ee432ca79371e971e2bd

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                    Filesize

                                                                    200KB

                                                                    MD5

                                                                    3a733e0857fa7c39a92c8ef7c5d713a3

                                                                    SHA1

                                                                    bacad7c1c5c337a25daaaadd3346ae9c5e475801

                                                                    SHA256

                                                                    1d7a25fa635c22bfe3fb13062a6424dc451536d31064383d4a1cfea3f7878eea

                                                                    SHA512

                                                                    97547ca2826fe82678202b1727e52c4a7e5e1dd250969fc37ecdd79e40d3c2dfd9ec7e94642b79679562e672fe60a3d4ae044f81cdc272fed2680de37b196d10

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                    Filesize

                                                                    200KB

                                                                    MD5

                                                                    316f4bdad6de5eb628c75197191aeebf

                                                                    SHA1

                                                                    dc249a0d9f01dd0e8883bb6809e55da84322838a

                                                                    SHA256

                                                                    e4b2486e6adf9099e0dc1a04698777c632348236505bd42f4600ffe746782c34

                                                                    SHA512

                                                                    7d17314c2c8d0fce5b6a03c6732a4c763980623814ffc1068995f307c0bb9640ee4a22c409b798d9a8d0a01cb77b4f330e5edcf56394b03accfd41dde1f1b8fd

                                                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                    Filesize

                                                                    200KB

                                                                    MD5

                                                                    a41959b8319a4791c2972b65c8207e03

                                                                    SHA1

                                                                    b6a5eff94e420cbad5359a28f9cb88bf21fb0adf

                                                                    SHA256

                                                                    5c2e0b09b5d1a2dcd8f1c1fb862db9ed5eea1f59fa1197f596beea6367a35ca5

                                                                    SHA512

                                                                    d7a613cf16fd3adc238385121a5877f34ae49cbf10c24ea8c528f1e5868a8fa5ce3da162e8804a0de7de2d0a1900d0c255885c7bb5157d9bd2c024b614eddda0

                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                    Filesize

                                                                    152B

                                                                    MD5

                                                                    e765f3d75e6b0e4a7119c8b14d47d8da

                                                                    SHA1

                                                                    cc9f7c7826c2e1a129e7d98884926076c3714fc0

                                                                    SHA256

                                                                    986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89

                                                                    SHA512

                                                                    a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                    Filesize

                                                                    152B

                                                                    MD5

                                                                    53bc70ecb115bdbabe67620c416fe9b3

                                                                    SHA1

                                                                    af66ec51a13a59639eaf54d62ff3b4f092bb2fc1

                                                                    SHA256

                                                                    b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771

                                                                    SHA512

                                                                    cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                    Filesize

                                                                    5KB

                                                                    MD5

                                                                    034c886b42cdf068fa32e53f583b52a9

                                                                    SHA1

                                                                    0c3ad9c616b984b9ae43b3036b735d8c92409b2d

                                                                    SHA256

                                                                    c6fc48968aa09365e23a4af6a2ecd4046f1b702c468b13ca36c3c6c262cbdc42

                                                                    SHA512

                                                                    b51db8bb133ead9d5167ed2e52d1e9f3edfc6d1f2a34f3d877b94eed1467e6ee0705eafa2df8f94f401ac95be6b4cb9c3f0ab4a8bef1e630943294a01ef24b42

                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                    Filesize

                                                                    6KB

                                                                    MD5

                                                                    701dc2a05742138ff6faee96a4029c07

                                                                    SHA1

                                                                    cf4b79bc789b0b146e05b886e06b9fcf8a63af21

                                                                    SHA256

                                                                    aed0fc859f3b4dd7e17bb522a11de0711cc10f88ca54296ae2f598df5c4518c4

                                                                    SHA512

                                                                    7458158de3b8d709bc9665c201e9d5721f05e6956de3ebb71064be79d7dcb7cf19dc8444e6ff944e161af7745136931deb917d7de545f65686b84dad6bd7a6aa

                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                    Filesize

                                                                    10KB

                                                                    MD5

                                                                    9201c9be28f6b6ebb9ddcaafe779a2ed

                                                                    SHA1

                                                                    0ce1f74c0f87dd27a0905cf8e8923d41c9fab610

                                                                    SHA256

                                                                    e952615d26b0cd5548d00c0ff04b4a93e3c9244f9959f8ed5bb8dec418cf70c6

                                                                    SHA512

                                                                    4d8bbe32bb3520623ad66ce25f90a2874385f9ef9be6691623917d50f26c69a6b216ce8864c94f0f84773365451db6c697c6e210c77356c2bdbbbe1c842c1004

                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

                                                                    Filesize

                                                                    264KB

                                                                    MD5

                                                                    f50f89a0a91564d0b8a211f8921aa7de

                                                                    SHA1

                                                                    112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                    SHA256

                                                                    b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                    SHA512

                                                                    bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db

                                                                    Filesize

                                                                    28KB

                                                                    MD5

                                                                    3bf209abb9ca3fc1cdea223b60d86aa8

                                                                    SHA1

                                                                    f8646325c9780ae4fcb2b23e07a17d1e7c678c2c

                                                                    SHA256

                                                                    a2c8bec7f4d6dea0bea7697cc0a243f549404bb1a25c66fb6faf921a1c20f6ad

                                                                    SHA512

                                                                    ad56def7a72b4e646916851a55ed61f0effe2a9598891082fab9bee0e82a3f0ca78cd1507df0b91e0efb4ca28042eb65c5f27026f3ec82742efe4ad24e9ae6a0

                                                                  • C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20240820210308_000_vcRuntimeMinimum_x64.log

                                                                    Filesize

                                                                    2KB

                                                                    MD5

                                                                    7eeb7043888fac75fca291279f29350f

                                                                    SHA1

                                                                    5ecdaea6ae710f4d0d07566b54b4d12de4a5b6cd

                                                                    SHA256

                                                                    4c701518edc023c9fda2af97e7abf55ee63bcb99b63da5b5c7fe712ac704e542

                                                                    SHA512

                                                                    bb332079e87be23cf67eccbdbba48fdec6748eef5d8111ad82f27d02d2702666676654de49eede0fdc989a8f8772d91e19e0ccc87ae43b10c5dde48b72fae1ec

                                                                  • C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20240820210308_001_vcRuntimeAdditional_x64.log

                                                                    Filesize

                                                                    2KB

                                                                    MD5

                                                                    364d51e7dea8e0066acffb446a990f2a

                                                                    SHA1

                                                                    7e1108c0a5cec0ea4eb5e90f284b61db82c1060d

                                                                    SHA256

                                                                    103c658d0c17d76129123c99a8817d442b70a4e8d18ae250b73f8df08ffe5853

                                                                    SHA512

                                                                    023025fa664588d9b612a94587a0a30df772a0ebde93c0846677b1b055afab6524d4330d32b582910d8fe44bb1fbc545ec7bb3efd7a48fe4c07f81f574dfec07

                                                                  • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\InstallOptions.dll

                                                                    Filesize

                                                                    15KB

                                                                    MD5

                                                                    d1eefb07abc2577dfb92eb2e95a975e4

                                                                    SHA1

                                                                    0584c2b1807bc3bd10d4b60d2d23eeb0e6832ca2

                                                                    SHA256

                                                                    89dd7d646278d8bfc41d5446bdc348b9a9afaa832abf02c1396272bb7ac7262a

                                                                    SHA512

                                                                    eaffd9940b1df59e95e2adb79b3b6415fff5bf196ebea5fe625a6c52e552a00b44d985a36a8dd9eb33eba2425ffea4244ed07a75d87284ff51ec9f9a5e1ac65e

                                                                  • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\OBSInstallerUtils.dll

                                                                    Filesize

                                                                    426KB

                                                                    MD5

                                                                    e1f825260e7224ef0526514754f7d0e8

                                                                    SHA1

                                                                    553d67289b039ffea5d8b59f509b9265dca2ba19

                                                                    SHA256

                                                                    1d84aa191fbbd842d5eeed302195579de1256a9acb980308bf31a631ac01e530

                                                                    SHA512

                                                                    b9453eb4ae6edbfd86e438ed0825725ab91100b8403a933bb0e359703be462f6d3d37f8bfb32eeae375a46512c619370f9802925ae0d8898f540f933b05b281f

                                                                  • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\System.dll

                                                                    Filesize

                                                                    12KB

                                                                    MD5

                                                                    192639861e3dc2dc5c08bb8f8c7260d5

                                                                    SHA1

                                                                    58d30e460609e22fa0098bc27d928b689ef9af78

                                                                    SHA256

                                                                    23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6

                                                                    SHA512

                                                                    6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc

                                                                  • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\VC_redist.x64.exe

                                                                    Filesize

                                                                    24.2MB

                                                                    MD5

                                                                    1d545507009cc4ec7409c1bc6e93b17b

                                                                    SHA1

                                                                    84c61fadf8cd38016fb7632969b3ace9e54b763a

                                                                    SHA256

                                                                    3642e3f95d50cc193e4b5a0b0ffbf7fe2c08801517758b4c8aeb7105a091208a

                                                                    SHA512

                                                                    5935b69f5138ac3fbc33813c74da853269ba079f910936aefa95e230c6092b92f6225bffb594e5dd35ff29bf260e4b35f91adede90fdf5f062030d8666fd0104

                                                                  • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\check_for_64bit_visual_studio_2022_runtimes.exe

                                                                    Filesize

                                                                    10KB

                                                                    MD5

                                                                    9baff51bb8539498c81d0c2ed0034d9d

                                                                    SHA1

                                                                    e85ff796a54221f723ad36412329d8c650b7717f

                                                                    SHA256

                                                                    b324a6025986306656fc2a03d0a3e9ed5917dfa7cf14fbfca888d65b39822074

                                                                    SHA512

                                                                    cc4008bb5586840c1f031f09ce04904b22ae5ec43c3331586593fefffa22725c076835627253d6aa0468fd24124068603b82eb45490cf96e20a6c4f1d5472576

                                                                  • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\ioSpecial.ini

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    cc7d871da6cfb5df8a4d1cb462275958

                                                                    SHA1

                                                                    84e91f13a1ba0ce5d90ba8ee3d5fb042b58d78cd

                                                                    SHA256

                                                                    0fe3be914d77fd30d6821b555607950f626ea7da1471ff7bf06cb06242a8d8f3

                                                                    SHA512

                                                                    f9ab041e01fd1c6d7f36a4af49aa65f9025c745502c92f931e5e076f2552d26c172453039fc018c058ab4d3bd2da77afb7fb410490370da4f6848d6e697a0fe1

                                                                  • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\ioSpecial.ini

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    509842dc0c7075edd77c76ea852fe67f

                                                                    SHA1

                                                                    b56fe5b6b38d41cc9b1466f5109986ebcc7fcb61

                                                                    SHA256

                                                                    76fa69eb77e87b1e2e1ac1e026147270df1d2248a3836c684971e7a42cd3aa6d

                                                                    SHA512

                                                                    a49317c044b9dae07d63488e6fe43ccab333fbbe32ec4c9e770fd40b8628e740b94a7be6146f57055d3ac8bd01d1381e90992593b615796cd7dd180727e4d05e

                                                                  • C:\Users\Admin\AppData\Local\Temp\nsiB316.tmp\ioSpecial.ini

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    dcfa8d001bdc89388ff676b3876d8d07

                                                                    SHA1

                                                                    661d4cee9d037a41b926b0487a25c631d45d28cc

                                                                    SHA256

                                                                    f01f94f46a37a1c2580c74d42f271d9362f6317693f15ad9210621e104856ae4

                                                                    SHA512

                                                                    8510aeeba578b770c73c80ab989e2e9da39e550632b30604fa4f2c4365dd182b32f20bddd6a020b3f2f23c18d77c3ed089adae0ad4220661d04771547cfdd576

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\basic\profiles\Untitled\basic.ini

                                                                    Filesize

                                                                    27B

                                                                    MD5

                                                                    d785072bd43717886593f737817fff15

                                                                    SHA1

                                                                    8c7ef0936b7f5a5cec10e9b5e1278400e276e6f7

                                                                    SHA256

                                                                    7989006d0b1b17f5e4f4e20960713600d80612c3799963454e463f689a3cf613

                                                                    SHA512

                                                                    8bcd4ed11b248d2934bb7fed91cd8645b77f89ac75f357277a9de04e1121ef4217e982783d61c32b1e8e04d2c14eb82fab78926dc46861db511a8741a62c0c20

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\basic\scenes\Untitled.json

                                                                    Filesize

                                                                    2KB

                                                                    MD5

                                                                    fb8dfc0d4e686ede8ce0cd5f60d4609a

                                                                    SHA1

                                                                    f8d4eb8ef5b84b5f10c132600eb31cfd33265a8b

                                                                    SHA256

                                                                    b475251950b12406bc7e87fdf24e344424cb2b76de96ee1f6bcf2f52f9bb8a5f

                                                                    SHA512

                                                                    f6e41b9d376c2b95de8a61513a4f8bef8db59ee48657bd9d6c9778f6a10dff4426121ffc3ab71882f7d1a309f0fe92eb7939fc5bdd143bd21ac0288a055d51b0

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\basic\scenes\Untitled.json

                                                                    Filesize

                                                                    3KB

                                                                    MD5

                                                                    a60f85bdda1ce82bf9527bdb4578ac49

                                                                    SHA1

                                                                    0e86b8f39adceab40f81b9fc933260f43085d0a2

                                                                    SHA256

                                                                    a723c013594ebfc9b29c7db9157c11d450fb680c034b2f4f86de49d22280043d

                                                                    SHA512

                                                                    b021c5251739fc6166789ddd83bf59bf75a5ae6aad6437545d33c839a23f75e8875ffa4f82946dcc98f70cedc90c5548a9e0ba3b8a0b9d62202f1b637c3c7bad

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\basic\scenes\Untitled.json

                                                                    Filesize

                                                                    3KB

                                                                    MD5

                                                                    e4226b4e5baaa73e34568b65740b4760

                                                                    SHA1

                                                                    7ce738cf6433a7872d437c75317380a23087f4ad

                                                                    SHA256

                                                                    5d994e0b75e644ee1d5366e5b7c9b6a2da1d0141f8cc09ea592ec0bf258b0643

                                                                    SHA512

                                                                    e98c5e58efb48f556d229d5f46c0ee14c4ebfeeaa6c81af24b17c1e48b4455aad37fcd2a0994cb8c189da9c4b4f145a386bdfbe80b6f104e1b02e61f2ce41232

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\basic\scenes\Untitled.json

                                                                    Filesize

                                                                    3KB

                                                                    MD5

                                                                    249c6bad90c24b25052b68e1d51631bf

                                                                    SHA1

                                                                    850387f655805d9e08b35ef40cabb8171f9b3571

                                                                    SHA256

                                                                    ce9309caa83a6dff9851a12b20061a0c026d063077e67dbf970abdde06745545

                                                                    SHA512

                                                                    54cc1d0b4ff800882e499afab46ed5f66ccaad81bd1d38213119e786ddbc2d4230d16b450e397d6914f2ca7ffaea302c0b0c90575eda3514b805899df184c0ef

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\global.ini

                                                                    Filesize

                                                                    95B

                                                                    MD5

                                                                    5e1a6ec63e7f3c47ee8e518eb9363bda

                                                                    SHA1

                                                                    7ee6c56636dc5bb77c624542dfed81cf61e1301c

                                                                    SHA256

                                                                    90eb7d1ad2ba1c3f742eb01a0930d3e98a5fafcdbfebe4a30a429872721ef04e

                                                                    SHA512

                                                                    178aa925045f84eae42846cca4d7f8a8f339a044eda2e15d2ac07c2dcbf4911a38e5df7e4e1ad288b696285daf00c630ffa79216aca9421318c0af8a220f0dac

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\global.ini

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    2d11a7241ec1418d55ae30225dc50a57

                                                                    SHA1

                                                                    ac28b9c98b24dd2e2ba5e23d80993ee03728157f

                                                                    SHA256

                                                                    9be28c7c42a0b12719f2f347d06835fe480526ac0cbee508327545e874c35e1b

                                                                    SHA512

                                                                    d2bb13824b7aa59eca163f0190e4ab274f72b995e86fe933335a371757f427a46a156c3eccea82f036086861bff1f01230d63aa8e612ebc85dd471f004f44a9d

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\global.ini

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    4b0bbeb39dd73f3ef3a3d9a9428a7097

                                                                    SHA1

                                                                    190c383c7eddd3c88563fe8fbc54e6eb475b9e5c

                                                                    SHA256

                                                                    2a54705b79b502dec41d4943d18921afbd6d7710a3584c572ab80e95aea38da0

                                                                    SHA512

                                                                    a2f51a5abeecbed9e2a9d524d944be55b2ff621384bd0a71dd7ca53afe7d84f856baab6e6fa5df4506ed56c2965405a7dd4b13c10546a519bae2f3408a8dc22a

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\global.ini.tmp

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    6e7892d7760cade19f1dc5448e3317ff

                                                                    SHA1

                                                                    75b6fd15e3dc6e4a3c796727d182018f1e2663f0

                                                                    SHA256

                                                                    96a3ffe1fff6c1e09cbc9dc1ba52a640af413dcd76a5d566bceee9dda71131a9

                                                                    SHA512

                                                                    31284873c3ba50535547aa731c256ca49750fb848a196536559c9fb045a7e594e50bd6a1f4d614e3a1bcd6289121a31c6205abf4083d2257da9cbdc18c2f31fe

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\Code Cache\js\index-dir\the-real-index

                                                                    Filesize

                                                                    120B

                                                                    MD5

                                                                    8bc2a60082867a509e7634b0a184ddee

                                                                    SHA1

                                                                    e5dda51a4f83927a38d079aca8a33eb12778b2e6

                                                                    SHA256

                                                                    ae12b69229cfc26e5201a5d4f0fd8078da4a959d2c25412cf4953421bdb0a767

                                                                    SHA512

                                                                    3a8ea3085bd873bcaad00cefd4b711130c63622bca2f46890c8547679adc8e043fdc0d89328a70983a8e2d2b742425b1bc699efd6db4b00dc9cfef61d00d6bce

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\Code Cache\js\index-dir\the-real-index~RFe58f75b.TMP

                                                                    Filesize

                                                                    48B

                                                                    MD5

                                                                    801f6bbe2bf61799a29490a83a7f7fed

                                                                    SHA1

                                                                    26aee2e1ad0988d312bb0a1b6bda3a592054eee6

                                                                    SHA256

                                                                    d1a1fcf8315bfd7bfd76cd44b0100132b8ba84c2b29047ca1d3220bb3b4c7fcd

                                                                    SHA512

                                                                    46d5622911a1f3c0af424d45be794486cf6e3ee95196687b893af4fca365da91e971b17c38ec117ebac22309481b2c59ebe66513189f23e3801b813ca511c70b

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\Local Storage\leveldb\CURRENT

                                                                    Filesize

                                                                    16B

                                                                    MD5

                                                                    46295cac801e5d4857d09837238a6394

                                                                    SHA1

                                                                    44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                    SHA256

                                                                    0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                    SHA512

                                                                    8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\LocalPrefs.json

                                                                    Filesize

                                                                    638B

                                                                    MD5

                                                                    7a7991610b0e6eb9f95c8643a4ff706b

                                                                    SHA1

                                                                    2017292aa22f5d9d7297015b19e612905ec2b6cd

                                                                    SHA256

                                                                    3c1e0a35b6ef3e21ca6e9e18689c183e2813d391ff51c5df15e92eb589f114fe

                                                                    SHA512

                                                                    5f7d361a7a7cbf999e84e952539916586f90ae60f46bc9c96323e85fc902816a5cb49022ad1b420b72902f5fec56992fb1e41a0faea9e2f16628d3b733271f02

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\LocalPrefs.json~RFe59b675.TMP

                                                                    Filesize

                                                                    484B

                                                                    MD5

                                                                    424d143bfaf3b03e1475e012d5b21065

                                                                    SHA1

                                                                    2bd35e1e3eef310b9275e8f3ca9d2416c1edae22

                                                                    SHA256

                                                                    e41da507af1a1267f00256c2b8af9dd6f095d99a916dcfd91bfc7a9f98efa4d7

                                                                    SHA512

                                                                    482193ab9601d61c188f63fe8977ce9a586a4d75f2a03e55c7a354b9b590f5777b0dd3bfd1832864361bc5f4f14cdad704c1b1da7191716dfaa3845ff3f80234

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\Network\Network Persistent State

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    f3bda675367b5e2e305e03132ac18538

                                                                    SHA1

                                                                    9046ce99f92416649cc5c541dff565640f9a1a03

                                                                    SHA256

                                                                    ff1358ee5e7b069292cedc6d40a456a3975c240ceacda6e41d450c42febec64a

                                                                    SHA512

                                                                    31fd25eea13a3130dc96183afe32c613e7359218e142169a58668b6ac9499709b74260ae7fac5ef47d3a005b44430466ff24fdf44145ec10a4e3cf9708f10f78

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\Network\Network Persistent State~RFe59b82b.TMP

                                                                    Filesize

                                                                    59B

                                                                    MD5

                                                                    2800881c775077e1c4b6e06bf4676de4

                                                                    SHA1

                                                                    2873631068c8b3b9495638c865915be822442c8b

                                                                    SHA256

                                                                    226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                                                                    SHA512

                                                                    e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\obs-browser\Session Storage\MANIFEST-000001

                                                                    Filesize

                                                                    41B

                                                                    MD5

                                                                    5af87dfd673ba2115e2fcf5cfdb727ab

                                                                    SHA1

                                                                    d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                    SHA256

                                                                    f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                    SHA512

                                                                    de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\rtmp-services\services.json

                                                                    Filesize

                                                                    101KB

                                                                    MD5

                                                                    f19ee49d2a80f2d186e793099b547043

                                                                    SHA1

                                                                    1b2a305dbf52858ca9953c36b0a7e362959d7381

                                                                    SHA256

                                                                    d2642f3d603c27c82f71524449edba83f444b58df29152244aff6a2c77c59e8b

                                                                    SHA512

                                                                    931ebca922a2019f2a09e5f4e5b36a545e57f127447fea55bab103b0ce3096e304f7ce34238fc89be7a33d4eec25a79a7800381523abe9e717300248a55eec43

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\rtmp-services\services.json

                                                                    Filesize

                                                                    47KB

                                                                    MD5

                                                                    123f74009d1ad359ab759510da6dbdbb

                                                                    SHA1

                                                                    d9e4c75ab6b083ea0289464df3ec4f402b89c3a0

                                                                    SHA256

                                                                    59e1b055138de63830a9d98dcbf723f09552fdf3b4a6cd4148cec1713a86a7ae

                                                                    SHA512

                                                                    4236f9c9b5b8685123404c23efe78fee640a5b6d81dba17add5f97eed70aacf0e82a50f58ff3b273ab67a4da5d7773a92d6e1c8d3d4c5c66e9e68c33b31687ab

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\win-capture\compatibility.json

                                                                    Filesize

                                                                    21KB

                                                                    MD5

                                                                    b114bc164b7a2a92511f784037e592a4

                                                                    SHA1

                                                                    7faacbe11c4ac20b9dbb910faa58ca9812879566

                                                                    SHA256

                                                                    37c8bb60a0ef9effe79efdc77f2e444a235c5a4f31fe7a7739a8b43f98bb5429

                                                                    SHA512

                                                                    18415b95e549ec4b5359be82952d4f59889ab3fa5d9f7c50b318603d8df00e56e5cd870e61ec02236dff7937e6ee96eec1d88a3cba4ec66efb05fb5a13ccccf4

                                                                  • C:\Users\Admin\AppData\Roaming\obs-studio\plugin_config\win-capture\package.json

                                                                    Filesize

                                                                    250B

                                                                    MD5

                                                                    baa44a872ade09cc49744adda9014e58

                                                                    SHA1

                                                                    32e4f14fe4157d9b35c5993ad61e4fc83f207803

                                                                    SHA256

                                                                    0154f32065c447284a1cc0bb0ee5b9ead88811008c11a08d2162f183eed90cc4

                                                                    SHA512

                                                                    b715b69f02b12c5b667b3d885a919cd13b9ecf3d800899fc56f00a358bcebddefcedf6f522f59d1a8fa2634f5d314156cc2d5d2608abb903b3433a6ef0b8b6bd

                                                                  • C:\Windows\System32\msvcp140.dll

                                                                    Filesize

                                                                    561KB

                                                                    MD5

                                                                    72f3d84384e888bf0d38852eb863026b

                                                                    SHA1

                                                                    8e6a0257591eb913ae7d0e975c56306b3f680b3f

                                                                    SHA256

                                                                    a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde

                                                                    SHA512

                                                                    6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6

                                                                  • C:\Windows\System32\vcruntime140.dll

                                                                    Filesize

                                                                    117KB

                                                                    MD5

                                                                    caf9edded91c1f6c0022b278c16679aa

                                                                    SHA1

                                                                    4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a

                                                                    SHA256

                                                                    02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a

                                                                    SHA512

                                                                    32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362

                                                                  • C:\Windows\System32\vcruntime140_1.dll

                                                                    Filesize

                                                                    48KB

                                                                    MD5

                                                                    2bd576cbc5cb712935eb1b10e4d312f5

                                                                    SHA1

                                                                    dfa7a46012483837f47d8c870973a2dea786d9ff

                                                                    SHA256

                                                                    7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637

                                                                    SHA512

                                                                    abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542

                                                                  • C:\Windows\Temp\{66E8980F-A7C9-4F22-8834-17C114F8DEAF}\.ba\logo.png

                                                                    Filesize

                                                                    1KB

                                                                    MD5

                                                                    d6bd210f227442b3362493d046cea233

                                                                    SHA1

                                                                    ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

                                                                    SHA256

                                                                    335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

                                                                    SHA512

                                                                    464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

                                                                  • C:\Windows\Temp\{66E8980F-A7C9-4F22-8834-17C114F8DEAF}\.ba\wixstdba.dll

                                                                    Filesize

                                                                    191KB

                                                                    MD5

                                                                    eab9caf4277829abdf6223ec1efa0edd

                                                                    SHA1

                                                                    74862ecf349a9bedd32699f2a7a4e00b4727543d

                                                                    SHA256

                                                                    a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041

                                                                    SHA512

                                                                    45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

                                                                  • C:\Windows\Temp\{66E8980F-A7C9-4F22-8834-17C114F8DEAF}\cab2C04DDC374BD96EB5C8EB8208F2C7C92

                                                                    Filesize

                                                                    5.4MB

                                                                    MD5

                                                                    d5a3fd8ad806f66d33d652d5913a95b3

                                                                    SHA1

                                                                    7b1bb6cdbe700acc2434dc52c40cdd96a6462a17

                                                                    SHA256

                                                                    cc001c20f85e16015e0d23eb0c3a9bc3c3cdcc1adda53f88ac77dd29705ba01a

                                                                    SHA512

                                                                    594d710133f44049546c62c3c89614415ad776c24f3ada0a8d1724e6daf27f941eba43a05a096d90cdf51ad51c02462edd6308e2aa393cb8325fde256ed77037

                                                                  • C:\Windows\Temp\{66E8980F-A7C9-4F22-8834-17C114F8DEAF}\cab5046A8AB272BF37297BB7928664C9503

                                                                    Filesize

                                                                    962KB

                                                                    MD5

                                                                    8eccd85b6c4273a28a54b0687feb6a96

                                                                    SHA1

                                                                    be791128af5713d407df2f7436ea8de1a80ca725

                                                                    SHA256

                                                                    8fafd6d0754ee53125902df1b67ef2db86eb7af4c097522f2fb58443501fecdd

                                                                    SHA512

                                                                    9fdcb359a5748d0d920e1e12cf31de42fa224840fd11e5878f7caff7c4495b4facacf1a58cdaf0caadd0d9a3af871870b755245d2c1af33f07f3229b85101da0

                                                                  • C:\Windows\Temp\{66E8980F-A7C9-4F22-8834-17C114F8DEAF}\vcRuntimeAdditional_x64

                                                                    Filesize

                                                                    188KB

                                                                    MD5

                                                                    5fc68510b7425822a9d0928567ffbd1b

                                                                    SHA1

                                                                    f506d97ceac3c435ce6bafda7c47d9a35fc57714

                                                                    SHA256

                                                                    7489cdde6a0c8aadb3253f22c460c2dc8099ba677f42d46b277f7040327c9b28

                                                                    SHA512

                                                                    4dd4d99ace30eb1add9ae225f159f68636d42d1899acb50f616717f05045e402a2bbb76e4d86569a08ae74bb161b3911a73910fcc7044429da34159cf6b9f473

                                                                  • C:\Windows\Temp\{66E8980F-A7C9-4F22-8834-17C114F8DEAF}\vcRuntimeMinimum_x64

                                                                    Filesize

                                                                    188KB

                                                                    MD5

                                                                    0d00edf7e9ad7cfa74f32a524a54f117

                                                                    SHA1

                                                                    eea03c0439475a8e4e8e9a9b271faaa554539e18

                                                                    SHA256

                                                                    e55a6c147daab01c66aed5e6be0c990bbed0cb78f1c0898373713343ef8556cd

                                                                    SHA512

                                                                    0b6730fa8d484466a1ee2a9594572fa40fb8eea4ec70b5d67f5910436ee1d07c80a029cf1f8e488a251439ac1121fd0a76a726836e4cb72dd0fe531ce9692f6a

                                                                  • C:\Windows\Temp\{E9DC6CE7-A856-483A-90B9-BBB82E38802E}\.cr\VC_redist.x64.exe

                                                                    Filesize

                                                                    635KB

                                                                    MD5

                                                                    ae0540106cfd901b091d3d241e5cb4b0

                                                                    SHA1

                                                                    97f93b6e00a5069155a52aa5551e381b6b4221eb

                                                                    SHA256

                                                                    8cd998a0318f07a27f78b75edb19479f44273590e300629eff237d47643c496c

                                                                    SHA512

                                                                    29bb486bfdd541ba6aed7a2543ff0eb66865af737a8fb79484fb77cb412c3b357c71c16addf232c759d3c20c5e18128df43c68d1cba23f1c363fd9e0b7188177

                                                                  • memory/1688-6417-0x00007FF928370000-0x00007FF928990000-memory.dmp

                                                                    Filesize

                                                                    6.1MB

                                                                  • memory/1688-6416-0x00007FF6C7590000-0x00007FF6C7A5D000-memory.dmp

                                                                    Filesize

                                                                    4.8MB

                                                                  • memory/1688-6418-0x00007FF6C7590000-0x00007FF6C7A5D000-memory.dmp

                                                                    Filesize

                                                                    4.8MB

                                                                  • memory/1688-6419-0x00007FF90BB30000-0x00007FF90BB40000-memory.dmp

                                                                    Filesize

                                                                    64KB

                                                                  • memory/2468-2315-0x0000000000C80000-0x0000000000CF7000-memory.dmp

                                                                    Filesize

                                                                    476KB

                                                                  • memory/3140-2278-0x0000000000C80000-0x0000000000CF7000-memory.dmp

                                                                    Filesize

                                                                    476KB

                                                                  • memory/4296-2316-0x0000000000C80000-0x0000000000CF7000-memory.dmp

                                                                    Filesize

                                                                    476KB

                                                                  • memory/4940-7625-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB

                                                                  • memory/4940-7623-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB

                                                                  • memory/4940-7624-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB

                                                                  • memory/4940-7629-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB

                                                                  • memory/4940-7630-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB

                                                                  • memory/4940-7631-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB

                                                                  • memory/4940-7632-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB

                                                                  • memory/4940-7633-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB

                                                                  • memory/4940-7634-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB

                                                                  • memory/4940-7635-0x000002616C430000-0x000002616C431000-memory.dmp

                                                                    Filesize

                                                                    4KB