Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    507s
  • max time network
    506s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/08/2024, 23:13

General

  • Target

    https://github.com/MantiWPF/MantiWPFRelease

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Drops file in System32 directory 2 IoCs
  • Probable phishing domain 1 TTPs 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 48 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/MantiWPF/MantiWPFRelease
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2952
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffebdfbcc40,0x7ffebdfbcc4c,0x7ffebdfbcc58
      2⤵
        PID:3748
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1916,i,17307586643452379532,17593763172529643346,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=1912 /prefetch:2
        2⤵
          PID:2636
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2160,i,17307586643452379532,17593763172529643346,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2204 /prefetch:3
          2⤵
            PID:1628
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2264,i,17307586643452379532,17593763172529643346,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2276 /prefetch:8
            2⤵
              PID:2412
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3120,i,17307586643452379532,17593763172529643346,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3136 /prefetch:1
              2⤵
                PID:648
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3124,i,17307586643452379532,17593763172529643346,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3300 /prefetch:1
                2⤵
                  PID:2988
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4824,i,17307586643452379532,17593763172529643346,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4836 /prefetch:8
                  2⤵
                    PID:1552
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5080,i,17307586643452379532,17593763172529643346,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=5052 /prefetch:8
                    2⤵
                    • Drops file in System32 directory
                    • Suspicious behavior: EnumeratesProcesses
                    PID:1952
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4668,i,17307586643452379532,17593763172529643346,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4484 /prefetch:8
                    2⤵
                      PID:1076
                  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                    1⤵
                      PID:1196
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                      1⤵
                        PID:2868
                      • C:\Windows\System32\rundll32.exe
                        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                        1⤵
                          PID:636
                        • C:\Program Files\7-Zip\7zG.exe
                          "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\" -spe -an -ai#7zMap25933:116:7zEvent14461
                          1⤵
                            PID:3912
                          • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe
                            "C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe"
                            1⤵
                            • Executes dropped EXE
                            PID:2788
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pandadevelopment.net/getkey?service=mantiwpf&hwid=c1c224b03cd9bc7b6a86d77f5dace40191766c485cd55dc48caf9ac873335d6f
                              2⤵
                              • Enumerates system info in registry
                              • Suspicious behavior: EnumeratesProcesses
                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                              • Suspicious use of SendNotifyMessage
                              PID:3212
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffea7a646f8,0x7ffea7a64708,0x7ffea7a64718
                                3⤵
                                  PID:5132
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2208 /prefetch:2
                                  3⤵
                                    PID:1144
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3
                                    3⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:60
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2724 /prefetch:8
                                    3⤵
                                      PID:2148
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3424 /prefetch:1
                                      3⤵
                                        PID:2320
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1
                                        3⤵
                                          PID:404
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
                                          3⤵
                                            PID:3344
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
                                            3⤵
                                              PID:3476
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
                                              3⤵
                                                PID:956
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
                                                3⤵
                                                  PID:5376
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
                                                  3⤵
                                                    PID:5552
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5824 /prefetch:1
                                                    3⤵
                                                      PID:5304
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6076 /prefetch:8
                                                      3⤵
                                                        PID:5700
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6076 /prefetch:8
                                                        3⤵
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        PID:5680
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
                                                        3⤵
                                                          PID:5472
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
                                                          3⤵
                                                            PID:5468
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
                                                            3⤵
                                                              PID:5532
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1
                                                              3⤵
                                                                PID:5508
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4208 /prefetch:1
                                                                3⤵
                                                                  PID:5520
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6628 /prefetch:1
                                                                  3⤵
                                                                    PID:5164
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1
                                                                    3⤵
                                                                      PID:5876
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3776 /prefetch:1
                                                                      3⤵
                                                                        PID:2496
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1
                                                                        3⤵
                                                                          PID:5220
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2164,13912691804976089187,3667974972447139286,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1460 /prefetch:2
                                                                          3⤵
                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                          PID:2920
                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                      1⤵
                                                                        PID:2912
                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                        1⤵
                                                                          PID:4316

                                                                        Network

                                                                        MITRE ATT&CK Enterprise v15

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\34b2acbb-a8c3-4253-b3bc-3e325196cdcf.tmp

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          f1e5cf6c786572efdf220d16d84298c6

                                                                          SHA1

                                                                          e3ef2f421264c44013247f6e9f73a8658751f7c2

                                                                          SHA256

                                                                          927415922178f215d1c2e165a6b90f7468b387d6d2dab2ef9d66a42d11127f61

                                                                          SHA512

                                                                          80b17f8db9c23292aea126f5b19a8cd3fd6919cc5810e9b81f7277b134b9ed0131d2fd3574898b36b9a33245f750bf65685c3824448b9b0f55286aa0c2dab982

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                                                                          Filesize

                                                                          649B

                                                                          MD5

                                                                          4377e29073df19c511d67704fc648700

                                                                          SHA1

                                                                          13b300dcc5ca567d4cec0e5dcd0402862ba669c2

                                                                          SHA256

                                                                          b2964573c3a1492dc8bf49bd4fdb254a04e78900eb4f4176047f6faff6897a6e

                                                                          SHA512

                                                                          51998e074fa97daaa3cd5c240232a0d4f24c4d31f80f6b081c29b221b2f7719bcc7caf0a30ccd297536a47c71fdfbbc341085a0792d2a28d304e1885acc6b560

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                          Filesize

                                                                          2KB

                                                                          MD5

                                                                          844f4c7946a4dee4d4bdfdde30207e91

                                                                          SHA1

                                                                          6d651da72e27bf06c567db4cd7a063df1c059052

                                                                          SHA256

                                                                          4d8d42e75fc5faad6752354d2faadcf7bdb55b7c1fc6bfd81c5982d2ba3e1d04

                                                                          SHA512

                                                                          df1f68f18970cf920cb09381184d10db584e26d24ea065ceb7c39297066094a32fb630d0e3184ac7de9db7170145a9909c03d932b24c83a4914ba952fb646cd7

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                          Filesize

                                                                          2KB

                                                                          MD5

                                                                          817d3af7fb4d8e10cc0872ac9703fb08

                                                                          SHA1

                                                                          e0b8e4e5b26a2a410af04b0f0e0d8c34a8b2b99b

                                                                          SHA256

                                                                          9f2392ee6ea3d83d373e539211ef7713b16e349da445dbc43ecf7bb37e8668b7

                                                                          SHA512

                                                                          4c856ce04331645c263da0df7af0af4bf68f6d4d462d4fb8480362d934a78e340c3e6fb0824cb1ee9d3df57ea852a6c50e4db5d96c186262e26a1b8ef9d5df4e

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                          Filesize

                                                                          2KB

                                                                          MD5

                                                                          9cae6b22ebbfda90215feea0f2001b9c

                                                                          SHA1

                                                                          faef77bb92030764a3d0685ae490109f67e2b816

                                                                          SHA256

                                                                          55d7ee1423faca6eeb490369d88f610a88d2f2ed0f570ac9d563583f822fbcf8

                                                                          SHA512

                                                                          38fa20830d65d71118be02a9632f950ce0d2596a7de15f999396c6432c459100c64c5ba90e679a24226ccdf99e5000609cbbda69789dbc848e74d98dd810a960

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                                                          Filesize

                                                                          2B

                                                                          MD5

                                                                          d751713988987e9331980363e24189ce

                                                                          SHA1

                                                                          97d170e1550eee4afc0af065b78cda302a97674c

                                                                          SHA256

                                                                          4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                                          SHA512

                                                                          b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                          Filesize

                                                                          1KB

                                                                          MD5

                                                                          89329285343454bf64fb675a644d8a57

                                                                          SHA1

                                                                          335f5a338bba9ca3995d4d77cc1615c1600f3880

                                                                          SHA256

                                                                          b88b3a411bdcede274f97732bd914594dba6c3224735afff6c55847b9e5d50a4

                                                                          SHA512

                                                                          e0922d418e603fb47309c179a45bdf9fc159695aed2e480b91e0f153686f2ef9d820472461f4a2cd8e0f054d7cb1c5f3cb078f64b0c7ced5da453344ef82a8da

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                          Filesize

                                                                          1KB

                                                                          MD5

                                                                          b9e8fcc8f179d0278808536d07236914

                                                                          SHA1

                                                                          9fe737a613392303321e8fd6e3c8e4bde62568cb

                                                                          SHA256

                                                                          91f0c89416eeaf282834c8b7262c9ec81b17b4c7c24e7650aec63cf8565b5bd2

                                                                          SHA512

                                                                          13f52f713ba166f2cd46b1f7198f9d75785ed7f6aa9e500fc61f9c22a38bbe147664ffa7ecf37d45f76c2060308ceac00a7fcbe26f555d7fc10235d5484090b0

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                          Filesize

                                                                          1KB

                                                                          MD5

                                                                          9c91b79d6391a4cfd5169729b04710b2

                                                                          SHA1

                                                                          f92a61c9dda6180814a698bd2fcf03249a150a01

                                                                          SHA256

                                                                          425e23824ee65c0c7f6608399a04ca327e207a5642058dab45528ccd04bea304

                                                                          SHA512

                                                                          4a0d0f95b3da0c1ff29bf7c955684ab4dbc1bb225edbc67a457ccf0aa4885aaefdac7b0542da24b750c5822cfca43b4235fbf6ae4085272d545e86b57d694665

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                          Filesize

                                                                          1KB

                                                                          MD5

                                                                          96fa39a4841ab1a48a33543199fdec05

                                                                          SHA1

                                                                          4085bcbc7c413033a513aaf59b2cc8d7e977b547

                                                                          SHA256

                                                                          6f0d2ba5ab531f1a121886ab500fc2064930a718ec70922d06979bc23d13c3a8

                                                                          SHA512

                                                                          4be11acf720b4fe61e816e02714ca64bcb34f1c6d8a47f265f17fc4ae7ac716610cd96cafa120c10fdb8f5def363388f1e40f066ee83ddffddf060c03996b9fa

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          990ab11146b1cb33ee1c7178712ff621

                                                                          SHA1

                                                                          7236d65e0400af50ff2b36b76ea0dc6a62923141

                                                                          SHA256

                                                                          127d04f5836ef02d8176c878ddca080425d85ad247ccad51c8b3c9a18734585d

                                                                          SHA512

                                                                          aed6ef52cebb345f1fe39b9310f7d5c3c884dff84a8e60d11e02154906f8637c3bfe65baa20265d8f251bf4bf8e7b552e13083af24f95060e758d417bf55ad7f

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          9d6c36f70269d14eec770d957fc633ee

                                                                          SHA1

                                                                          ee678909bc767bdd07252580c9f89a089890dec1

                                                                          SHA256

                                                                          0e9abff522110ea681fed415fe1475ef7d7d7aa24b58a9407aac2de64b270d02

                                                                          SHA512

                                                                          551edcbe9cbf36bd783507484efa892c220c1bbb951787ae0adaa4c9484021b5aee7ef75cfd4034d5b80f020c337ad5688decaa5b73650e8a6a290eb8ced9e10

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          65ebfd4f518a8d76f29a8d66fc05f6ff

                                                                          SHA1

                                                                          e77f577b67a484228d3fca2ccc1d7b3feed1b712

                                                                          SHA256

                                                                          c1242a839b1ded8300866d18eea1db0f15b2f1556f376c5c547fd41d2164129a

                                                                          SHA512

                                                                          dd4bec150a9296aa765874f557d2a95e709306c3b3a7cd34e28804499021b94256a9f50d8ab1534fae04435a18c06c361c1494b0a83587f02b86a15750b346f0

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          93a2bb2c6a181f7d0c6adcc9b3756a47

                                                                          SHA1

                                                                          31eed1b705a02592cc9d285ff05e12994647f5db

                                                                          SHA256

                                                                          5ba2e86c7ca624e2a38d4cefd0df290a6f8ef3b685a6d69601369a483a5b2a79

                                                                          SHA512

                                                                          397025202618e6a4eb96b0a95c8c1926631aa1110a5647ec6b1f5df0778f2c83db39fb7ff591b55951aaa9a6b6a29b5af9f79b9e6cb90c2993d9bb254c20099e

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          6a2b265b4c75ce755dd9e6f4107e610e

                                                                          SHA1

                                                                          dc067a197d4bbdd7cefc9bd91de2541052c9a8eb

                                                                          SHA256

                                                                          971726b6f4c532263cb719c9545c495a03de6faa426ab4de03060bee9edc0116

                                                                          SHA512

                                                                          27e5096784888a03d3e8e7ffbf85b918c6c6ca7b383bcd6b8d65a0ebae8893d05b5d19de2d1a7a810d8e01d74dd100d254c71843decbb71eda049baa4463282c

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          976bb422838729d039806beac959c349

                                                                          SHA1

                                                                          86c911a8b987cd3c7aae4896d7d7759794e876b5

                                                                          SHA256

                                                                          d66107b329a989dfbdb37e5be099960a416228b3b6eb93868b43d3b98c672fa9

                                                                          SHA512

                                                                          49b516fb111c00f25333a14d06078089534d2f7635af5ecafe8148d2ad025d68abd8859481d7985147a9a885aaeeb5e2d630c3eacf421172b4f980a3c5aceacd

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          56baf50d784f652f3758bc8f14b43834

                                                                          SHA1

                                                                          c3114a05e1b90b6aeb0967eb9527c0bb27a6c050

                                                                          SHA256

                                                                          142e87a80cc620327b3a910c802bdb6130553c32b58a1dd4725074fc356021a1

                                                                          SHA512

                                                                          7e33b50e412375952627ad28930cbc8c04011dcca8278aa4bcc5401193e0b27d43c41ec5ae0eef42e7ca7264520c776c2df13d29a866d338d083d9fc768fd591

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          9c539d1dd5d228e72fa5e4b2240c932b

                                                                          SHA1

                                                                          9c7d4858fd2953d48626ac0adf8e34e68ada2cb5

                                                                          SHA256

                                                                          7b8af2096c5086496283648c1aadf4ec73fdd80ac84573cbf028ee1f90acba00

                                                                          SHA512

                                                                          3a2c3fc120c6cae7e45646146f2bb6f8c0d8f9e912dd52bfd0f07e518d558ffd5d78b4408d4814bb7c864d5b83b00f132462287f80b48bb02e0b1f8254ea27fa

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          b555c15ab8553d424e3201068ce88535

                                                                          SHA1

                                                                          07274b5fc310b087402e87982584288b465aded8

                                                                          SHA256

                                                                          701fc57965111655b6d213974acef1845aa730cc1876200b28c460ffebb75d95

                                                                          SHA512

                                                                          253b036299c9d213942092a0733dae9475ac2479891fa5fbc123d074e4a66dd314a539cced5eda9d520e6fcfdb3f0fdb0fd321fee3c2d1612c02aec11ad96228

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          7de359057d99a9db57755060d0ab7c3a

                                                                          SHA1

                                                                          dad2f2a6bccf54becdeba687313ea68822ce7e09

                                                                          SHA256

                                                                          a98e21e813d49b79b144d3ed153e0da1ad095545b4017c52c0a76edc63935f43

                                                                          SHA512

                                                                          f53fc60920dcb9226a45ed2c4d28c342bdf3becdafa59c3a2d8ecaed8aa6ccfd6a16258226dd222213ed3504d6dc1dc9d05af6c0b5f1199150f825aea97d0893

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          0f07b28ee7f6edb5488afee614edf5fc

                                                                          SHA1

                                                                          8a6d8b164e73481b78cc26944a162b6139ca1dc3

                                                                          SHA256

                                                                          1500e968dad53e4ce0db2cca7dbd6149b87cb8e58ac7fdfc2f9201dbd7cdc5e4

                                                                          SHA512

                                                                          b2d1f313141eaa9cc30b7e00dd792d604b036dffb8b0391ed03af5e180ab97425dc99cb7e47ae7c83642b29be18643841e9d8efa4f315c5ab345abb191845f13

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          3dd5264705df17897db1785ee38acd45

                                                                          SHA1

                                                                          ef462344b87fae0dda46585c4db64b71e69d142c

                                                                          SHA256

                                                                          c491b3408d61ab6f64dd09355ee738a730584ad1ba35cc4d7e83b1a6ec82bf51

                                                                          SHA512

                                                                          9fbc8547fd1a0073dd5cbcaba14ab0075124ddc42caf19a9f0a67594902aa160e7518868c546fafb69eff9eb1bbc21de0d46d693e04f44bcda058081c5f2b00c

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          e8c5322e46023bc5b2b3f3d7a2c0f242

                                                                          SHA1

                                                                          a171ffe523a2fa1d8544d00c67af0033448614b5

                                                                          SHA256

                                                                          bc49cd98131d9efead92be0176c99b7a4f57ca0fc6f03026873b8edc4c960b7f

                                                                          SHA512

                                                                          e19768c9c1c109dc5eb7d5dfa9d915f5e95d7909fc7686cea3e447c2baeabca558b9429b42298620134b025f773b35dbf5ecef9e5b95435e32d8266e3316e0b4

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          f48960273b613f686134c4dc77749ca8

                                                                          SHA1

                                                                          7494d1a7afc31e44d78fbf186877e9c2a84183fe

                                                                          SHA256

                                                                          83c72cdf3e33b20f82ae93c2a6cc6127ab9c05d6735b5c3a13042a6047055c1e

                                                                          SHA512

                                                                          ed6b7bd16398ad29c1a7db0b354072c7215c8de54de588cc6913bc4d4ed3e41eb6838f90932290ec0f77b36eb97bbc023a825c346b4d20c9eb2fbf5402cc5b3d

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          babf59db098bdfc02215e091fdbe1d45

                                                                          SHA1

                                                                          157099183f58229c46092b6ca4078657c08549ad

                                                                          SHA256

                                                                          9f30076f09ff08985e9c9ec213414c2c1efe274c5918aa988d8d2d6dc165eb2e

                                                                          SHA512

                                                                          4150e8f9e18320d02ff343a4eb83bac06542f3f6057896d58075ae2a7affced4a7b611f73c2397287dabb16667b1159ccebdfb46d56667271fc6ff5e5a599170

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          869d36196cdc483155d9399e4b804e8c

                                                                          SHA1

                                                                          7ba77ef53395a7a42c7e1597f3221298ccfce7a9

                                                                          SHA256

                                                                          b581a174654f4e437631076b9e8da4ed5a16381f46b9cf1252d76b7357782204

                                                                          SHA512

                                                                          bfd8bd074b0b9153d04b5cb2d7e98e1123079c2536ad491874da84fe9058e693420390f8aae6e5488e5454cb8dc93875ad237a90d5fc28aba719abb145878ae1

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          43dcb65645eb9fa1110034a73c3612f3

                                                                          SHA1

                                                                          04d27a1151df82554f0bc06904cbe345dfe98417

                                                                          SHA256

                                                                          0c1f72bd6fe71f6a18cc23deb7b09093037cbbab6fc275a918fd5114c2648961

                                                                          SHA512

                                                                          a29cf804a42405bfc3ba470b5eb158e55fe2b615b04956933145f089c5f3c1003e74287d065aad5cd16863c3370c273db995d0fdcd18b46cfd167ff2e32203a0

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          af7e14f2f43612423cf885505789b81c

                                                                          SHA1

                                                                          f2a85a26c6184ff24f79ec4d8de256deb99909d5

                                                                          SHA256

                                                                          e1ca889ebd8c8960d4fd44f6c619aaadc79cf18ade8b1e9b1c0de65e48244a53

                                                                          SHA512

                                                                          b453f11c851a7ba517be459725740d0b1d247306ddd1b16b00f91159d7401bc34db3b971a568ea0d2fc2e068aac4b105b6de21fcf929ba85439a77130a79f4dd

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          ee046e619bb7bfe988efd9fc25bd3519

                                                                          SHA1

                                                                          0a60cba2efa1c7908d9e915e190c3c84b38d18a4

                                                                          SHA256

                                                                          1038eb8e2f8035889e0c43cf43596103d8f0224933ce2b463d3f46803cfc87a6

                                                                          SHA512

                                                                          52602d9f6602fdf3a6d60e680415c88151815433c4b50cae8d382632978fdc909b9ee4cb958c6c887c5c681e2ff93ce24babf0592bdc46129b57559d17cf3b25

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          7faf5ed86e2c2da095a909aba40d62b4

                                                                          SHA1

                                                                          df7678300fa9d45bb2b845ae621d8e7c71a910a3

                                                                          SHA256

                                                                          7bdbe20a6f08228d3f35cbc57ffcfecbb1747f0b339b32e3e337abeb31fab70c

                                                                          SHA512

                                                                          75c1284db409c38452291cdca8c44fc4d28a05f2e4f5a01f00f67839a60738f8ac7c4672d908c1c6abd7b7b7fcaaa21af15555377f6e85430b897ababfb62e79

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          139adf317b72ede507c4bbfdeb8e214c

                                                                          SHA1

                                                                          9261457c7e7281eb7bd8f8fec737777059c3b087

                                                                          SHA256

                                                                          656c6d636c166f3f3e9ae5f7d89e5f1f5744cb6e6fa4e969723c79453bf36925

                                                                          SHA512

                                                                          2b12e64005c680c5fc2ba6bdceb940d37ff427d83eda399789f8cabcf63498ca3c4851d3cefa10aba5e8d008df8c0cb6805aaabb3abc30c09cd84e41fbe71a7e

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          1a6a059ca3ab262f6032f48e080277fa

                                                                          SHA1

                                                                          59b6710b11d4d789a98e3273a474e2790d564b8d

                                                                          SHA256

                                                                          52143cdc9c1b525641aacca058223883650f14173f955381d13e8a010db14618

                                                                          SHA512

                                                                          ef2fa4f2fb0a7c48698a1edd3ae40af22d2debe4701a0b27a0c38d19fef463172195137473c184824cc22fa0332aecd2adb27b60e75fe74b35cbd00aa0ee0a8d

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          e4e51c3989bb6be6b092dee5b28f1f0e

                                                                          SHA1

                                                                          fcc9a5bb57e621b72393a74fe6c5be617d48117b

                                                                          SHA256

                                                                          94250c14bcf855c7dcf9cb137e74a9c362eb903365690e47a6ad90d7424b3928

                                                                          SHA512

                                                                          482000e0bd788db50951ac5d6f35f147139280a63be874dcbdcf3a3fb62b29acb365194dd982fa2756103a4ebbe4e359c632fcd749e0caab580afd10f2264483

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          a24c0525c63d9518157baabf48100986

                                                                          SHA1

                                                                          7e3e940569bbb9b290e1afc5b9ad38eefffa7d53

                                                                          SHA256

                                                                          1ae782ff370153bbeb1bff72f73f28acf0588ab2d5e856f33a806a64b7591862

                                                                          SHA512

                                                                          89e5bb548718893b675981f405c0951f783fc50e2c3af5a81fa91261daf03f1152c10aa99e7e8c6c7fa2df8d7f38bd68545d28195b389061de2dde2285887455

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          67abe564e152fbad729a9ff9e70505d6

                                                                          SHA1

                                                                          da1c3f884de7bc080071fd5b9fb1ba158c7fa497

                                                                          SHA256

                                                                          1dec466552f09d32e7138c53e5fb6615b7809aecf6755d5e987d4f63b6380665

                                                                          SHA512

                                                                          1661e76922eca06e6aa0bd316cb190811628a0cfa385f37fb736fe61477c29a929c3b7baa5934e249903ae2d9aa871088ecbd191a0ae42cfa8ec6079557ba170

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          a510333467ecf7b3314b7e866cb73a03

                                                                          SHA1

                                                                          e7d8e82cd5429dead31bad594206bae119c0ead7

                                                                          SHA256

                                                                          a442e85d20db0354e5a4554f7caacb41e0245bf9b73b6c7eefea5e94d33efc94

                                                                          SHA512

                                                                          69cde582ccdd5097eaf948d5b7f1fe71f09933c35215b56a2f01d8f8ce803ef9814208d005a90ccea881adf4222d0efa4c809b8f4e77011d04ed3c9fbf75d32a

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          c27f429d83ab1b08d64f4542b3a204b1

                                                                          SHA1

                                                                          ad27413c9ed79686d82f4508abdbdb6b135bf703

                                                                          SHA256

                                                                          284d27d07069e82ea4591e8eeb3bc68c2c1c52586b99251b86988c49bdfbea57

                                                                          SHA512

                                                                          3903f80ee5b5fdc3014cf56a9cb9984aad5018bc6b7fb891e4e1ad7e5cc5890721637d89d36c69a4c6ec21109445b12f33dff5719badc674004530a4c8ed5dd8

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          111ca6ce8e3ef52ccb177e9da04ffb34

                                                                          SHA1

                                                                          7795a0c5d3776d9d63ee9629eb8eb51adb5bf7b8

                                                                          SHA256

                                                                          bdef6affe156ba2a96e8e36a107bdafa95abb4c9f59384ff9f6e4ca9d271649e

                                                                          SHA512

                                                                          71d3de0ec9127f61d650d0f0e10ed4c31928210b8b774ce3547f27674a8b9724801889446eb1902227ba0ab5739ee667dae786447a4fc86197972f35504368e8

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          2adb8e172f15e28d63f315de146ba83c

                                                                          SHA1

                                                                          9d01540995452c6293daa343f8fb7f4921c8843a

                                                                          SHA256

                                                                          51ac34a8c599de8ca34492b8aea2c036487fac6e4d18af13b8682ae57947244d

                                                                          SHA512

                                                                          1c32b059f56dfea1b3f42df7d9bd5436b6a4f68e72649b0819f69b4d136e07979ce84a434488995b1e61fe2f969eb3b07a73e31bc50f861900d3d9a6992c8e47

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          32e0eb9fd52e28dba0e061e655e4d958

                                                                          SHA1

                                                                          259980bb7687c5d05ed7fe55a73655600b9af50e

                                                                          SHA256

                                                                          48b522fd5e603286fd0075c46a03ce155b910df3bb5851704caf086eeda7e440

                                                                          SHA512

                                                                          630069521bd3567d589d16090a4f885ba16852d30a1613d60541171dd79e86f658dbd611eb17bf577ad26bb017df958546dc7182c8f0212431d7d93995b9d777

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d1aa49b0-7dac-4b81-a962-88b1efae05cd.tmp

                                                                          Filesize

                                                                          9KB

                                                                          MD5

                                                                          8e0d82d33aa828a1ef95ce4bc081794b

                                                                          SHA1

                                                                          f4ab1ad1e3ddc5a4c79d9257c9d0fa88288b8c7a

                                                                          SHA256

                                                                          0264628b760da12e0374cbab3b26d1ba43b07da917e65c734f55295f7bd35993

                                                                          SHA512

                                                                          59db253defe77926d0602dc105021354a509ad143ae12cc28fc878704223dbf04aaa1b5d35a519723f5ab4d5b696f90fb614a2d40f0c06e699f46e707c81d883

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                          Filesize

                                                                          99KB

                                                                          MD5

                                                                          417bb7beb48e6fe69bee9d35ca0b93ea

                                                                          SHA1

                                                                          76431f87139c7a48ff88ff97b3a94086637c09ac

                                                                          SHA256

                                                                          202f4936c1a297a99dce648293f475532472ae018631558463cb684798a756f3

                                                                          SHA512

                                                                          e05b93a8d1f964e4ec19c8ebc3a705ff0fd0e3697fc0c369d4595337b79c30bde1b26a590c78bf1bd476ce1a17cde733f1517d72144daf070267e95efae6c973

                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                          Filesize

                                                                          99KB

                                                                          MD5

                                                                          36d2011123ef13b4d639a9c30ff44308

                                                                          SHA1

                                                                          3c21ab1cf19091968cf6d2704e8563c6182b2065

                                                                          SHA256

                                                                          676797100ad0c638de802035636d9ed0b68f810c73923367f1a7ec21645d2965

                                                                          SHA512

                                                                          dbcd03ed76226f36e005fbe0abb0ce6c3d92fe452b8bc9b147799d035242c72ff2a2fbc4f172e51f916c3b73cf01242dcb35f9d0f718255df061f01ba66ce2da

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                          Filesize

                                                                          152B

                                                                          MD5

                                                                          27304926d60324abe74d7a4b571c35ea

                                                                          SHA1

                                                                          78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1

                                                                          SHA256

                                                                          7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de

                                                                          SHA512

                                                                          f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                          Filesize

                                                                          152B

                                                                          MD5

                                                                          9e3fc58a8fb86c93d19e1500b873ef6f

                                                                          SHA1

                                                                          c6aae5f4e26f5570db5e14bba8d5061867a33b56

                                                                          SHA256

                                                                          828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4

                                                                          SHA512

                                                                          e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

                                                                          Filesize

                                                                          1KB

                                                                          MD5

                                                                          65d3c8d84ffe9281caf6b9244953215b

                                                                          SHA1

                                                                          3c88ada49611441b95f1bd71d11cff231aee830b

                                                                          SHA256

                                                                          a1830c97d00e7d9e05a18202bd84e0856917f40cbe5d3494372c93c348a0c50f

                                                                          SHA512

                                                                          21efb0e277fb047f0843988c843bb302f773a358a7b1f89ecc0f39a82b97d4cd04b5b1ef7689460e9a50cf4733fec9e1b27c0952e87f5bceda5c52f61c9c878e

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                          Filesize

                                                                          624B

                                                                          MD5

                                                                          8d83c689e337118ed6e375a50c7ffcde

                                                                          SHA1

                                                                          152532b560cb1169d2cc8d962da84523d4c66be6

                                                                          SHA256

                                                                          a992f66aba24b7eb7b8e7fedf31c71de22642294cd747bdfedb21691b5979b08

                                                                          SHA512

                                                                          8a1175e7c81dc8676e12fac225a9ff180e407fbbe965be3a3de839aa0398989848ad138ba32dd29b6839a0439513a6be706d50503dd93fe6a0892c5e11350469

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                          Filesize

                                                                          111B

                                                                          MD5

                                                                          285252a2f6327d41eab203dc2f402c67

                                                                          SHA1

                                                                          acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                                                          SHA256

                                                                          5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                                                          SHA512

                                                                          11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                          Filesize

                                                                          3KB

                                                                          MD5

                                                                          55865f25f9005e2aaacbfcb5a74f8006

                                                                          SHA1

                                                                          68f017b1474526bb0736983caee2f5f18e3894a0

                                                                          SHA256

                                                                          e66306e80b5f63e8449dc403fbba5de9dde3ded61c3886c10c269db085062a65

                                                                          SHA512

                                                                          6126c2dd98164a1015fe698fd024512055c89b2c9fe51a9ab165f76aaee12ebdbac0baa3fa97da11978eb366b769a28d5e723a83e7068679e0e0ce346645d7a7

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                          Filesize

                                                                          2KB

                                                                          MD5

                                                                          fb0d52c0dfc6ba6f4c72f251aef80a5e

                                                                          SHA1

                                                                          47ae7ba632193fd033b6dc17b26b222daafe257e

                                                                          SHA256

                                                                          d624de4427c05e478e8fa32081c445fc6286ef784a48c40435574254705519bd

                                                                          SHA512

                                                                          88205cb605a0a238844fa995b706c3d5c715d18cb98134682319bf11a0a2f7b263936f9c0d0f3ee4ebd36351b97672be3106d802401876a6493fe3304b5522a2

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                          Filesize

                                                                          5KB

                                                                          MD5

                                                                          d4c4baf09712df2fa159b43ec17856e2

                                                                          SHA1

                                                                          eedfcd2fca5549fd87511c4023373d040924ba84

                                                                          SHA256

                                                                          afb797ffc95a41a9f40ec72e988f7908b5c75de7bf5e8d9169351a9db53673bd

                                                                          SHA512

                                                                          5bc137db0db6b59ad23a1ec2c273b1e8220848152c344cdbd087f7f8b4b5d9c702f12356379df286775166d2991fe887b61b1bec581db16ad96eb3f5d16ec76f

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                          Filesize

                                                                          7KB

                                                                          MD5

                                                                          f609ec2d94fd22ece2e13309c42c3bef

                                                                          SHA1

                                                                          9b453d040f1673f775bdb8c57159726ff81611f9

                                                                          SHA256

                                                                          7557e4a704caf45205d4ad93c6d492a7ac359a89ef45dffbdca3234f0d01f605

                                                                          SHA512

                                                                          7dc46ebd02a08788787fc73644d8f71a4fee22ab9edb01d2e39d92fd13fc9b32e9714b27800505d24c27857ca07ec73c82bc5770b6e0aa5d6e2118d433b3ce9e

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                          Filesize

                                                                          8KB

                                                                          MD5

                                                                          95db63bfcb5efcb62492a76dba285d1d

                                                                          SHA1

                                                                          b343af8a3459a1641b53177711ee0df759daf835

                                                                          SHA256

                                                                          3ab169a84c0b8344e2820d2f64d904099348b0f37f2eb68a816d19a44bb0904c

                                                                          SHA512

                                                                          149001a8a27ba9334e08b02065c81a71597367293c80f1f6ddd425e1538da75bcae3c6079292735be64bed70b970e9e5b3dc53154428fa1afb7127d5b22bd776

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                          Filesize

                                                                          6KB

                                                                          MD5

                                                                          2d6866ba7809fce75cd0507252326b1e

                                                                          SHA1

                                                                          c08aae0cc9cda11e2aceca4cce39f8c8fd29ac37

                                                                          SHA256

                                                                          fc49c1ac6eda2fa371b270f0c524520eced980602dcd6ad4c6c6e0066419a0e3

                                                                          SHA512

                                                                          0d6818ae59cebbf79893a52808bc10a63196629882b1994a03c1b394f54c5eb8e2bb4c4d6ac0780c7a7c084422e5b81fe9d6a6fce4c8593690e61f62ec21a077

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\25562172-340d-447a-8bdc-44e8f15d8324\925a02cd30dd2ad1_0

                                                                          Filesize

                                                                          86KB

                                                                          MD5

                                                                          b4c2fba29a3c706299bde1f9660fb384

                                                                          SHA1

                                                                          38069737bda09ce384d849b5a08fc81ce807c091

                                                                          SHA256

                                                                          5bd8ca9be9426aa420c6e9cee97d5e61070333b3cb82bea4d1f2a4d590fcb008

                                                                          SHA512

                                                                          b66321ebef0d25993e126375817a3896041aff5b1c5247f003224f39d74fbc7a7717bb6c14b2ab855dd403ec2ec16288c5a68095065906547f185d5d98d26d55

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\25562172-340d-447a-8bdc-44e8f15d8324\index-dir\the-real-index

                                                                          Filesize

                                                                          72B

                                                                          MD5

                                                                          a1ed7947ca2a771f2773e1c0192f3a74

                                                                          SHA1

                                                                          50325e20a78e46a5944af4c514ffcc6544f5352e

                                                                          SHA256

                                                                          d0f61a6bb806e0f8580228a2368b60c6246f857409ffee01353a9423adac9569

                                                                          SHA512

                                                                          50eaee244aef13707cbfe1133f52759818da0a588fa7bda71dd2150056f2c1bc3d6c5813cfa53281a4d868d9cb70884a171445e84ae2745a72ef232e452f69a0

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\25562172-340d-447a-8bdc-44e8f15d8324\index-dir\the-real-index

                                                                          Filesize

                                                                          72B

                                                                          MD5

                                                                          558b13184f10e5b62736e8af191a7017

                                                                          SHA1

                                                                          9a5ce4137cb8bca2d969b43e5bc3e4a93316ed2f

                                                                          SHA256

                                                                          79d43183ebf84fe9a611dfb4158d1272b3f3547e0759cc76e2a10ae69b4dd279

                                                                          SHA512

                                                                          699df35631248622f8744569dd71357182ea29c71006854a89b46cbbe13ad04cfa400a0c67051614f166f1a178287b04f91bf001bfe354bb44687bfa31bd7f94

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\25562172-340d-447a-8bdc-44e8f15d8324\index-dir\the-real-index~RFe5d642b.TMP

                                                                          Filesize

                                                                          48B

                                                                          MD5

                                                                          25ff53ca84a25ae3024c8973e48a5d82

                                                                          SHA1

                                                                          affd2beb35c07ef9390528a52182a5c3b54fd733

                                                                          SHA256

                                                                          ee7018b45674360579991f4aadf5cb785b722cc31b960f3ff8adaa6454beb621

                                                                          SHA512

                                                                          ead100222e36aae6d1ffca38f4561a570dcc086d3c586590d80ba84ee40c3e945319acedeb67735f12b34eb0e29051acb2952ef13cbe09a2d27f63fcdeb0fe87

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\6e31f932-3f3f-4b12-a65b-2abd975182e7\index-dir\the-real-index

                                                                          Filesize

                                                                          3KB

                                                                          MD5

                                                                          60b32f210cb56021e0dbbbb87e045831

                                                                          SHA1

                                                                          82047578059654ff1f44d2ef9e6b5242cb7dab2a

                                                                          SHA256

                                                                          65d5ef95904c728ed5ef357617af788277316e085a5ff94fc5bee69996098bfb

                                                                          SHA512

                                                                          a02234f258e2a123056661ff6e1f2af837d0c4324e2303152de61c66546e851a73b101009daff3c6f5ec81eef3f88ee42d10509e272b066ebf16fe11cb46f394

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\6e31f932-3f3f-4b12-a65b-2abd975182e7\index-dir\the-real-index~RFe5e6ed5.TMP

                                                                          Filesize

                                                                          48B

                                                                          MD5

                                                                          a754827d6a0f513164d1157e679b6093

                                                                          SHA1

                                                                          bb9211655817e32d6f02355d0627f2535bc6cf5a

                                                                          SHA256

                                                                          f032ca152a7ad1db747cb5048a1aafc59cd013b967cc3cc4c199bb8a0bae39da

                                                                          SHA512

                                                                          db35783969dbea503f7b907f5709c45a58a92bc067965f635b097e068a7b7f787e18dc2aead7973a4cbfea1759a8ef7447f95d8e2849472848b1be6df29242ea

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\index.txt

                                                                          Filesize

                                                                          86B

                                                                          MD5

                                                                          21e2da0450b1364c7847632f3a30100c

                                                                          SHA1

                                                                          534c937795b1eb088c81976ac097013ae04276b8

                                                                          SHA256

                                                                          b93e03c9b2742a162ad3aab08e54e0f6fc7b4501e8fceec2cc4802caab5e74ee

                                                                          SHA512

                                                                          787d722b801651081e52a4100c836e57316f49890cd42bb7de3bb24c54f940bd9e6dc33340e591d9589383052300c64129e26b056ec4b15481147d8c5b411d31

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\index.txt

                                                                          Filesize

                                                                          176B

                                                                          MD5

                                                                          e919a08fa4a23b5cc365a917ba6d73b1

                                                                          SHA1

                                                                          db1572a6413b0fc39185254d68073470b7063b67

                                                                          SHA256

                                                                          91773c34424914054d0dde2e9e1641f60290b6aa3e6c851ec35101f356e0ff83

                                                                          SHA512

                                                                          b9e9bfaf17211c00718ea48712343744b0180ba75c66ea1558dab52862ecf96fed389ca484c7ce72f6324f133491853070d041350670123b5608b32a64806b71

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\index.txt

                                                                          Filesize

                                                                          236B

                                                                          MD5

                                                                          095c27260c4f920ebbae6c1a8f5213dd

                                                                          SHA1

                                                                          8e51594e628c067f937ce37f3be7f70d6d449bcd

                                                                          SHA256

                                                                          655b9a4b60b4155a0f5bb06d766fd5111d073cdba1364a54e3e4b186f5021cdd

                                                                          SHA512

                                                                          11106476a0058b75cc358fe7fbf4d9f5ffc55a84601d2bbac1a79fe451daa3e838e403c4cfc790da597d187ea7301274998a61be32f51a22d9c730a91c9531a9

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\index.txt

                                                                          Filesize

                                                                          229B

                                                                          MD5

                                                                          c73466fd8e28db549b880e87bac44af5

                                                                          SHA1

                                                                          cf31af32a28c957fb86721a0436f04ec3dcf06f7

                                                                          SHA256

                                                                          04e67c24ed593403d15ad14cb408ed83ff318a6758e742aa9bb17da0031305d1

                                                                          SHA512

                                                                          daecc50373278544dd3192ce15ecf7aecf62e4e3c72f3894173cecb60526362e9d6c397f30cd8c81bbf1eb54ae4d18a39335c39ea0683c3440ff9b1b7d3c727c

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                          Filesize

                                                                          120B

                                                                          MD5

                                                                          546fe8eda83821dcfeaed156a4768e57

                                                                          SHA1

                                                                          49d86a186254735accb5ca28645e3212fe27835c

                                                                          SHA256

                                                                          49adf2c2e790f394b555d5e1da2ff438f284261f7263380ce38fba2156256509

                                                                          SHA512

                                                                          5de36d3a4072d4866271da741b033e5baa714d4eed6a1166311cf6e63ade0244452ecb92937bd30129bed12f6049e36cbbff7ca841f1b555f77425b020faee79

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5d7552.TMP

                                                                          Filesize

                                                                          48B

                                                                          MD5

                                                                          54cbbd482cc55aa2a7b4da1b4d6f7216

                                                                          SHA1

                                                                          ca098fcd4c99e228aee8e4b6d754b80be4a9686c

                                                                          SHA256

                                                                          4c5890291c89d673e99ca81ba849c50eec6357300486edbbaa39b784cd155807

                                                                          SHA512

                                                                          40187989c2ba556c8bbdc5e1d9061f39c93cac715b520f9460a79cac0887c38cb5c51371eb97ff0359be17cc263958b8dc4d260c38477a86a0769df35f342151

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                          Filesize

                                                                          1KB

                                                                          MD5

                                                                          04112cd2c6747755e590c2d330e1ba7d

                                                                          SHA1

                                                                          e520ca3de4d201770f8084bf2d80497a961f5a93

                                                                          SHA256

                                                                          5f2e59479ee4cf541ca1fa9bd66f278c61b6079a4a7e37595f3d350491c80a6a

                                                                          SHA512

                                                                          69f6e1074a1836f9b1a19311b72711dadcff86fa56f7d4c922a0740017b694a6b600f27b00a47a068778cf6b7cbd8765dfc0c7cba31db59adab8f3350b3233e5

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                          Filesize

                                                                          1KB

                                                                          MD5

                                                                          34f119257c76bbdf300524d68e9f02ae

                                                                          SHA1

                                                                          ac854c4e8fe2f7250d1ad3ed0ade5a2ec21cf4b0

                                                                          SHA256

                                                                          f9f8f12236ea22975e822b5072c75435231c5119be5c8d3b560f59bdc943ba3b

                                                                          SHA512

                                                                          09dec56abe515d2fcfbf90af81f4c57a6f96dcad2b6f10cfa56795ca9ad788e7e661a326f0343d8ab8dad35f9b7231d693dcf46fb175baed4438f9702fde703d

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5dd256.TMP

                                                                          Filesize

                                                                          370B

                                                                          MD5

                                                                          6418cd3d97aeaa1fb9781c08da117c7b

                                                                          SHA1

                                                                          c97e022a8e5b67a520e91db07d8070be7d0bf889

                                                                          SHA256

                                                                          f4acc7ae7dd9bfed26e15f0909ac74adc7d50a090ad3871126e3984e1910fc4e

                                                                          SHA512

                                                                          8e866d2dbf920e6b7954b1dc824b900abfe231b81cd8084ebbf56d5c616fa57774c019d8492bd37acd1b5aa02208e9e0d2ee95f2ac06bab8e3ad6fb06db77062

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                          Filesize

                                                                          16B

                                                                          MD5

                                                                          6752a1d65b201c13b62ea44016eb221f

                                                                          SHA1

                                                                          58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                          SHA256

                                                                          0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                          SHA512

                                                                          9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                          Filesize

                                                                          12KB

                                                                          MD5

                                                                          a41d5819aeadb60b9188c2c34c50addd

                                                                          SHA1

                                                                          123bdde7f50ebeeceb047b86974f7d836f145636

                                                                          SHA256

                                                                          b35a910caf9bd1ea00940654ea331aa929c0ef07b85c817a3cca6a04482b1cf2

                                                                          SHA512

                                                                          139410d8ed785d3963822c64604eeac63427b3efd26ca5fb284defddedb698d778f20829f29f2b34436b93edad62a4434721574d4f0b4ab882d11f76db71a297

                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                          Filesize

                                                                          11KB

                                                                          MD5

                                                                          27810a8e77c88f3fbbbc8d64337d6dde

                                                                          SHA1

                                                                          a129672e306ae66408ebd5e0a36edef4132fdba4

                                                                          SHA256

                                                                          b66f45dc06e59f730c8819d06df899c837828fa161059efd2d69c1fd89b70b01

                                                                          SHA512

                                                                          784d8b40995937cf2f4bce06e4964df29837ca6b16e53c2d85f3b02182029dd1ce00b7c33c1dfdd00199277b691c6078be0c7f6953e83786351b23f6d4c7b10c

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe

                                                                          Filesize

                                                                          5.3MB

                                                                          MD5

                                                                          1ad8cf0a942ab94cbb2046853f8fced5

                                                                          SHA1

                                                                          32b576d2aa8ad46f8ffba98e0ad14f125d8af8b1

                                                                          SHA256

                                                                          ca4e927d137083bbfc9a029b466e7b3f7f3481a602a3c2ee1fee68b17626eaf7

                                                                          SHA512

                                                                          99c8d4ebf2d205f0dd6251591de10b919a569b029261962669d116d7e24b600aad8a6cddd0e50510d028da91cb301e17dc2fe5c4e06be49a1385858c6ff163f7

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_2

                                                                          Filesize

                                                                          8KB

                                                                          MD5

                                                                          0962291d6d367570bee5454721c17e11

                                                                          SHA1

                                                                          59d10a893ef321a706a9255176761366115bedcb

                                                                          SHA256

                                                                          ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                                                                          SHA512

                                                                          f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe.WebView2\EBWebView\Default\Extension State\CURRENT

                                                                          Filesize

                                                                          16B

                                                                          MD5

                                                                          46295cac801e5d4857d09837238a6394

                                                                          SHA1

                                                                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                          SHA256

                                                                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                          SHA512

                                                                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe.WebView2\EBWebView\Default\Extension State\MANIFEST-000001

                                                                          Filesize

                                                                          41B

                                                                          MD5

                                                                          5af87dfd673ba2115e2fcf5cfdb727ab

                                                                          SHA1

                                                                          d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                          SHA256

                                                                          f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                          SHA512

                                                                          de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe.WebView2\EBWebView\Default\GPUCache\data_0

                                                                          Filesize

                                                                          8KB

                                                                          MD5

                                                                          cf89d16bb9107c631daabf0c0ee58efb

                                                                          SHA1

                                                                          3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                                                          SHA256

                                                                          d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                                                          SHA512

                                                                          8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe.WebView2\EBWebView\Default\GPUCache\data_1

                                                                          Filesize

                                                                          264KB

                                                                          MD5

                                                                          74b699a190474c5868ef60c46a514d9c

                                                                          SHA1

                                                                          82c01effd77bd4a70e7abc0d375ced4af1ca6f42

                                                                          SHA256

                                                                          ad74d3eac39efc3258edb0407b8ca4bd3eb9220242511f36ab32f64a9ce4a54b

                                                                          SHA512

                                                                          17af809ae6c0f0c0472dce2cbe990209a567b7c0aec847d07fb4d6921f2c1646573657feb94d5405e94ea7b78ed6835ea960b44742b58c458c95dbee612edc9f

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe.WebView2\EBWebView\Default\GPUCache\data_3

                                                                          Filesize

                                                                          8KB

                                                                          MD5

                                                                          41876349cb12d6db992f1309f22df3f0

                                                                          SHA1

                                                                          5cf26b3420fc0302cd0a71e8d029739b8765be27

                                                                          SHA256

                                                                          e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                                                                          SHA512

                                                                          e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe.WebView2\EBWebView\Default\Shared Dictionary\cache\index

                                                                          Filesize

                                                                          24B

                                                                          MD5

                                                                          54cb446f628b2ea4a5bce5769910512e

                                                                          SHA1

                                                                          c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                                                                          SHA256

                                                                          fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                                                                          SHA512

                                                                          8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\MantiWPF.exe.config

                                                                          Filesize

                                                                          563B

                                                                          MD5

                                                                          467c9988e896a5596d1c64968cdcff73

                                                                          SHA1

                                                                          cb35ca253aba7ed4c89d194e8e8be1c5acc79083

                                                                          SHA256

                                                                          dd2a10593cccb1d99df5d76e63cd5081ba7e3387aed34ded0ef9588aacd4d3a1

                                                                          SHA512

                                                                          1b647af7f01fefc1d4d53f8057fc277e90eea5782472a8e3b809bfbb56a69504570f21874ea1370bd6423083e1f49e869db2c7d39a35b3f176ed81c738e6f43d

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\Newtonsoft.Json.dll

                                                                          Filesize

                                                                          695KB

                                                                          MD5

                                                                          195ffb7167db3219b217c4fd439eedd6

                                                                          SHA1

                                                                          1e76e6099570ede620b76ed47cf8d03a936d49f8

                                                                          SHA256

                                                                          e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

                                                                          SHA512

                                                                          56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\bin\Editor\package\esm\vs\base\browser\ui\iconLabel\iconHoverDelegate.js

                                                                          Filesize

                                                                          368B

                                                                          MD5

                                                                          dff5cd240217dc0e722c27be242db91d

                                                                          SHA1

                                                                          244d1e7b3a10bb26e52ad9019e0e20f8bb3a72aa

                                                                          SHA256

                                                                          151caa77914089aa02273bb851f4b9a198eaab38da7eb9e4bdd7af8075c2dc57

                                                                          SHA512

                                                                          e6033e28f65f29ec3a7fc2e367bb6dd2909e38e5e5ccd267fe920e82c25de00c3cf5593db022dc1664ec00652882d5093121f2686788ee3eb60d0b2d87fef6d5

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\bin\Editor\package\esm\vs\language\json\_deps\vscode-languageserver-textdocument\lib\esm\main.js

                                                                          Filesize

                                                                          10KB

                                                                          MD5

                                                                          722df93c13e5a9e4b3a42c515d6281e3

                                                                          SHA1

                                                                          e046b8875a0373f38e8135f6500bc9deb9b1cc34

                                                                          SHA256

                                                                          bb9e7de4f27538b132cd593302a62f8a42f433e1b0e04a1edb4472a97d6ddf46

                                                                          SHA512

                                                                          6e1db81e7286e7762cce5c281c1ddab227ab374c5c33ff45a5031275592a84fd47547b6ad496f302bbca0bbdc01ed899ff8ed87f22bb8b88973a257e345b70ac

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\bin\Editor\package\esm\vs\language\json\_deps\vscode-languageserver-types\main.js

                                                                          Filesize

                                                                          66KB

                                                                          MD5

                                                                          f80215fcc9a89ba7be3bc0b32cacb094

                                                                          SHA1

                                                                          8449846cc76fc770a31e310882454f5d6beae342

                                                                          SHA256

                                                                          1adcb7cc0756472bc16ace850f3f5b6d5746ea4af2d75ad0785b967dd07bf9f1

                                                                          SHA512

                                                                          7187397ff691dfe558c00a8393d4d3d86b7ab8fdbed8b40ecd43c8ba3af40f8ceab0f78d001cc892ea0d5b5a36be4a559715a4385b39a6db1ce473b2883513b0

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\bin\Editor\package\esm\vs\language\json\_deps\vscode-uri\index.js

                                                                          Filesize

                                                                          11KB

                                                                          MD5

                                                                          db7069b3b398babf3a2a97e7f7c3aa65

                                                                          SHA1

                                                                          2208bc3bb4548247d672cbd3368dbb992ce6d312

                                                                          SHA256

                                                                          15fce1bc78e59f11f36c62e31b6db98d10cf5810fcb8fceeecf9cbdd2ac9742d

                                                                          SHA512

                                                                          326716687bed34d862a71df1c7259988de21ef78af8829d2253f099988818200477df7e13f97fa78671d426a856feaa651d1c8350f7edac5d59ec9bc13f354d3

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\bin\Editor\package\esm\vs\language\json\fillers\monaco-editor-core.d.ts

                                                                          Filesize

                                                                          37B

                                                                          MD5

                                                                          604924c7fd140e65f677cff5c06ea77e

                                                                          SHA1

                                                                          60adb20bf4cac895df6b31a4da98a4d2267ca3e6

                                                                          SHA256

                                                                          87b3728d7af0f6c25f9cdbedfbc093f5e46a24371910199a638a1a13e3444668

                                                                          SHA512

                                                                          34affd619893b93ebfeb0d19daf6c4768b0e3de7d4d8272058cd41608ef9a1f5ceb5951b0b8a7732dd4e3e020d51bda9c9509eed4a3a5705d3a1ad396d610af1

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\bin\Editor\package\esm\vs\language\json\fillers\monaco-editor-core.js

                                                                          Filesize

                                                                          404B

                                                                          MD5

                                                                          40fc593844c4ee88ff8e87481824dda0

                                                                          SHA1

                                                                          c2d8bed92d90e685576812d7c62ac2db28af2185

                                                                          SHA256

                                                                          a27649c652a7abcefe0b54567eb64f1cdf9be521bab22cfb71718e816b160375

                                                                          SHA512

                                                                          0457cf90d188e803401555e57a24647e592830ddad9e9e73d64a89889ec6b40eb15d2330ba507c6bad2faceb6c14bb643b4557db1e68896354aa6a19a99ae357

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\bin\Editor\package\esm\vs\language\json\fillers\vscode-nls.js

                                                                          Filesize

                                                                          1KB

                                                                          MD5

                                                                          1e2ca4b54776b992ed920a66940bca7a

                                                                          SHA1

                                                                          86ed5c8360d31c4763c05184fa4e7cc46cfa9354

                                                                          SHA256

                                                                          539191b86cffb8607fc04d0369756281f63bcb884cbe6ea729a668edf4018059

                                                                          SHA512

                                                                          fb249812b6587078d8a715d4c684af62db0ed05f6d80afb3374fe1f1e0a0a11b2c2551fcb738f3383b88152f95ca889c7c81543da7575d8d8b161d5c9ffea07b

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\bin\Editor\package\esm\vs\platform\telemetry\common\gdprTypings.js

                                                                          Filesize

                                                                          12B

                                                                          MD5

                                                                          5c7f99e3d4eaae821996a487acc6a5e2

                                                                          SHA1

                                                                          9ff99e6a0a31241fe503c3c76a340bedfe2902b7

                                                                          SHA256

                                                                          f761c91419d0a89422a0004ef1a92929dd4d2d5e5c16758654d8b0467d1998c6

                                                                          SHA512

                                                                          9247b46a096ad45b486e4b83bb880a7d4e0da7731e3e64b8ba41513a0632932d3bfcf132b2d20e81e363c2595aa9a38d486111dc6365c0f014c1af25ec0be839

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\bin\Editor\package\min\vs\base\browser\ui\codicons\codicon\codicon.ttf

                                                                          Filesize

                                                                          63KB

                                                                          MD5

                                                                          b13daaad214ef227a36fefd95d924380

                                                                          SHA1

                                                                          95791fc8733a4bae907859b1a46bd1115f90c983

                                                                          SHA256

                                                                          774c4acc42f27289850537e2b6e9b85f67fde54145f6f41876dc4f65b45a4a20

                                                                          SHA512

                                                                          ad05613494a490e01504a30e34d7fb5bc2e535d70b5e5d5154a81ad1acaa51c0e368a6fae6aaa0a42faaae63f7e751a98748a7c291056100b7ad687ff6ae687d

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\workspace\.tests\isfile.txt

                                                                          Filesize

                                                                          7B

                                                                          MD5

                                                                          260ca9dd8a4577fc00b7bd5810298076

                                                                          SHA1

                                                                          53a5687cb26dc41f2ab4033e97e13adefd3740d6

                                                                          SHA256

                                                                          aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27

                                                                          SHA512

                                                                          51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

                                                                        • C:\Users\Admin\Desktop\MantiWPFRelease-main\MantiWPF\workspace\vape\Profiles\17750024818.vapeprofiles.txt

                                                                          Filesize

                                                                          42B

                                                                          MD5

                                                                          69ce77d65ab84356bd699a26ec0366b8

                                                                          SHA1

                                                                          9156be62bda054fc64c535e5f1fe8d8d1cc24828

                                                                          SHA256

                                                                          37b2cea7a7f8f45a5dcbacb1caf81e57cc6451790f1025d13e084e586429036b

                                                                          SHA512

                                                                          cdb422d1d3adae079146c2e874029cc865c4c08ce87a90bcabeda64397636798dbdcd6b85af5d26ad2b977bb0b9dc47ed651d663f48f9cae96d252feb21995ae

                                                                        • C:\Users\Admin\Downloads\MantiWPFRelease-main.zip

                                                                          Filesize

                                                                          28.4MB

                                                                          MD5

                                                                          3a6872fa6a0ce0039f3209ac98abf9c4

                                                                          SHA1

                                                                          db4739624bbb7a0e3023b6d34e068c6f04153a94

                                                                          SHA256

                                                                          a17baa515e2de536458fb12c7fdec2fdb47f641e7b87368ecfbf32333dd2cad2

                                                                          SHA512

                                                                          3d7adad9e377c496cb4a3ddeb3745f87b726a608ead16287807b17b74bd1a444bc9271c0cda4aaf8b0718d55631191fbb9cfe1c6f2ad320619ef8c232b952d74

                                                                        • memory/2788-3796-0x0000017B713B0000-0x0000017B71DA2000-memory.dmp

                                                                          Filesize

                                                                          9.9MB

                                                                        • memory/2788-3799-0x0000017B75DB0000-0x0000017B75DBE000-memory.dmp

                                                                          Filesize

                                                                          56KB

                                                                        • memory/2788-3797-0x0000017B589C0000-0x0000017B58A12000-memory.dmp

                                                                          Filesize

                                                                          328KB

                                                                        • memory/2788-3810-0x0000017B76EA0000-0x0000017B76F52000-memory.dmp

                                                                          Filesize

                                                                          712KB

                                                                        • memory/2788-3811-0x0000017B76D50000-0x0000017B76D72000-memory.dmp

                                                                          Filesize

                                                                          136KB

                                                                        • memory/2788-3795-0x0000017B567F0000-0x0000017B56D4E000-memory.dmp

                                                                          Filesize

                                                                          5.4MB

                                                                        • memory/2788-3798-0x0000017B75DE0000-0x0000017B75E18000-memory.dmp

                                                                          Filesize

                                                                          224KB