bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa

Analysis

max time kernel
273s
max time network
351s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
12-11-2024 19:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

42.zip
Size

41KB
MD5

1df9a18b18332f153918030b7b516615
SHA1

6c42c62696616b72bbfc88a4be4ead57aa7bc503
SHA256

bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
SHA512

6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
SSDEEP

768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2896	chrome.exe
2896	chrome.exe
1604	chrome.exe
1604	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	2312	7zFM.exe
Token: 35	2312	7zFM.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe
Token: SeShutdownPrivilege	2896	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2312	7zFM.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
2896	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe
1604	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2896 wrote to memory of 2864	2896	chrome.exe	31
PID 2896 wrote to memory of 2864	2896	chrome.exe	31
PID 2896 wrote to memory of 2864	2896	chrome.exe	31
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 1908	2896	chrome.exe	33
PID 2896 wrote to memory of 2016	2896	chrome.exe	34
PID 2896 wrote to memory of 2016	2896	chrome.exe	34
PID 2896 wrote to memory of 2016	2896	chrome.exe	34
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35
PID 2896 wrote to memory of 576	2896	chrome.exe	35

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\42.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2312

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6d69758,0x7fef6d69768,0x7fef6d69778
  2⤵
  PID:2864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1120 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:2
  2⤵
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1500 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:8
  2⤵
  PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1572 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:8
  2⤵
  PID:576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2244 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:1
  2⤵
  PID:664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2248 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1296 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:2
  2⤵
  PID:1480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1384 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3472 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3572 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3668 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3728 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:1
  2⤵
  PID:568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=1284,i,5854756168965642539,3794234884853020017,131072 /prefetch:8
  2⤵
  PID:2952

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2696

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6d69758,0x7fef6d69768,0x7fef6d69778
  2⤵
  PID:2448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1196 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:2
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1420 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1620 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=1616 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2304 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1588 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:2
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1284 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3496 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:2456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3616 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3500 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=2664 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2640 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:1124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2792 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=2544 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3800 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3948 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4048 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=3940 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=3876 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=3732 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=3796 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=3860 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=576 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=2304 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=3828 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=2600 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=1156 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=2304 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=2964 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=3468 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3056 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4032 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:2876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1796 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:8
  2⤵
  PID:752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=2028 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=3500 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=3984 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=584 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=4084 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=3740 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=3012 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=3040 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=4084 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=1792 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=4024 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=828 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=3824 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=2592 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=4260 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=4036 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=2536 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=1476 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=4084 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=4076 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=3032 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=4020 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=2392 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=4148 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=4080 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=3892 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=2964 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=2352 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=1284 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=4024 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=3796 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=2796 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=3844 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=4252 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=2616 --field-trial-handle=1424,i,7446770094819991454,5862588814358224229,131072 /prefetch:1
  2⤵
  PID:2508

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:860

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
PID:3068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6d69758,0x7fef6d69768,0x7fef6d69778
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1180 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:2
  2⤵
  PID:1524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1520 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:8
  2⤵
  PID:1672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1628 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2124 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2132 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1416 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:2
  2⤵
  PID:972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=2620 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:2
  2⤵
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=2648 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3452 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:8
  2⤵
  PID:1860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1212 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:8
  2⤵
  PID:772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3864 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3584 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3568 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3976 --field-trial-handle=1244,i,13451502247075485048,14270415954529300428,131072 /prefetch:1
  2⤵
  PID:2492

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1652

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\52dc93e1-0d87-4a3d-869e-df4e79974858.tmp

Filesize
180KB

MD5
717dcc1468cd580ca0f4347fcd8510e5

SHA1
03fcf8944e4b22c344865b86575db5a938560cd7

SHA256
3c13c2d08017f07023b3745a152db8593bc652b1d52fef1e9a2ebc5dc84284cb

SHA512
c1a275e64088a494b58978903066b081f4df2a35f81da57dbdf17bd84a1f6966c5a13c18039674bc3a5e705e73e1d84bf3799b0da4cc913ebc9b0ac46acae1e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\78f6f618-fcd1-4986-950d-883c5ccd2726.tmp

Filesize
180KB

MD5
85416dab0ba0c898b6fdcf4486b29e4c

SHA1
12fe7e50707087987915d03bf59779d094b113cf

SHA256
5ff74d127bd5232c4ebe5dc670ef2b7aa9050d426a3a92a8fda118e4b0d08ca0

SHA512
ed6b132e1459ba72aa484d32f807716d29c19dee73b25253910af4e5ff2f490f346204537db05e6ce2fd65e92aa97db0378a70e218eb7c826de292b63c212afa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
a5ff7b8d3f9da95f3edc95416ad0ee3a

SHA1
a1d3fb57133e5369e14db282af76e1c6593cc9b2

SHA256
7237c8d0f62cf771e73c5e6099e0ff332f3bd57474348b304390afb190f9fcfd

SHA512
d0ac399fbcf673e3045e62b5bdeee954cf08fe562f2aba8c718980b504e00af2cb3c14ee28c719fc46058cb9ede922f373f2d53e585e29c4d7e1d2eecea2898e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2097516f-ad7d-49cd-bb03-2ab23aec4929.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0

Filesize
44KB

MD5
e54a3fdd8acb502731ccdd3f3912adc1

SHA1
6befe6b8183a3c097680bca7cf01393c8547f64e

SHA256
827473488f908751d7fdcdc7a1cc54409b7f634bc1064b161a4e1a6f48f94ada

SHA512
38c4d52a780654919f852b6149ba32ea0c7bf3d1c001f7274f602733828b8ac0a79e2f7ae6ca8720088686ddca813048916a6e446ca2f8c223f98c897f98ab77

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1

Filesize
264KB

MD5
1423886ddfcc7fa64ff0c81ea3d859c3

SHA1
4bba0979b2807229e11ce6920f00dad550f4c157

SHA256
cc3ad15eca4ec94c0a84f2d9c27ead2f2a5a3849588659a9a5a5386d89022505

SHA512
942891fe1d7bd47f6cc15b76d31ef51204bc2aee99baffe6786d4b5e1d1a1b054424ab791130e8f38a21b979454a840acd36848b7937697a1ec09ca5a6c85a31

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

Filesize
72KB

MD5
1b362c31b9e319d18ae82fe892f59fc3

SHA1
e39500570cef0da96655ee2a60ae643e8baf8269

SHA256
1e3c383d41ad8f067b3a30c7e2467c0a349f03cfd950313d758a7e140c8a6f40

SHA512
2a731b1bd85790f7b6d5d3491e3e7bd539f40fcdc54a8476abbf996bf7dbf2d392d32dfc4a2db24cab68294199b8e149e70d1ae8fc4481792f92a19cf42ac13c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

Filesize
107KB

MD5
750b4ea9c45ef6fd711e5d8eec659b50

SHA1
047b818d26170803507cdbe02a7af06434d8f3f6

SHA256
d62072e473e76f9261e438b39099116b3acf79abe532b0de747619027b3684d7

SHA512
d2c73b2d3862c93fb0f538646a5216eb73866015223e76c37349a85340ab89fa674518fd304a29822513190156f23ea01ef14825598e5637328093b4c57d3b21

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\320e3af996ba7f25_0

Filesize
3KB

MD5
8b376b250d6d1a797d9785033195dc60

SHA1
41ca484e23186863e795c3d0a07446d37f0669ce

SHA256
b3b1d2a7f524bd10a36a82b4ef285c2bbeb3ebdc7a620544f33bbf430ce3406c

SHA512
5a32694db9c7c8a979fb022eadd15d697a5346aba830df1163fe8cf4bde66f3662f4386a231923f531a7baece697ff3ca567b5768a2fdc08ba89762ecfb5f071

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\473f057537b2e167_0

Filesize
280B

MD5
3742a3d672a403ef8b8894fb3ba75242

SHA1
cb66f033e37acff004342728f56f5dee60e3d90e

SHA256
d4709111070fb5a18c6fb20f887216c066bdfaf8fc93cb18b13b8c404bb3fe74

SHA512
cef25540b2ea4de06a2a4760b4e55e592fe3187b1988b34cdd6ae33f30c1487d459b1ac13ef1b031fb64f96d02271a6b9665e650820f5c250bd294a2e0613022

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\63a92ec70dc275ce_0

Filesize
19KB

MD5
26b25566a8c92864081ae24fdd77f202

SHA1
2f80169b316090f1205a44578ea33d9692b8edeb

SHA256
23fe9fe6ac6d6eed6dde64fc0fe39775ef41cc5ee7f11b9f46bb79b91a477d54

SHA512
1a0c8ad2beb9bf31e58cabf2390621e4b8f27b06d44a2da9f2716db9a1bb217d2d616ef3112f6ca165fa9319492da1157b8bc617523bf90dd34f4b06037f7506

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\792c0f7f6457ec64_0

Filesize
319KB

MD5
b1ddab9a3b9bf028630da375d4dfe8b4

SHA1
248e287cef9feafc25f392ad8bea24a801ec408c

SHA256
de18c93f5d09cbb4933ba667c9043a2ba327fc7d036edc0d47d736aeffc4700e

SHA512
0ebef76120e05d9e5690a46ae17a9a53a93cfb8ac96bcf8242d0202a7c4f05832d2510de09aab239be407094528e729dc18a49a6a3748ac557cfed4a57e821de

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\87e724a6d305489e_0

Filesize
3KB

MD5
b9f9de107529f8a3dcb5e9d3cdc500ee

SHA1
343517a6b95e870b9d042c90ea072a404bab5af0

SHA256
0b630aa9dd824c18cd65bd96cecaa43f9a08f83832aeaa8a105a76a0ff024008

SHA512
dadb694ab166d022b7f3556519db4fe1f87e2aa72083942889cf346c032042119fa9180ca2576dce72277c9bc1597a0518113eda0028cddedcaac8cecb7d4f27

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8d90a57c1a054016_0

Filesize
1.5MB

MD5
d369064ad80f297e8d2bcd71e36f6ee9

SHA1
09dba0182fdd1d4ed735ebc9eff7ed9c01e4d396

SHA256
f6cee2313a0d748ff450ee3e69fb265a2d5fd02728176e68d54917f2a3d012b3

SHA512
8e65036710ede6655e9a6a0073fc28ca4341979d95b47383204afb024ceabb456dad12c3bb6879276282ee4a6b5ecd4b2dfb6488a3edd730e7720f701cd3f237

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bf300257231d2c6f_0

Filesize
255KB

MD5
9c8bae5c2536d7ad701b31a75a527ee9

SHA1
b2cdd75994a82097abce40dc57ef7fb7a889cf3e

SHA256
0eac55e8f9c04517f118a96281d2a16271e895e953b7d3cf43c29a1893b71af2

SHA512
ff91e9ed067f9e407562548317b3a16374afe0197b46e01d0edde326d724531ab46e2202bf175abc87faca9ed7db39cd6698bc9bdc90dd40ede4a8e3a7876169

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d46cf55fb9f9e5bc_0

Filesize
352B

MD5
295596958f706c8873afcd197d67196a

SHA1
ac3a528486042ce5aa586ad8b15ef5f1c857dc29

SHA256
c43ee097f1eba50664654d1abc7520805d26c96442a56fef97b5808d08d1036d

SHA512
1baa494d8601e1f1804a74f901dc9c6ee4750b57766b3cb0b69915f3926b5b25d4e034e08eaae7af32e048ee61f1f6ee6cd1569afdf56db0c8aa7cd623093f9c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\eed1dd93f9b84556_0

Filesize
1KB

MD5
b355a368b3036d7d5c17b642e0f57fbe

SHA1
bd3b2013701311eda91bf1d1e06dc34b7f014bc7

SHA256
e87d3d5edc2edf2466313a003ccb7337b2482014a4bc80375dc04bf9869134a5

SHA512
ac68e7d9a8a5d4daba3049e1d545ea937454317f95d1818387b302cf38d20990840ce576aa0474a76f091e781d76cc52fbc8ff2218a1eb029bda56b53c85209a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
720B

MD5
cf4f90403fac8bec723ef1c95a3e9c02

SHA1
2c433b996a0045453ccec500b4cde67dca19449f

SHA256
620224fe0620d06c4c5d0c7dc08edfc2ba5ecb5812063a1364aa986c4a73eb48

SHA512
4f9b659017252896c034bfffc878caad44e99b19138c7320f3bb24e2c02fa80ea04e5014a261f3b874d8316f3c97a636b1296365c0c0f912940c83fa55af288c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
00533838ac1b09ce0c36584e976d45ca

SHA1
a4944da7031afb63e41f2adc32e56bdb3ba9b11b

SHA256
0f3f30dff430aa177610d788551d968eeff778c018f3ae14d0d3ae80e89bb486

SHA512
751211892f7b7a0ed91872fdfabcef0f36286bed778ff515161d3697cb6376790061ca78c320fbf6fa4651b47f145567b98547d7b94a5e42665a5ec582cc6c2e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

Filesize
264KB

MD5
5fc5128e0768890453d04e83984d5ec3

SHA1
709556e9ac54c449e3b5fc5686684c12f77ec35e

SHA256
726dee3968a5c2afa4372343157f1681a0144c46de2d303c6518cda5f352ad1c

SHA512
df0080a4841d94e11bed51dc15d3eef3ced800bad44c2b6af5bb72e5719924066e1605c8aa211c1996c66a13e490c72ef297f49b63d03df89a641bc6b6fed2a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\000009.dbtmp

Filesize
16B

MD5
979c29c2917bed63ccf520ece1d18cda

SHA1
65cd81cdce0be04c74222b54d0881d3fdfe4736c

SHA256
b3524365a633ee6d1fa9953638d2867946c515218c497a5ec2dbef7dc44a7c53

SHA512
e38f694fd6ab9f678ae156528230d7a8bfb7b59a13b227f59f9c38ab5617db11ebb6be1276323a905d09c4066a3fe820cf58077ab48bf201f3c467a98516ee7a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG

Filesize
136B

MD5
9898648b0d35932666dfbea088a475c5

SHA1
7721942d852d5cae745acf487cbb189f1691d10d

SHA256
59e0f82d54818b2ca5573db448a7c9483a50b7c6604c15cd3eab4dfcc5b97c10

SHA512
9f2f540e2adb97f850a059a921ab23df6666bf673fe818cc234c7bb41f2916e75b73e4c06848d410d1a2246f675bae5ecb68681f3581925840e015145f9a5d6c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000007

Filesize
50B

MD5
1be22f40a06c4e7348f4e7eaf40634a9

SHA1
8205ec74cd32ef63b1cc274181a74b95eedf86df

SHA256
45a28788cde0d2a0232d19c391eae45777fe640790ac0674d6daa5672c444691

SHA512
b8f6f42d375e3ad8015d744fa2814994fa6e588b41cce0131fca48194dd40146b08169a8ce0da350525ff32a59a16edb503c72e0f07254955c82a0d38074856e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons

Filesize
20KB

MD5
16fb6e08d6b750fa3aad5db2c9a30e1f

SHA1
347b4efa0fd925a23a7a7af2b19fdcbf2eeaef95

SHA256
082c8dc91638bdf121f0a4abae61ab1f82dd0faee000d558f928a4ada7493325

SHA512
e34b9d9167766d2e920867d54511a3df1846e0632f9031981db231b8c35a6d1e310be2eb9774852494d1b03bb339699796086bcb1770883e146220a6aa174fdc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

Filesize
16B

MD5
aefd77f47fb84fae5ea194496b44c67a

SHA1
dcfbb6a5b8d05662c4858664f81693bb7f803b82

SHA256
4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

SHA512
b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000008.dbtmp

Filesize
16B

MD5
589c49f8a8e18ec6998a7a30b4958ebc

SHA1
cd4e0e2a5cb1fd5099ff88daf4f48bdba566332e

SHA256
26d067dbb5e448b16f93a1bb22a2541beb7134b1b3e39903346d10b96022b6b8

SHA512
e73566a037838d1f7db7e9b728eba07db08e079de471baca7c8f863c7af7beb36221e9ff77e0a898ce86d4ef4c36f83fb3af9c35e342061b7a5442ca3b9024d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

Filesize
148KB

MD5
5486af606759ab76549a23f40ba2d256

SHA1
dd88ece08015156fc8d0be360f5219cfa0f51ca0

SHA256
12b14cff1abe93d9518e05aa58915969ed6a20b1306d493b3c1296fdea5b5a14

SHA512
dd525aafeea21b414748992f635962ec522a804e7446d12a5853d77556ee3bf5cf5dd8086d312997d1a782574783719cfa20792130485e9f42c3c675155dd94b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT~RFf7aed0d.TMP

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000007.log

Filesize
17KB

MD5
f90bcadd989df899501b233169cd0b7f

SHA1
701cbe6b3b0125169a91b94882c180e3f2aa1e2c

SHA256
988cb4446fef696c32d34db551d71c5bd9f8dd8d0103bd2fd6c926259c571551

SHA512
f3c4b9456785f1f176db41a9add818f8c495d6f922b83ae69cc473243eb8aae6c5a6d04c75949b963f28eb66dc159f755478cf4794086a897a2dd627dcc9aecd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000011.dbtmp

Filesize
16B

MD5
6de46ed1e4e3a2ca9cf0c6d2c5bb98ca

SHA1
e45e85d3d91d58698f749c321a822bcccd2e5df7

SHA256
a197cc479c3bc03ef7b8d2b228f02a9bfc8c7cc6343719c5e26bebc0ca4ecf06

SHA512
710620a671c13935820ed0f3f78269f6975c05cf5f00542ebc855498ae9f12278da85feef14774206753771a4c876ae11946f341bb6c4d72ebcd99d7cff20dcd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG

Filesize
136B

MD5
a2a8e61bd0097737593c5a0f14bb55de

SHA1
922c1418d201a40414c7ef2e53a9bab30aef9a51

SHA256
0ef1a0696cf19e65faf438d26c75f5277a00b7cf2a3879c0edd7d684f47a158b

SHA512
5ae505c47560be2d0f11cc1f385828b7b43b2001674ab106cd738b6ab809e85c6a3849a13dc5011f73f2d92dc06547fbe28e3168016faa4d78b3234a1a58c646

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000006

Filesize
50B

MD5
78c55e45e9d1dc2e44283cf45c66728a

SHA1
88e234d9f7a513c4806845ce5c07e0016cf13352

SHA256
7b69a2bee12703825dc20e7d07292125180b86685d2d1b9fd097df76fc6791ec

SHA512
f2ad4594024871286b98a94223b8e7155c7934ef4ebb55f25a4a485a059f75b572d21bc96e9b48ed394be8a41fe0208f7bfb6e28a79d75640c5b684f0c848fe3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
f900b32a790c06463bf2f2db06970063

SHA1
4b32fa74b29a11911119ed5cbafa6adc023df21c

SHA256
a981e1a4e0407fd40eeff50a3e3e31be5e0bb37c1e45d36bfa49d09ce7042fe0

SHA512
774f937cce2c2b5e5729eb89deafc570f6536a38a8f242f4e1c5bc2041dd3c71dcb6b5f6575a34d318c3e3a013c714415556199fae6088bdb1b6bc72c0f73217

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
361B

MD5
995612a4acc284cd26ecc0d36d72d33d

SHA1
55b6bce16490a2ec746a65a8874c8a1f38f5182d

SHA256
0d39a6b670a21f09f9af19186e4929e3f837369811658bd3ec998308438e38d8

SHA512
26f12cb3d35078337814837686aef2fa132ce240e8396e77a365cd101adbc5eefdf0d7213a4f1a78d0bab1c77e9fc1447a9b44db58ecf8c8a238f5d2574a1e8c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
361B

MD5
179d4e6adbcf8c45b33212455f17dea1

SHA1
285606e5eae9424635e94f79faad9b671c02dcf9

SHA256
583c8cdf593710d314d67d24091bbbe63f4008b8d384124192447191439f56e2

SHA512
9029658a0cd8f39161634fdcc4b4dbe7ba9c29227f0c1276e0134e65a4172f69405ab1d609855273e0428ba04e02b1568a6c687dddc03668f4d346890160a3e1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
361B

MD5
878394912d049154acc161b3100f4dbd

SHA1
3178c5d2d6cf64580ba80b11b75ef5726d1d4644

SHA256
05de693c61f74858d4a03dc235521447f729ba0eb5124748291811173f076474

SHA512
160e804f2e96bd28ecf00e6207c0200b4de79c901436562b61f80beb8285f0fbefda346bdd35f72c20385dcbf7287e236ee26932344477396a309970ab02533f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
525B

MD5
b50a41cdb8570ce9688b65bdec93d4c0

SHA1
8666d8849285c604e3d7925e28f03d42a52f8e98

SHA256
d3649d4474a7457f3d7b01f38ae7abfc7a41814e1a51ff0aa0c342c1cbf4b174

SHA512
fdf05c941d7d77eeb441bf99b7d4e3ffd40b8cf09b8b1f55e6507a088d1f0c08c078ec16dcbde18e9808d4cabd8de28282c102ba0fe2748c30b4f2c2bc62f113

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
361B

MD5
10ff3e4e36f44d87fd7b74ffc2e2895b

SHA1
c71ec4170e8524bd20a55d73f37411a66ae4ef58

SHA256
17279211ff44d9c49b45399ffea5cb85b2857d21e1fcdbfe92871d65f087c1aa

SHA512
e2cac7219bcfe34d573b967561ffa811de163ceffccb94ec1334ec69fc1a489563c89941a5a2578279e05a7d9174385ce33b3d719064af318af6eda948fb179f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
525B

MD5
aa341c6ddf31b75c878c1c2d0fa29d5e

SHA1
1256d4bfb2d32f475b21516f6196cc1461165d48

SHA256
b1a9c831747c6c85837e2b982f47ea544f3cf7401c6c32760b655161924f63dd

SHA512
4fe7377dbb72bdb90cb6b07cdc7b22875bad2601cdbd32a6f0a0f465b92d80a88f25b8c8010a66ba8d377777128efeed8464f2dfac0a923a0823e05db4a95be5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
088ff140f058321b5b27d7a40dccae21

SHA1
1684f2c61c32e3a14a92ca67f15c56e46075b812

SHA256
443d140ade48cfe89a5f662285d59a7e4a1474617a95367634604da6f186e047

SHA512
2bc8a72aab7636afd1bfbc3fbc4075fac4aac4bb6dab83c04d8856c43ad965ff2b77b192a88a953c3d1dd246307553948012003915288425cfe2d0aaf37da11b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
b2c5609f4edb47f3b0953e49c04ab4e0

SHA1
ce012e9c7373bacf4dfae879b0cfb8e9958323d2

SHA256
ad7992325a2b5ff1c5009f95026437a12c39344b8a7b90c8f142feec03012e89

SHA512
7cbac32975b7f01ef8d5d43419d258bdacedb4c6fc634193a556a6dfa2ea154958727931d3b4db8cdabadd2eb78b0eb18b9b31707047415326de89d530b9e482

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
f6e348d6bacebc74d8dd3ec70b386d84

SHA1
27cdecb907698a547b13dd78e9a3d802746a4b26

SHA256
6c9781868c3db7196baa8014fe1355f8933830570a9fd555b2fdb886df04d143

SHA512
1df0e50c1f63d52c3caa318411ccab744dd4b05af015af9922ab8780d831de0724fc6bc5831eb5c3f7d4dd99e10ac0af2a239fbbbdbef396c06d553e15340bfb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
f4fc55133f5b19460d7bebe914949948

SHA1
67b7774e7e702ee91c2a3ddc47365ce3cd3e7a09

SHA256
c64306b649b3674a6c3eca359b798ba1585ca0b1e68bc02ce6c02517ab28d5d1

SHA512
adacb7fcd169a655c40e0b6233e5fb78eaa1a665994f960aaa06e575b66eee9c6061c493c515b94e7a42d4a4936847583ec82318bcf96e2d708f5c4b2d1031cb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
d94e07d6c26255544b47edaa79ae5998

SHA1
0f451eedd88b4035f2a683b0407e413536c59af5

SHA256
86bf717bc81b3233824674a213d6f3a988d4a87510d7be32d02ec56fbf57630c

SHA512
36e3775c4afd9f92ba7828d26d411b315e7db23503100bd64c8d1ec1722bd425c9adb2838e604c49171a416ce30e61e97df41afc2f0a279d6c866f04b8e2846b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
3464ac300e0474ba6798793ab2f3afb5

SHA1
2b22f26497337c01b0d702d55e8509eed58ae0ea

SHA256
0e75c8084658e596c032fa6ed8c8c13bdc49d3405c42f105b4512b6602f3b261

SHA512
1733d6c62d8212a45701a2b180c6186d4de5949fdcb423b64d2b379e40b998ee583665820732457608c27ab71858bb924772ef652e9658f33e90fece4c6816e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
2eb178454b15e9b1d147f33e9993ccd1

SHA1
88f87f8ac5d3c63ca481c2e42dfb8440fdd9cc8e

SHA256
9c988aba48d884be933f39b77e7094ab9108bffbd656341c639fa307c30adb3d

SHA512
8d2a949e6185524393013a546a6f04f4c92de4ccdd17a05799b20039fddc1cd4e3f7c24b014b3dfab161b36c563b2ca5cd97dab125458a482674baedbda4eeda

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d3f0d33c5e35d6309b33b6ced20ac77f

SHA1
6062a23d0ef6db15ac53be8c5508ac7bdc7f0280

SHA256
7cab172e1f31ffe97211d52d6cdcbaa336c4c9ed8ddf12ef49b41c9706a54368

SHA512
1dadaa07af537f9ef75faa184ca1596383939d20dd5803f993edd4ef8b7fb8f7dccf0212125c7a4e1244dc8c59bf98e8291c96b9a70bb10c45f68a0807b6b5d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000009.log

Filesize
1KB

MD5
97dbe2fba7eea7596ad158386bf30263

SHA1
44f9217a727e52bdf31ca4cf6d6bbccf01308c96

SHA256
b76b1fe42e5f37f20168a2af2f18d6b4fedc7c4ef42395829415e193ff30629a

SHA512
7346212a8313d7cc6f0c63ff3f6dea3ef2bb260ca9bd2385a19a8a8a462dff5d9dfd3c1e1e701d30db0cd12055aae4902e3eb0a407c0f15f87c5a104e2fa747a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG

Filesize
247B

MD5
729b3c240a415656fe8c6dabe01f0e89

SHA1
46b3599968546b9a5ad542eb4e6e43bcf9c0125e

SHA256
ca0b15e713a0471e360438637051b5568e16cdb5ba69322590fa197b13eb70b2

SHA512
cee1546c6eb2c8415513922f61fdcf614a1e4890b0596fa5ed11bb815a638d976130a9b2698274e4062090881a6a3630f8c5c535b12426a355ae26a1f26554ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000007

Filesize
90B

MD5
b6d5d86412551e2d21c97af6f00d20c3

SHA1
543302ae0c758954e222399987bb5e364be89029

SHA256
e0b2fdc217d9c571a35f41c21ed2596309f3f00a7297a8d1ded05f54f0e68191

SHA512
5b56ae73a61add9e26f77d95c9b823f82a7fcdc75eed64b388fb4967f5c6c42cb0796b0b99dc25c89f38952786176c10d173dec7862a8a5ce5f820280f72d665

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13375913499151400

Filesize
3KB

MD5
a4bb33822910ecd845ced2267092b22e

SHA1
4de5a716a89bcfa0914f5e60715ab67b0b7fa1db

SHA256
c8e1b26f77cd07f5b587dfdb1b05ade778b4c298af8e43507d63dadafd0679ae

SHA512
6fb49e45e6b2e46af5032bc857e1b1790f3c5610d6230c889b3ac8c1b6f1eff3370e896836633b1a36c73f8b9ce7827034d9964051f887fce19a70ff43e260e6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000008.log

Filesize
72B

MD5
aae26286073680d2efdb12c0fd09ec25

SHA1
8269fa57b5a4ec8434f0ff7192ae37aeff740c4c

SHA256
703badf8361512cf10aa1580d61e17a3b8bc6f116cdcde6439b71f0b48637604

SHA512
8280e94017328bae8eeaa1733a25b560af12dc107c851d851a19c0397fe573f70dfbbdb3875864be1b76a3f76c67eb0acf605cddadbaa86ed6e6f140d5469062

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

Filesize
136B

MD5
9a9b15cbf3d8f6c5dd6f4d6b2d078892

SHA1
82d26059cd45ff8c756896955dbeb59379429140

SHA256
deb602adc5ccb186127602b2335ec682b74424d2f8aee637c3366e97a8110da5

SHA512
56177acbf8bf3e265acb83f503c338863410f150fb1a8711f8ae8ebeb63e0c8d71ad285afbf8d7d3506c889a1d079bac4521a47df6c4608d5bbacc181e87f5b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\MANIFEST-000007

Filesize
107B

MD5
22b937965712bdbc90f3c4e5cd2a8950

SHA1
25a5df32156e12134996410c5f7d9e59b1d6c155

SHA256
cad3bbec41899ea5205612fc1494fa7ba88847fb75437a2def22211a4003e2eb

SHA512
931427ad4609ab4ca12b2ee852d4965680f58602b00c182a2d340acf3163d888be6cfad87ca089f2b47929ddfa66be03ab13a6d24922397334d6997d4c8ede3b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000008.ldb

Filesize
1KB

MD5
11adda63486421b7272510c29b5eff3f

SHA1
ace4f2d1aedcd945e5cc75b5fd669efd4bb35778

SHA256
140da9b1707935b11412900464e7fe3b093d08e508a46ce0c44ad81fabf69c2d

SHA512
dad94f6bac7b2776781bd32955f8c143cdcf728cce1ac7138db414016fd4663054b0d71664152298d28e59f72ba8265546e217d56237f4210d1d52155456f1ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000009.log

Filesize
2KB

MD5
f63d23e1c54606f8c9e97072e48865cf

SHA1
5096c8e3f9499f37db4c0f8b3e26b827b59dd43f

SHA256
03d89393b8252e49a261f933d08859bfd9e12da76046d1f13af358119ecf8fe9

SHA512
4803a91dfe55264c80f581b72292a1a13966854245cd5d1c4897ac533d7df8a882aa38999bc9f5f6fd0394e55c5bdefe2805a2f1ee8d142c61e7352448106647

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG

Filesize
250B

MD5
9f3248e1f12211afa6aa2f838048304d

SHA1
88248f64f419bc5aeae7a7b4919c9bd5eeafc8be

SHA256
2d49318858546cfdf4d49670ca57bcc01ec5d43bb4bd8c409f54dc0b8f3c9539

SHA512
3ea4e6a2f1df5c76cf5b60f47842ca1354fd60f8ed40dd2377489fa6e6dee46f6cccc01443830311cbcb27d4b9f94b094d7fcd562c89177fc3bc5698daf54dc6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000007

Filesize
250B

MD5
03d881fc5a4ab4013bd1b30988abb179

SHA1
9ad861569715575d7b676e5683b14dd3cffec304

SHA256
5da7b30f55f920166ad821f532fb95bd11546bf63a228fc41357aa122fcaf5e8

SHA512
29ab8ac2c642a83086266f88ffde8d71c96cd0d98812fac526e0a0adc58d8bc7f99760ad19a71cc38c3ef5edb9ab9d642ef6b665bf4ce336260b0171411e26f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Visited Links

Filesize
128KB

MD5
f0615368761f99bdc6603cc2336485c3

SHA1
8e9de4c42bbd47d93bd286dceec567761177b001

SHA256
8092fda820be1006399d740561a30d348d86b00fba0d0ff14db263212acff402

SHA512
e62b44907939bceb6892e142e4bb7fd06ec0b4271d983db4360a5d0287c410605d8f19dfb5f0b3a6dc320196aef0607b0f70a5e704a7aa04972023ebf1f43f8b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data

Filesize
92KB

MD5
9f15506be6eb66a6f988ed007812b351

SHA1
1a6d35abc0506b3d29702f8da120dd89ae9b25d4

SHA256
5fbca42c456237d984bd21ce4d798ef667fbd9e8dab8895a0e26212b6bebb81f

SHA512
cfa974a5c3a496a0f41256e93ddfabaa869520e082a6ce109e446f4c653c6c60fb378a0936079c7d97f741f985cd9464c9ec8d25703dd1d9f5946297d6906634

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\bd53a12e-8650-4919-8457-52199b01c9f6.tmp

Filesize
7KB

MD5
66210e8c7d69d788f7b135b3efa810b2

SHA1
2666c2964d234c144ad690a70d53e5d4271a4b71

SHA256
31d376d8e2ae707fbb58d873f5b866fa778218a034689d42b4b414c9de2ab602

SHA512
96f40ded670afafa8f4056387eef48fdb7a43b1d6dce5a9962fc40ed439d939f42968c6a87699ab154d30e59786eb93a5b8b219f6a7e96a4d87d45c8f3806455

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000008.ldb

Filesize
485B

MD5
b2cfb42002b3a642de6e7d182fac84b6

SHA1
33a709391957221229181cdea0e088fdecdb8179

SHA256
406b8c30d59565e20790b314fa2c745a5cc935dc1b02c048a170549f09c1d28c

SHA512
d0205b5dc570948f85824fe7eafb834cea31111f6869afd70be0513cddbfe4e507dc70b6dd99900b0f6c902c84e9fa090f1235d8b520338fc667364545f7f564

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000009.log

Filesize
1KB

MD5
4d8890c5ac702b6ac23e45e78ec21b31

SHA1
cc03d96cefb3574d317e37b49b1525e9129d206c

SHA256
6c0475f8bf9f4575a02dd62aae21cfecc1770fc967cc2a14f2cd95479ad204b9

SHA512
3a3710ececfd382123f5f06f01d92ee1a1b271d977474913600cc6391b443e48c4fd930780c1b0a8f67b86c77ef0d59a924ebaf677fbc0bbec3e69f9f01c1df7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG

Filesize
249B

MD5
ebfd3707b90efea91692657b311ed63f

SHA1
0041100d8d8cec3a6aabf982abde998a26e49ca4

SHA256
49dba9dea761e1284dfde5385d054012a9ccfdd9dbcb692e0abfc6b08ebb457e

SHA512
aea813be87bcc0a5fe0791cb00d026b6abbc83d8090f07823d1c88196af078f598f7d66635f01d3b509764a662c4384d0713bec0330be1eb7d3402b773aef312

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\MANIFEST-000007

Filesize
98B

MD5
1c0c23649f958fa25b0407c289db12da

SHA1
5f6b10cd5a39fe8c30353bcf4cd4e4a60ef35574

SHA256
d5134b804a775cfb79c6166d15b5721d38ffc2da11948a6c1263595d6c2941cf

SHA512
b691e882018833a108bd286bc76c55a140d00d5a266617a3a381af1ceff01aefaef17acef29d14dec931d7051455726cde8974cd04cc07302f1c3cc452fe2f52

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000008.ldb

Filesize
318B

MD5
586c55d6c5091cfd9301d3f504681b7d

SHA1
7a2bf419c6e24f2abe5bd40e7783b91f521116c6

SHA256
7cd88ab1492fd550f9d70ba31b5f8846cd28ee24744a6c3d5139ed840d65e35f

SHA512
9c8bae9666650897962a2dce032179da7cbce31af7bf0cace5abd645bcc58ad1ef89ad6264b12a0b16cb836b4b39ade7f766fb364f014fe713f72bce14664102

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000009.log

Filesize
34B

MD5
fe62c64b5b3d092170445d5f5230524e

SHA1
0e27b930da78fce26933c18129430816827b66d3

SHA256
1e1a9ca70503efd8c607f9bc7131f08aba0476d75f2586dadb4da5485a5315d4

SHA512
924daccfbfb0c0464b4c5fd769e01a8f2e96fe28b635aa27ab4cd91766b05b03bbf941af14c017436107673f01bad815ce1fac2a649e745c76b3c736994b4fd2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000010.dbtmp

Filesize
16B

MD5
60e3f691077715586b918375dd23c6b0

SHA1
476d3eab15649c40c6aebfb6ac2366db50283d1b

SHA256
e91d13722e31f9b06c5df3582cad1ea5b73547ce3dc08b12ed461f095aad48ee

SHA512
d1c146d27bbf19362d6571e2865bb472ce4fe43dc535305615d92d6a2366f98533747a8a70a578d1f00199f716a61ce39fac5cab9dd67e9c044bc49e7343130e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000013.dbtmp

Filesize
16B

MD5
a6813b63372959d9440379e29a2b2575

SHA1
394c17d11669e9cb7e2071422a2fd0c80e4cab76

SHA256
e6325e36f681074fccd2b1371dbf6f4535a6630e5b95c9ddff92c48ec11ce312

SHA512
3215a0b16c833b46e6be40fe8e3156e91ec0a5f5d570a5133b65c857237826053bf5d011de1fcc4a13304d7d641bcba931178f8b79ee163f97eb0db08829e711

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG

Filesize
249B

MD5
bf40d0d01254b36c0c00e8f845f219be

SHA1
50280fc349188a63377ac12c7a9741e11f50ba0f

SHA256
60f9eba27f3dd4c42c4b643c0dddb6e51ffb49cd3e77334dace3d3cf8ce80f73

SHA512
b5f5fb2fdaf13ca12d68a4e6bbf7e79276be30fe3f02675615555c91f2cdf9ee2f9d6262aa88dff2c8703826a5ac593da5d5aa633864f94467d6201a91a590e7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\MANIFEST-000007

Filesize
118B

MD5
8501a6b05ffe14db6aa1e26956fc04c5

SHA1
78a8ff62b1cf51060093d5af8d594cada4982eca

SHA256
3bb8b23870f24f53cff6e3ff3f2da972f81e45e77cbc2ede1f371b2db25ee69f

SHA512
f863cec909ed029da966e96c4b4b8bfc3e9c51e0400409c1747937492c8d08f58a00949e9760ee7af443a223e2e02c3508b320c9d81c08365613f948cb40ff8a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

Filesize
14B

MD5
9eae63c7a967fc314dd311d9f46a45b7

SHA1
caba9c2c93acfe0b9ceb9ab19b992b0fc19c71cf

SHA256
4288925b0cf871c7458c22c46936efb0e903802feb991a0e1803be94ca6c251d

SHA512
bed924bff236bf5b6ce1df1db82e86c935e5830a20d9d24697efd82ca331e30604db8d04b0d692ec8541ec6deb2225bcc7d805b79f2db5726642198ecf6348b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
180KB

MD5
a9e62633669e54936772b0e8b81c051c

SHA1
35c2d01e9aa6cf7e88c5f3652dc3d0b06e448300

SHA256
3109975c4a48394cefeab91baead8748e4b467f62b64fc834200b853bc642fc0

SHA512
e200f05bc1ba9a1c9d1728f6d02bbb5e170b58c656ed4ecaeb9a077e996499dffdaded1adaf533b02201f77b459b11eb18ff614e120e9e49205a8b6793b4efdc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
180KB

MD5
430690c637f7d9f6a401b2c13ada4dd6

SHA1
c5a436d99e51e4c9abf4c19facdf87e81673c5e1

SHA256
f768aa306bb173cd495f8cb5c266fade5551d71d64e7eb306ac25b4c044e3e1f

SHA512
0a1b66756cfcec7a51bd7c1994dc9fa01528d9553fadc74125b2f4a6a9bde9deafa4d11fc019c2159ff31dd30dd25657b16b27ca07ff6bbf07c9704b45e9be72

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
345KB

MD5
12b01a69af6469ceae3e0fe598ca3953

SHA1
e3ce35830cf4a3237aaf3297cede8465e3f87f08

SHA256
4da6060a7cd26edd77e0c70bda8b758227cfbc574289a3d37d65896f38e9f020

SHA512
ad5b3b9f0abe32b4e0a362126e2c7ecdde33a22d38388325e74ba397381715b62de286365d24dc86fe77fe4e9b2d00129fde8c2afc464d5f2fe45b1d3e7b2245

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
180KB

MD5
5ffdbea6e30eb34ddc31be4a1e4adaaf

SHA1
c281ebd7f8c73a1b71b20bea09fe02d64f3c9305

SHA256
f96e4a6dac1353c3a59507ec14af96ee9772f8c8046595ac8a951b67c8c22320

SHA512
fa7215f4712cf42ac84e35478120b50b916f1c7618406cd30b93bfcdfcd7fe80d402b3955390d91798561577ffa5c4c561ee3f9c365ab59a7666753c486df852

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
180KB

MD5
7a0a6bf8386d3440b6f59be3fd8e70e8

SHA1
b5358675c05653ddfc57a6ed66470a1b6024c7f7

SHA256
33bab7f3cca74c35a5bfc23cf27e5aa2362fc8bc61a1b36584c9ea99ece585dc

SHA512
f1a48f9b40ccb0fb491b04505849a0aa6ab57e0530d0848dec6a98794ae5b8a29bf147d51836ce6dd74407c51cfd5c5dd1ab92bb4fc18214192d91d7897c673a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
76KB

MD5
bc87ad04ea3e31bf00425adc685391b3

SHA1
179f5637466de84eb6b40afb25637f1bae567679

SHA256
ab39543f3ce6f51f4481ef21c16f936101b70c43d615a3b8a202bd6794622fbe

SHA512
59508f3d7e8c46a2bda2e61d2cec2b67bd3d26ea7369646d054063bd27b538de1b58ab19b04d5be8218e082e81ef9bfd1460149b1b2a1f4b99a4ae337c8ae302

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
4c8578228ba082d4908af5b6cee9243c

SHA1
8aeeb46acb1858913541618631cb777a7e2ece02

SHA256
58912cbea9e5c2793cb6ac6eb96e04af8e50732730866cd7e580a461fe1eaee4

SHA512
5bb43fcbda210386f4806ae99e55f2075766c9821f287aecc065b3edc2c56b866aca289d43a742857d810a14880503f138836536fc6daa4acc3da7172fe2742f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

Filesize
86B

MD5
961e3604f228b0d10541ebf921500c86

SHA1
6e00570d9f78d9cfebe67d4da5efe546543949a7

SHA256
f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed

SHA512
535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f12893c9-928a-4714-b9e8-ba2dd4050f4a.tmp

Filesize
345KB

MD5
0156e543ecd18ab148481c3f26807b3a

SHA1
4583832fbb68a150d978f1fbc42f3054a890a165

SHA256
59c51de9de3fb94467b70b968ed46adb9631432514c77c8ef41769109dab25d0

SHA512
0a60f9809ce430de181c6b94f177608f54bf6aa409920fccf33da0c418e0c7ccfaf351480c2283d190eb03d98b9abd6b6370400b6c2988ffc82411e86c2bfa6b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA4F.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarA91.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit