hxxps://drive[.]google[.]com/file/d/1f0wUjOKqHu6ywUv_htjhmMw-bDDpePP5/view?usp=share_link

Analysis

max time kernel
750s
max time network
751s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
05/01/2025, 18:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1f0wUjOKqHu6ywUv_htjhmMw-bDDpePP5/view?usp=share_link

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
2	drive.google.com
5	drive.google.com
6	drive.google.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Program crash 5 IoCs

pid	pid_target	Process	procid_target
1760	1516	WerFault.exe	94
5552	3424	WerFault.exe	100
5660	1608	WerFault.exe	103
568	1236	WerFault.exe	107
4012	3340	WerFault.exe	110

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Set-up.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Set-up.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Set-up.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Set-up.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Set-up.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies Internet Explorer settings 1 TTPs 6 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Set-up.exe
Key created	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Set-up.exe
Key created	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Set-up.exe
Key created	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Set-up.exe
Key created	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Set-up.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\Set-up.exe = "11001"	Set-up.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133805747456492223"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings	chrome.exe

NTFS ADS 36 IoCs

description	ioc	Process
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{29238BDA-98DD-425E-8728-1F13D39D01FD}\images\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{70D55A54-D7ED-4EA3-ACF7-ED7DDEDEB958}\images\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\config.xml\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\config.xml\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\images\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{6890ECDC-2750-403F-9D9F-6002DC472055}\images\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\images\productIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{70D55A54-D7ED-4EA3-ACF7-ED7DDEDEB958}\images\productIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\productIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{29238BDA-98DD-425E-8728-1F13D39D01FD}\images\productIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{29238BDA-98DD-425E-8728-1F13D39D01FD}\images\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\config.xml\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\productIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{29238BDA-98DD-425E-8728-1F13D39D01FD}\images\productIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{70D55A54-D7ED-4EA3-ACF7-ED7DDEDEB958}\images\productIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{70D55A54-D7ED-4EA3-ACF7-ED7DDEDEB958}\images\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{6890ECDC-2750-403F-9D9F-6002DC472055}\images\productIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{6890ECDC-2750-403F-9D9F-6002DC472055}\images\productIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{6890ECDC-2750-403F-9D9F-6002DC472055}\images\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File opened for modification	C:\Users\Admin\Downloads\Adobe Premiere Pro 2022.zip:Zone.Identifier	chrome.exe
File created	C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\images\productIcon.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\images\appIcon2x.png\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\config.xml\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\config.xml\:Zone.Identifier:$DATA	Set-up.exe
File created	C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\appIcon.png\:Zone.Identifier:$DATA	Set-up.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5236	chrome.exe
5236	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe
Token: SeShutdownPrivilege	5236	chrome.exe
Token: SeCreatePagefilePrivilege	5236	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe
5236	chrome.exe

Suspicious use of SetWindowsHookEx 10 IoCs

pid	Process
1516	Set-up.exe
1516	Set-up.exe
3424	Set-up.exe
3424	Set-up.exe
1608	Set-up.exe
1608	Set-up.exe
1236	Set-up.exe
1236	Set-up.exe
3340	Set-up.exe
3340	Set-up.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5236 wrote to memory of 5348	5236	chrome.exe	77
PID 5236 wrote to memory of 5348	5236	chrome.exe	77
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 328	5236	chrome.exe	78
PID 5236 wrote to memory of 4024	5236	chrome.exe	79
PID 5236 wrote to memory of 4024	5236	chrome.exe	79
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80
PID 5236 wrote to memory of 6136	5236	chrome.exe	80

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://drive.google.com/file/d/1f0wUjOKqHu6ywUv_htjhmMw-bDDpePP5/view?usp=share_link
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9eb28cc40,0x7ff9eb28cc4c,0x7ff9eb28cc58
  2⤵
  PID:5348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1960,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1908,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2072 /prefetch:3
  2⤵
  PID:4024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2176,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2244 /prefetch:8
  2⤵
  PID:6136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3068,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3080 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3084,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4424,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4472 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4280,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4276,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3648,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3496 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5376,i,9321221993131809712,1384892804172917192,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=740 /prefetch:8
  2⤵
  - NTFS ADS
  PID:6004

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:4640

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5196

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2536

C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe
"C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:1516
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1516 -s 1944
  2⤵
  - Program crash
  PID:1760

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1516 -ip 1516
1⤵
PID:6060

C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe
"C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:3424
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3424 -s 2164
  2⤵
  - Program crash
  PID:5552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3424 -ip 3424
1⤵
PID:3040

C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe
"C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:1608
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1608 -s 2124
  2⤵
  - Program crash
  PID:5660

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 1608 -ip 1608
1⤵
PID:4744

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Readme.txt
1⤵
PID:6028

C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe
"C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:1236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1236 -s 2152
  2⤵
  - Program crash
  PID:568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1236 -ip 1236
1⤵
PID:1720

C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe
"C:\Users\Admin\Downloads\Adobe Premiere Pro 2022\Adobe Premiere Pro 2022 by Mister_Bigoudis\Set-up.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:3340
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3340 -s 2132
  2⤵
  - Program crash
  PID:4012

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 400 -p 3340 -ip 3340
1⤵
PID:5576

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Adobe\Installer\Icons\PPRO_22.0_win64\config.xml

Filesize
534B

MD5
2bf9f831e68bc1c40aa7ad9456f0dd64

SHA1
5f0169ed2ce46b27eeadb985c57c7ae9f80bf90a

SHA256
7c4bb24e29837f106919240be87763ff102c66c48875164cbdf263093ca91fc5

SHA512
6a53b2bb18f85f248d58f6b76d09f4a6f73433fefba719c7afa8221c1d0769e98f8b9e37d61319d030f63ae7909e987313d495fdc67de35fbfb4270beb3e7aa0

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Filesize
64KB

MD5
b5ad5caaaee00cb8cf445427975ae66c

SHA1
dcde6527290a326e048f9c3a85280d3fa71e1e22

SHA256
b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

SHA512
92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Filesize
4B

MD5
f49655f856acb8884cc0ace29216f511

SHA1
cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

SHA256
7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

SHA512
599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Filesize
1008B

MD5
d222b77a61527f2c177b0869e7babc24

SHA1
3f23acb984307a4aeba41ebbb70439c97ad1f268

SHA256
80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

SHA512
d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9a327b6a-5de4-4d5e-8475-9c43ec86730c.tmp

Filesize
10KB

MD5
36626976cf38321718cb78b1afd1f0b5

SHA1
e818c430f683f61e41fb4ec15d5bd6eb8d55f547

SHA256
dae2ebe803d0f6a492bba454044b347fca75e1e8e3b45c6cb866c1447f39e087

SHA512
a5752e66042478faaad7d1af75d35c456a14fbf66c8ba39163872f81ba06467356d057b882d645ec03d40cd59186cce5b9df00531f87833b6e9264444cb82956

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
8150b12a474aa2fcc5b53734371ba910

SHA1
c9f42056b5622b8b3b01292e72d387c28b7fe27b

SHA256
3e7543ba0b96cd5428a928085629adb9771a257c6fe6e883da241c8a98464ad8

SHA512
a25f2399bcbc98b8a323305dd04d46018e8e523e7254f82a53ed9db5dd60f1959aea2066abba034f72e42c35108dc3fc227cad4387eb9a5a56f299ce7ad1aa20

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
9e7b38f5d6cedbd8de62572a58cc79f8

SHA1
793b9a07bc271bccc8c4354c4275b3136f86dd68

SHA256
a482a32538112efa47e2b78c89b6586b1417ae1ac711208337518abca5b40476

SHA512
08e2ccd0755db6b13c73e41bc4b922c92495638b89dd09fd60db922ab5d4b214d0408fe0ac19b1b8ec056ad23d27da9616623eb2ab161fdea01b5a1266f0dbf7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
5KB

MD5
32d9da40d0eb09c4eadc1b14b26bed3f

SHA1
9e0aad339d19ebca2dced60efdc74c6d70683f20

SHA256
243a18917c6a0ac25d463030745fbfaf894208a175c46142aa13173396ae5559

SHA512
22da3047ba7d0fc1b6ea77ff138820e1bdfb503861e452ec83d97d1bf0fe2a494e0a2e661f87cba3f16c27b43651a5c730c3e4b868ab459eeb27cac203665fb1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
d6914a8d5329762cfe131c7e0943735b

SHA1
b01858ff638f87dfe680f169a1d8daef7f6c557a

SHA256
aa6653182a4da8951f9295891a979d0c0f3ea2fbf6ab6afefbf863444467bc33

SHA512
f09c5c4b585f3e4ddcd1c81acded70b9b3ac435dd1d83ce318ca28fa88fd1c06f0e086499c247d3420b5e75c00b7e0c96723d9910453c3a3b5fa459b3579c79e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
fbd15ec9e8aa8b42f942c0b54ac25d4c

SHA1
03a8cb8e1005393ed0e20237dc55d93ef61df4a9

SHA256
dc771d5b01df4cf2d58bdedb52655ddfdd59daef3cd656758c8bd1a3e7fb91f1

SHA512
3961b4da79336a05361ef2e5e868ebeb0c40156ba8ad8cb94a0acd94f0ed09bd2417e2dd5c2122eefc42a1733d700345e188a1b8324ce38750fd4ac2e1a75e44

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
6b090d93c534eb7ce9c8d6cebc024878

SHA1
b6725d5e122f75bf2a5e675b8db43a0e2183173e

SHA256
21678a273f0a3bb5f832332f36392c1a27b68f006ebb6e85f870788c68a5f7ea

SHA512
dd781839f6f54b0debca18aa858551badf492c5f5ec6896567db3b015c72d27d9b52483821f378be473632c3ea8029b8959de3ee0f5709b3bd8a3c9430e5f474

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c8f9c094ffb3b1968cf6a5982747aa47

SHA1
ae436df8a1a7f67c0c2d8ae00333acee5611f43e

SHA256
bdf14d8ffd6d73ad2a97ad51028e66ac8fa2f1ef45b41a584e5166da182a6b54

SHA512
a2b16f46f5a0a51335bb556babc1a25e7e3c5f09c8c9df5d602f21644e1761be42cce0681a445ab487bedee5059d99fcc82cdf2d83b4a0c8fbd5e8a9ad3f7548

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1ae26455bb45ebf7be3362676c5efeaf

SHA1
f3740cee155dd066b3815f225a0e5b773b219f79

SHA256
e28c4d97d1325eacd3755ad639555a30d023a3ad92ba86de7c892a7f698e0eb6

SHA512
3bfbb21ef78b28406514b438054357cd1059713366342c0eab11b5d09c5239bf6a0bfb8a34b706f0bedb6ef59c2021ebd50334fc904ddafb6cb276261ced81a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
08fa2257fb6d4a7862a5ee42753483aa

SHA1
9e0f5e857e51d9b2284480704ab5ac2176b85477

SHA256
ccfe936635b8181abe4927dab1f57a64be1e98f26b25d05706882adf5c3b4bd2

SHA512
44d33b7d7a9b1e0781b996e501f8d53c94080161b967732172e0dfe788da4c752c72791c24e820e194315a66ebbf1ed5230791ae78df3f80ace66ecbfc242ee3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ffe39ae17440daef643fd68f3e86dcb9

SHA1
559124297977ea57952ca52a39a1a9169d3097e1

SHA256
8cf005e48fc88128feb13e9a72c9e834105b38f5765ca299c6e9a8619aa9cbc4

SHA512
6a62a85e869ee2edefff9c4214064ca1f8ee768ec899313caf998f1929c9ec901897c3be8121e6db0094719832b793cb813786e5e02d0dc03c6a50fb15c1c9b9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
64f8c10c1e7cd41309596f5b43368bed

SHA1
337491edf8ca8dc289eb7d169fcab4e90dae6808

SHA256
ea5535baedea710c8c658cbbef247c1f43ef83f9ee0cf1819d293a428f1ab4b6

SHA512
216e8ed4cc4c44222878ea47feedd8e9f84925b3baaac277d9168076feca1fff4e93e0332f8bfa808d05bd32be870deefcf7e01558f26bc7e926a92de9d6a117

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c21009fbb2f6f182ee71a862125482f3

SHA1
5990fdeaae8973bc5afe34425ee6fc99268e222c

SHA256
24cb1b247c74c38af8959a58ea61e20441cf07b39812a098fde1a7ce22aba31b

SHA512
b51942a4b700d8791c4b3f7385c19a7a712c3fbeade41d230d172b9f4ff15c0c0f29055f394fd0ac5004d29aab579f00dd4fd06c6b7ed2497064d2d5d878eb2e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
93ed397b78577ced2a25a5c48643db71

SHA1
733c0ce0c6cc783dcbc21d4044e8bcbb126bf50c

SHA256
c03e2ad8d2037206886ecdc3085d6b639f9bc6253b8640d524c3ce812b8248e4

SHA512
36793059d163b9d62e060ba0b2fa939856df7cbc90d9370d89711cf67076638fe1965712575bd8304479153c4b67901b31743b6398a4d2477363701783e6c0a5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a8821d7c2790bbc6840f0b38c83618c3

SHA1
309e3f7d24cad365659721ad2fe0d7542c336ea8

SHA256
3a7f6d18f40dbbbc3bc3432f909d64df4cbdecbf8c77bdcf6829d36a312b275f

SHA512
c0e386dfa3d17abe87f0e8a98f253604515a17b64665f9dab2fad00ea56a553df847ce9cd1defb6ce6a874b9fb49f6c2f2267169898a3b4f396b27c0266fe4da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
8e4b3e6357c269876a4973401bbf92e7

SHA1
884e049b43c7ed6d361aee9d13bec01634a4496d

SHA256
61e6390b87143eaef7b4706ca8a80418d9f21208f27bfb63cd4328c86866049f

SHA512
db3d5c675ff5c65f220d6663aadb00f4bdc00f5e175e3f1b3208656842e5191db1657d7118bd20ed29d967a722d7b16cba0a47314e129e1d1daf3e9674421432

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c802f5409115c737ca9dfe37d40abecf

SHA1
9b83319b462e63f9d978c02e4ed7e8fc196d9c35

SHA256
5c58115782962407c063f24bd08d3503960566138b891c21360675db444bc470

SHA512
9c7bfca4511257c99b17c76b0a658a868f03ba546ff978b755f51c2c79c38d83832bfd28cbc7111e34c6a1431dc11b78f5c36ea46ceec66d97eb865e736b15c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
4303295d297363e4ffd559427ac29bc4

SHA1
0c90876e8549e59982b7d0390f92dae2d37e5a3d

SHA256
b9c63690c1400818b92927b187866009ae8e698465fdece67f9a990231bff8ba

SHA512
68d98318337dc18fed06e0e9e44f5c6eb7ac5633717cb270674ccf0b213f9a856a0ccf39e75193ca8b5450e47715696fadeaf44cc78be3e2cc5effb60c02a04c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3414951edc2ab5e726fbf611f48a75ce

SHA1
837c954325fefdf9a4e3398911ce85bf92fbd830

SHA256
136a150dae56e6862ed467216f2e00eb070dd51b65b9987327c5e20befcd3823

SHA512
998aedc6aa324cff158ea59c5077b3893dc0e3e1a12a2c35bec659e57357aa5f10322863dad23168630543ea8b4247a00c97d62dfeac3884fee0c909e304e30b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9fafe591e17ccac739f8d224fb3c5ac5

SHA1
d2cdec391ee17a63a55986d588c02b3ff42eaf16

SHA256
fa1e034e5b69002743fdd08ecc0b206f75d06c25a395434512124df65c5d2082

SHA512
bb1e361f05b2a45a0b340e1027e965ddeec9fff0209262ec809d3e7811b541782c901edcc52b4886654d3c4d4b5565a434a7139c9d7528c7d621fdede725175b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a5b71ffa5e8e3c73e5f8d2d2198f2a73

SHA1
880dab2d5a051064c5e282c9a4af5a482142b9b8

SHA256
5e64a6504dce23ec4a0d63b9f74a2679210b1f30bfe2991c3c69cd37562ea3f1

SHA512
32c9dbec87eff1b0dea7f494d21c7a6c0b82b266026448074270f65b599e37f08ff61641835c26ad46ddfb87bd4e4cea60509c2336e81ccce065fb09639d6868

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
03f7c8184881a72855111fa509c2c3af

SHA1
acca2e4551976e689923a6dc9e02ebffa60c1513

SHA256
84bd9013dd5c2cd87f7d7d5282bd6430e027ef69a2e68cb48174f3b9080eed17

SHA512
48aeaa994eb2272234330121b0731207c2dcc24307d0b37585215ad324efbf3be170f08b62f00b53c9bdd16db51a39c87d35393093a60ca624e7539bc202292d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a8e2e1e00ea0869936074e45dd02c4e0

SHA1
66a97bc47439ece8952909a73b593539d66925cd

SHA256
b93d3d700db2672facce019ed5740d5971b7a01517e250a2d0a65db081a0e6ed

SHA512
50a72059559ef670fedb364d48eb6d10fb8d3be0cdc5f66c8a2ef47e5ad885d0ff212fee8d1c085e1a3a3f9f11a1242abc62bc0f410b705c618ce0d7cff7b4df

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e22703877f92e15de52cff744e3e89c9

SHA1
56d3c3146f69e2d2e5252e7798d07ff7218001ac

SHA256
0d4262fd7f5c4694d675df90d0d7c13e0106d502ee2935077a83e7d3f1313315

SHA512
7eb0e4e2fecf8b56636e14b5d5e8f2c7f9dc6fa303e4e6395c48b03023d14809e8476044f1788df836ef92914d2e8b560e7a99907f495184816ba425b689162a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e0dd96c3be9503832c5909d5ba826c8c

SHA1
5a048ef7d5f3c8f6d6c231e0a7ecbca2522abeb7

SHA256
def60b7ea528d68c33b3032152049279ebc95f31e49d118e7388d7a6437d7670

SHA512
40c15f3d5dcb445c626c8fb53e67b64cb0947bfbcd2b0df539762886515b6355df496e4b256f60c2c28a16374d7df9638b982e5e02d77f02a3e603afd47ab71a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
0ce0862ac2524891001e9bc03ad47336

SHA1
6a861c675dad7033db486801b9897b15d3c72c2e

SHA256
821dc96273ab7800b38de9e81a5573c74b3f1ce4c1c5ae7769607ce92a5a30fa

SHA512
e4a18904534fa9ee6d6c9734904c1b3a2de9ca04ca80b39e5979daa20556c9475c0807a89ce35e643d9564cd6095c80ecfcb901a49ba6e5673b68b97f85c4b42

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fc6a3064568b8fdb7cd4e885f286b708

SHA1
c97dc376b968e92b2709d7788c83764813729430

SHA256
deb6b7c992ed2c532f87d7ee3b66fb6b2319a211de066d32db3e277b9d985dee

SHA512
c148ad819d8f73b848c2d6391e3cebc0835c1dfe50a270bab8d14bff0278075f7c0c768d9a6b74fa403b9ac5e7980cc0ea52ac73a59e1b79aa414a918d98023e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fb788704a33a6d554ef6d7bdcee4934c

SHA1
c7eafb6f487d641b686dc1ad840a05a3bb62c22b

SHA256
0b27246c8ed93373a4f0a14483c444558fad49ffd9726900f45fdd919bc0cd35

SHA512
33bcb98dcd4b1e454178ee79caa4dff344a430fdb1317c65c56546f3b05bcffb752854732c0f2de3ee239422f13cb62a0c8fa9751e074bdf2aa571bba4b73c7a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
224d766e021e97b627af74e41392abff

SHA1
59533d048a05bd91dc763163bd6b7d544a9f9c9c

SHA256
041443f0c78fa88835dea624d48de40e1faa42dd3fa9705de94fe0b03f150c57

SHA512
ab1730b4ea110124dbf3967d19efe267b64c0b142dee54f1e87e6cd9c22ed8d988132f70765ac0a12a0cc3e383814f216ca5342c4469308979d3ceea2c3e38d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
cf747894629207f2d9080c2f8423736e

SHA1
4542feb14b55314778b6889a462977568da42da0

SHA256
65eac26f8b41d93adecd506dfe176e55c1bd3637aedac2e6d78646606cef126b

SHA512
f5db776cbbd2331d05eb1eb8390bbbe0604d6240c96de512bd7e8052be06a602f7fd759358492e89b68bae0be1c02a78467255f65170f5688e5f55f3458c4af7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
4dba425f5be509705094ae01c7455cc2

SHA1
eb0b347f65aa09c277106663ef2b5f19ebb89768

SHA256
a00d36b63b9bcd0295de4b3dd9a067713f3bf79e683a91bba94d8803e4b661a4

SHA512
bbf6c8390295a15d01ed8cf4a360a55a5de8b3199f22ab5b6b51e12c463cc885ffeae789c1fd3de33678556419f8f73bc41fd651fe068921433a64297786ab21

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
08d7b7cb4cf16e1904308d4d8de3b2f2

SHA1
14edf1dca437bb6d9a7bdb65ddd43bdf87dc1130

SHA256
7c7934ddeb2c062c3b684543746c4f4b52dc68cf19ce7539bea8d252d332d8db

SHA512
69868a2106cc5a3631bf800f469b951bb300c7ebe82e953de8eb3827e7c779f64d7c94082bf98b511502faa08d44058dbbcc12382a2a51ccf2507831290b0fd3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
738bb2546a7c52ecd3fd9363a4daca0a

SHA1
fe48a07807aae45cd330194632068880ef9e8414

SHA256
914e65d2974c4737e43d4c7f6b45934486d9eba69c79bc4d9cb1b658fa33d252

SHA512
df7e9e12f658716c0a99928653d374fd569a192b3522c731ab80dd3dec9bce9bbe7d66e610132ffac4f14cd501e2a0b6edf7bf9a03df38c89350791fdda865ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1d0f87e7bdab0313097af9ed234cc7e0

SHA1
60d888a16158bb562e9616574376cb2410883e81

SHA256
f5428f9f4e9d6bde57a6c1694b0b71a33499602fbd7461880762c0f0323ca0aa

SHA512
2fb0d12459a8410ff0ecbdd9d6a708bf658d0206c6e661a86465387492af654d3ae8a9b3a51dd13d6307472712509f33114bb9d565aca213e985811a4b4cb04d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
00c50e3a24e6eb31e3787eff4abdc421

SHA1
64c6c5b190cff1ebc1e5f20b6c76bce92d8093db

SHA256
4f72b0f5fc6e4f641f9058b41a9053ce9a4f1de0d685900aee6cd756cb390ab5

SHA512
dd5591a1794def1c6331c1e0911c5969a175973a908fdfe5455b60fe2990302ddfa64d09dc7edd947cd6a2fa3f6462354e2f25a49fa44a0efcd324c9c6b1fe62

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5a6428d365ca1e5cf795d07f789f1c82

SHA1
5cb8a3ade31ebf136a6d0dc0ae46068ca7c08f57

SHA256
9b6aad284e856f023de1f29441d2370739db11d29e645208663dd7f8fb7e4a54

SHA512
d249f2bb1297af702bb05ec09fe9df66386963b51999ddb557615bafa5db26444e634a1132dbef5ad8146a5163442f3cf0af3a15529fe9ec0e2071d89c9577bb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
58cf36808ec6e90410b1820b69dfb3c2

SHA1
bedf35bbeb08cf48b88926cd14993a850605e4a5

SHA256
799f1e0fab5cca96781488cf3ed895b9ed63bf4bba62b8819277b979f2c617c4

SHA512
8111d75f1d21bb342ca6fb6f7af271bf9429ddb030ba929c5b9b0b8b69318ed50cc825c8c456307a809978c30e6c90c246199c5debcdbf4fde3becc91e7aa850

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3b09bef9c0a7307617c020f1fd9c3bf3

SHA1
23217c99d6d355033d0bdc471e42603d96027db5

SHA256
578bc47e265bbf0cdca8731ba15d38240f29a602b6bf53c1257cf01107269ac5

SHA512
98d440be86f27b4592ca47587b0957cf508d7ae377511942402ef2df0eee99af3dee9624bcb9f114e4bd0fde293aa364ef1108475bddc621e2d38478f0b3ab9a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
86b44de4083ac8b72c642a43345feeec

SHA1
2ffbd2d27a2395c0bd4bedee8356c3a6535b84a4

SHA256
61d8f69d17841554ce6acd25a1373c51b58652772ce292bab337143de89f602c

SHA512
dfdeffcdf4e514d4618d54cab498a1d3d97d879d6671e250b65c41cdf499b4f27650dbafe358f4efa5ae6e886089bb62950bc6ef9be4eb603d9a98d09aa211f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
44a1c69f918ed5c7da16441be214e100

SHA1
984079e15d475ed1a5eff8af10ba180f513cb07e

SHA256
79c27fd48898b3477d770a534c9aa93f3b91d3ee648c4013d1a431ceff9b3363

SHA512
7f16bfcbd3ed01b6855e7cba35fa8a306cade62782e8f5986313ae9a4e530285f5f3784fd4c74de29be3009da7acfcb8e11975f2103a12670f1cb8e442db2238

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
513e25a1da0a58e6f2277c95eb16e68d

SHA1
78eb4602e2e2ee1ba3adb030d86bad144315bf89

SHA256
b1221dd307ea3963a89d33bbdef16af78857c96c9420c4f7a141e52f0d5c56da

SHA512
9ee8b403270c4fb93b6a9572bc9782185c4cb354bdf44551b2f3f3a82a5c677c9bccf172005665dc9e72b6cf79719fd5bc52885477936563fbb432052ecc69ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
46baf0be501b1695fdc25359aaf09780

SHA1
478a3c3aaab0af6b8f46aed9e49bd09cf86b75db

SHA256
47a0db9b5febd4b8776ce3425a21a109e1df2e9a909ad6fea4938a0b67d90913

SHA512
e76d65438dcfb153a208f8852bc31e33c3b02229dec8da8cb9537637e38c4a1684a64160b27c9ad8a75b688e490675d47ccb031c0bd8b8bce4712a317309d59d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c7248499b4d6b0bb0d5b46b9c0fee681

SHA1
4b320ed55f5e474bc31dcd552189d7d736b0b983

SHA256
4e78465ed8f4644adcd40098c77d51aefcb98662bd158e0507ba4a131b055ff8

SHA512
742ccea777b378bfa63c4f557f9ef220d2a7d56514f1be91921a5754885f2f0b2dce85ceda87124dcfd66fe8a3207975d935c5dabaae730244d7868c9b9338e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3e85b5250fe3ec5ad2b06bacef4ab783

SHA1
6ade6574a7fbab6365ee3987ab669a97dd17bead

SHA256
7a86acd95c9b9aaca069a0f6dcdcd41395085469c25374cb5d9ff55c7d17f4d0

SHA512
4ea70f57ecdfd58b726d035122d6dc5bb57599f1688fdb764c300b040b6052d30440c29dbdd4717682699ec37c5cccc2396cd404cdd56cda92a8548fbf27796e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
0a134ca6de79d91d1924b3e2c13a9d8f

SHA1
37c18165109337a820ac330715dce869ff66fadd

SHA256
030779256f0a0e562eeda25935a8113f02382cae8f21e9d00182ed24460ad408

SHA512
b2dfcc71ec6dd895bca530c04d0c4cde019bee6897f10b20d17fc83c9c146efd0838d14fda0d66eb07ff4ac24eacbdc5cb695256de1e7083f3e6cb8eba3f228b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
33ef71725a2f6354f76a8ac6f5ca52d0

SHA1
b4873fd3928eedc28359fc72a9e53a1840493ff3

SHA256
22e64d2338dc7f7a1fe8636ba0fa0400fca92c8f2dd6171bd7d8e713c4fb9189

SHA512
48609c1753ecabe5317c89c3a4227c444b5c7b8ff2bb543edec421058ac3d769b4927766cf6cfdf465e8d601cf5498c89427f771820e92576f4ad484813228ce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d325a560857d6ee9de426fb9f70dbe5d

SHA1
f4b64fc760322b6695f45e6e5eaba8c251092587

SHA256
79320b8f20d3ede8721f885ad3c3e2f14e0b71f4fa16e4fdd9937ef48f72cd3b

SHA512
f3c4088e4875fa3b2546019ff2431e86bf47f34a246ab0fb7da5114aed6b0dca0d1e2124000c422a616e2256ca669de17166c6ae23f5c95dce7a4f5f59d95e16

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
228KB

MD5
51851ad4bff7a0926d807e7bd830a150

SHA1
fa08d59f21bbb0b627a722498b59e4196894df34

SHA256
1762998252c0c9e5c11e64ebdbb2ab219f179f9a6948fa45b8033261e6849c32

SHA512
c0bc54cbfcb553543eb82c592228f5fa5c803300f1d91d360fea21d7a9294b6370278c012d96318158db394598416fe6c676f3c7218e197601dec59973e63cfa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
228KB

MD5
3ec195a4e31c4c77c1ec782f7911f487

SHA1
86273bf6f76498ac9339760b638f96f9c344f999

SHA256
a12946d74023a7084fcb4b91ce19ab00aaaf00b41e24535e164980a077faac08

SHA512
969f1b8df15ebf66d08aebb82b865004c31395e8c89e342ed47fccc11fe77e3a5f041cc9a6878cf3454a15c169426bd9a1a207b5cab0be97771662b82e0f9510

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
228KB

MD5
22ed23b6197df2b5b3f79719cf0e5454

SHA1
afd402804f0d4db8bfffc55def48b8c89b44269c

SHA256
b4b1bb4d0fb4b090dd2d49f2c1913d7567ccce28df2511763779048448b8d0e1

SHA512
dd91cdbd77d273ddb2a53a8995b6219eed04812e9d6bf1729aad57abaf8209f71781854dcbdfb4411d966e70da7dd0656fe574b31ec0b68b296f3a3ba9ec129d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
bf09a579fe7753da7c853705c279fd98

SHA1
2318a0165a8edcf0cf196bbb8053fd70fd3abf8f

SHA256
aa21f4d59f96f5b701425002ee68bafab5431dadfe6d8aab22d25a251c762111

SHA512
f5ecb8278688e21cc3e8606c842761e6d24ff0fcb0d3fde4e19ed6033546d24c588870fceb7573931bebc1419d0fa53be5356819826ba70557ac34dfdba2c767

Download Submit
C:\Users\Admin\AppData\Local\Temp\CreativeCloud\ACC\AdobeDownload\HDInstaller.log

Filesize
6KB

MD5
d9cf1240d8333075bb2d09a1949f0a44

SHA1
0e53e792063fa39a27770e7d121f806e916b4a4c

SHA256
c588d8f37a219b79ec6423e0511620964b0617a68b9fdc8cfa43642581792a74

SHA512
85d03a5a8af35ca044404db668e9ffd104db8cbaa484a5e6707ba020f2b917dd706fc547db106ca1927664f259d4d01c234d847ae0ae3e9b61d7b1de151e453c

Download Submit
C:\Users\Admin\AppData\Local\Temp\CreativeCloud\ACC\AdobeDownload\HDInstaller.log

Filesize
10KB

MD5
1faf6c09cc2c30daf03b733c0b7cecec

SHA1
e72373ce7274b7b36aa567237e134d8a9fa58ae3

SHA256
8fabeb36f5a5be84f1c2b9c32d59392177616b56e931429eee4dd690563243ed

SHA512
594f5ca8449b82d29b6e67ba6873cc0c0f3439638aa8d14b7697e61b267733b91b240abad1b0cea926e6574df34eb1b0a72de7c7fa9e7979f456d431e7432208

Download Submit
C:\Users\Admin\AppData\Local\Temp\CreativeCloud\ACC\AdobeDownload\HDInstaller.log

Filesize
14KB

MD5
7c2db12d10aa2548d0a1cd26e23f2278

SHA1
c5b6f34235460a07a57c93db7ff1cabec6999a42

SHA256
14c2696b4b2ba746a1d8dd0f196fd619ab3ea3d7b93eb58399bfbdb142cff315

SHA512
f32a4710ae5aa53a3224169ca2fe51e00bcd181bb42329dd66b88d1939efbefed8c552a34b9e48b4bd415079b997661c4b92958742988f20404e85285f35884a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CreativeCloud\ACC\AdobeDownload\HDInstaller.log

Filesize
19KB

MD5
0ea75490e0790e221a3a8c81bf78e29c

SHA1
2224fe6cfddf100da60304925c0d1ce055285e12

SHA256
842b6bdba64a95205bf3a81ac892ab338d79210cd68fea4c5b22ebc851d94aad

SHA512
5453883948de1233fa60ad5d56c236eb4a35e7130e2bee3bb966f06449688bbe502cabd54493542ccd7034b1cd3b20e403209c332d4e9d1a2fe71a3ab3f3f128

Download Submit
C:\Users\Admin\AppData\Local\Temp\NGLClient_HDESD15.3.1.470.log

Filesize
7KB

MD5
9e49569f883787a822efcb7ef6110df3

SHA1
18f7eaf3fd86815f1355616520196dd6a45c4c0a

SHA256
06165c3d99f4ad8bd632792e976a58c819a6eec0dccceea244bdef8a46aaad6f

SHA512
9e8bda2cb814a371ecb864370fb5539af705fa0b357ff5e2d6e54bb6775c75142d05c872612b14d35bb9ed9c1af03350e9a13dd9ca31fdf044a0fe179f3cf981

Download Submit
C:\Users\Admin\AppData\Local\Temp\NGLClient_HDESD15.3.1.470.log

Filesize
1KB

MD5
414c4bf30d4efaf081e7bdc4f791f4b8

SHA1
9762f74be25e6828601ccbf8ceb739fd126431aa

SHA256
515b39b026e0bb82c01e342e7eb3e6fc536fdd17732b19a28fea1de465856dc6

SHA512
2e5ab7cd6c031b32527c148ef44076ef038df42fed0cdf124c7d8d255a32d168cfee48160d32868aacc1c8ae7343448c4018dc40fa1566e9fe7f61428a73d979

Download Submit
C:\Users\Admin\AppData\Local\Temp\NGLClient_HDESD15.3.1.470.log

Filesize
7KB

MD5
bfd7f03ebc272428a0c86affa1972df1

SHA1
2b7ed4e862b94999d1b9596f2a6b52dbd9fde58b

SHA256
3acb5e3e3d5972c8823213028459456b3a04bb815465a7f53f1768ad0e872515

SHA512
e515a3cd5d78d9df0724f4715b72b933ea3cd415396b044a10f3793e3fca808bfcb24535845c2bcf5e2f56ee86bd1f4dca2990a1ab2f6fd5eefb7b1c25ec5d9e

Download Submit
C:\Users\Admin\AppData\Local\Temp\NGLClient_HDESD15.3.1.470.log

Filesize
1KB

MD5
94bdd692bc0c9f1a8f727017d7f6e2ff

SHA1
04914b21be5c878d9b6cf4d9407edf0b9ced94bd

SHA256
6a6e037279107c0e8ee9a8ccc4d856ea6ec577aaa4296a7bb5a6737deedfa527

SHA512
9fa66b585dcd40ffe50fb6ff1f7da194c92120775ade8988b89046f61ef9eecbf160bd6b4ce7016ad46c662e40c078d41bbfc15d0ec1cff281ed856de5e9f565

Download Submit
C:\Users\Admin\AppData\Local\Temp\dat1BFC.tmp

Filesize
140KB

MD5
d070306a9062178afdfa98fcc06d2525

SHA1
ba299b83eb0a3499820fddcf305af0ddbda3e5d0

SHA256
8f5ccdfd3da9185d4ad262ec386ebb64b3eb6c0521ec5bd1662cec04e1e0f895

SHA512
7c69e576b01642ecd7dd5fe9531f90608fa9ade9d98a364bcc81ccd0da4daef55fd0babc6cb35bff2963274d09ef0cd2f9bce8839040776577b4e6a86eb5add5

Download Submit
C:\Users\Admin\AppData\Local\Temp\dat1BFD.tmp

Filesize
140KB

MD5
e204643042591aeec2043c5eae255099

SHA1
ba5f2f94740400f540befc89f1c4d022a26faa84

SHA256
7f58f56a7a353f8fc78ec2757394a7c7f28165e6bbf2a37d6a6e48e845874f3e

SHA512
7196c5b8e88100a08eb296be7570df4d045268ad6bab1c45ebaa9063aa9b46b8896886e24a9f861e322b167dd95e18d5a18abb76f1bb01c8bc85c36bead855ef

Download Submit
C:\Users\Admin\AppData\Local\Temp\dat1C0D.tmp

Filesize
139KB

MD5
dfce51814cf6d2f42375f948602cd99d

SHA1
766e162ff305343010b67fbaa28b36af277c5b34

SHA256
7a8a945586a1d21d2922cb4aed9e28d872129f6c396ac69f47ef3e32ea972ba0

SHA512
2c9489c18719ad29928e86a9e631e080b024c882a77a582f40f4f86f625de9b08ad3c09710d5ee32b5cae5284fd960f412f05290bdb3b4709f097b269b99ce21

Download Submit
C:\Users\Admin\AppData\Local\Temp\dat1C0E.tmp

Filesize
103KB

MD5
fa794ec12d353c26805ff53821331fc2

SHA1
cbc6658badeda2ad9b0d2e03a0a35ff7fbba542a

SHA256
cfdbd8a2aa463c11e483dc10c480acd274e9786632f5571a3970e8a20a2d8237

SHA512
1161afdbf6fc9b74421031fe6e139587f291ffaec03cae4aa76c1a86e10a69c7b1602ecbfbf60287ce8ed926377ad159992cde605ba98e75b212e971b7e14f18

Download Submit
C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\common.js

Filesize
2KB

MD5
d98f70ffd105672292755a37f173c2ec

SHA1
c0154add295ac052f234a0282a62b704cdd01998

SHA256
257a42f797f140667c81930001e73943bfc243d50bcc775f75d0334a2d2cf2c3

SHA512
1909cc7e4da0949a469852240be2205209968b18b99f7d967bc0231de33d03c7cbaa9578972e30e95e6d7017aebf9cd70a55ba22cdc9d5774d2a237d3eb0971b

Download Submit
C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\images\appIcon.png

Filesize
1KB

MD5
0888f293d15c51354ded410dee3ad535

SHA1
9652c87a2a9a62f013020ff09096d7e23031feaa

SHA256
b842284dd918c07938bb4f84cf790ee99097625d9eb89e5eaf221602f167cede

SHA512
3caf7d503f39a5ffc0fd9e984d1543dff5ca26b875df6f48bfc450a7895316f967945eb1be93618d87531355627b42b861f8fca8897ae3d4c61d212d1098e40d

Download Submit
C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\images\appIcon.png:Zone.Identifier

Filesize
92B

MD5
1f902fba618311214c67d3a10eabae22

SHA1
94d5b737f6eb9d2c5a94abdcd38b37aec9e7ed9e

SHA256
48a1c066d84080d0d324733efe382a7e289b546aa385f0336117476a5d2e193c

SHA512
d9d5bcc223b0b36b5d45197bb4d10e949613ab85356589c4653167928edab689409f092e89a4a77c4e9e179217076301b53229b936e18c1699ffdf55a6f77738

Download Submit
C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\images\appIcon2x.png

Filesize
2KB

MD5
a99a41b9525d820733e39d7cd051aa44

SHA1
0b22982dded3feaa4502e078747722550ffe2519

SHA256
fe4e106a0af4455633299e3bcd09073603241d9577d3e6240d57eba93a6238dc

SHA512
bdf8426496a7be728f4ff41048457c75c04f1449f1f01c6b028e290f82d983018e373cb9b11bc1ed906c22825eee8bbbdc2445651474a5e1b53256d04524c2e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\lib\jquery.custom-scrollbar.min.js

Filesize
14KB

MD5
ab3adf4aff09a1c562a29db05795c8ab

SHA1
f6c3f470aea0678945cb889f518a0e9a5ce44342

SHA256
d05e193674c6fc31de0503cbc0b152600f22689ad7ad72adb35fcc7c25d4b01b

SHA512
44dfc748d0bd84f123f9d3f62d5ea137d9128d5bdbe45da9a8666d09039eb179acf0dbb3030e09896fd61e7aa5ae6dfaffe9258d80949a64d0a7e45037791fb4

Download Submit
C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\lib\jquery.min.js

Filesize
91KB

MD5
e1288116312e4728f98923c79b034b67

SHA1
8b6babff47b8a9793f37036fd1b1a3ad41d38423

SHA256
ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32

SHA512
bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656

Download Submit
C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\lib\jquery.placeholder.min.js

Filesize
3KB

MD5
e13f16e89fff39422bbb2cb08a015d30

SHA1
e7cacaf84f53997dd096afd1c5f350fd3e7c6ce9

SHA256
24320add10244d1834052c7e75b853aa2d164601c9d09220a9f9ac1f0ae44afe

SHA512
aad811f03f59f799da4b8fc4f859b51c39f132b7ddbffadabe4ec2373bd340617d6fe98761d1fb86d77606791663b387d98a60fba9cee5d99c34f683bcb8d1f9

Download Submit
C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\main.html

Filesize
8KB

MD5
f4b7942d6563727bd614f10da0f38445

SHA1
84f22240f7a5ed1c23b09e8677ac2ac3cd4e26f9

SHA256
e4bedde22ed405d291c746440a824d5f8527fb232e7a6be2ed9a76465d82f8dc

SHA512
f79b24ac78863a4ed87d41f37b2a5bc27017ebc5317f0a305d676090a16aee8a61384b476e7e9a68a024aa8da4784c1bd4f118766caf4450ec97af430e7074af

Download Submit
C:\Users\Admin\AppData\Local\Temp\{18F26B52-67F5-405D-AD44-6287377D1AD4}\main.js

Filesize
58KB

MD5
a8f9eb478c7512c98ca1ad46dbcc298a

SHA1
454226dc42b911caafc9a1e56d8ad0000bbb7643

SHA256
1df6cbdc80c1df47d93d6e7516a2d7017362413a6b9d93634e143856695c3645

SHA512
ae3198cc6ae739f3009359988f5c090664e5fe8422ad1cf739fe316e66f344c10385d1f841c7b0e3ca9f7997c79d95fa0559386b6dec10641ceb8c290b14f5b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\content.css

Filesize
16KB

MD5
edacde36ff06bd26f1907ae092eac998

SHA1
c25e9052ee5b28ec28e2eceee40217302bf2caae

SHA256
257634b6fa84dce998b31d6497330f0a0661efbd270f58289fbe026ed95b6f2c

SHA512
7e8d48e71a51659ea52dccc2d7c542580c9ea1953ec9ca2ad77d3c0926c5bc77167f85121fab2dcb7fd4d6d2f04edbd90815b76979d3269994cf662fadc357e1

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\content.html

Filesize
6KB

MD5
60e80c05a9d6aa602626fec33cd99e3c

SHA1
7aeaac92d57fbabe5da2c923eb0ad1bb22e647ab

SHA256
5bd6a4bc514b2e697a0f0e8b7b8c0be0af34a9e1c25a628b286a5cdf8e1837d3

SHA512
838de7045b1ee4542d4145276b3fef5ba60dc10ed0066266bebb3e44c5485005d33dceaefb1cf3fd1fd1bc7364622bb85630957a243464c4c738a415b30adf7f

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\content.js

Filesize
36KB

MD5
d5e6dacf9aa3069e9241780cbc82d50d

SHA1
1b510f2e06b363b4b138afc409a811254f976dca

SHA256
4c3f64961a872731185c0db4d155c9db73f7885ec4596f15098857c5e1fe91f4

SHA512
a3485cd865098e0b6bad5b03936d8ca233eef42ae88f40d660e40a95cf8da1edc4788402c21cfce3eaf7084fadb35d121b1074e0e30adea4c01338aa1a327f39

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\adobelogo.svg

Filesize
749B

MD5
e7b1717b9eba236b9c12be7a980b5b40

SHA1
f1baa3f41ffa5dfff320b7e289964cec54f19a99

SHA256
2a48e8db0f3991de1088936f56c583fe615fae4b9e14f4ebe2b33d29138088f3

SHA512
9c8debe604372ac1fe3945579ee843f13df6f8d40f2c402590743009b39c5f80e859830fc422d7f8d447c4e30f1198584850de657facfaa2b84955d386563b88

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\alert.svg

Filesize
958B

MD5
332816d7725fc31725b678cff1cb6dcc

SHA1
876f938efb86c1bb1733b47ec279335de97576da

SHA256
8b5469642507c00b9130bf7ed17a1e4d221e2a93dfd4d2972163650c4e94d714

SHA512
5c4a678892b1a550a0c85e77f75c8b56febbfcd92c658dab198197ed17d7fad04d7b65f8adc17e095895366bf933421cae30e430e136870d3e02e9f89d115775

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\appIcon.png

Filesize
2KB

MD5
26e9b0fe7397d9c072da92fcf6951b11

SHA1
4ee24ef82e7ee4fcc980e3caeca90b6e0d99b59f

SHA256
e4c2314a50cf372465c97d955645455ccad1911eed45ff2c2de5a310316ab15e

SHA512
782b380a45eb82aeb69ae07938b9c0f211525fac4718c30b96c28d546a93be1cf000714df2375596cb6d237f3b3cc84f304fca73a732a7e044864ea329013425

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\cancelButton.png

Filesize
295B

MD5
7ae9fb845b9137ef10002fe9d0f5c643

SHA1
9f3fa2b29b1b40e1b6794e5d624524de297a8b59

SHA256
e9e5fc264337bf6845b2cf2720ddcde8936cb120328087917bf94c5911edd74a

SHA512
4420cdfbc47d2ac804f1c05840e4113b098ffc71e95e11ffe8f95342f5a75dc0f35fe8012984b0d645f1310b524f66069ae0c0fe053e0d601d39aded321c15cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\ccIcon.png

Filesize
550B

MD5
8d2c84506f3f48a810eb7232dc000d6f

SHA1
f4a238c1f7c02c7c907368b939efba7512c6be5a

SHA256
c4620bc8b293dd89db628d2002ef9fe02055e2d1cff1f07e18a3e2e4942ab7f1

SHA512
0fcca755a410c7ef4e6f056b7267aaf23d5063dd8230528fc3765ed1e3d12042c930f999a54498e754fcb3565df17636d7a5de2e95e142ae139d17a744ec93a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\ccIconDark.png

Filesize
654B

MD5
13b5f5e052334e0ad6d31845fc859e3d

SHA1
b71022382904d194a5d8f5cb3b1d0dd92e254b16

SHA256
87fd64c46642058fb6d7ae4ab2c71ba5df7ce12ffb8b9383edc7bb7a673f0306

SHA512
79e77ef0cc83c24d3d0f04a2340e248a8dd11469f43740b6453913648cf2c3c5592053dd4a5a34c81f3ffdfdd0fddc5953454ee0d44d3ac946b2ddbe17ada584

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\checkEmpty.png

Filesize
167B

MD5
d13cecc413374c4ddc22a9edacde8a11

SHA1
981295dd1f713584591716a6e753346b8a89215a

SHA256
b9c9ae215daf1bb5b6692f527375207aedc138891947e5f6c1c6b549c2ebf39a

SHA512
a717e64430a4680d09c555183c69705998fbec4cb8aa41ac6ad10df9fbd4f4e2243548689f12695760d5b191ed62a38a92558bc88a730004d7119dbe017c6241

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\checkFull.png

Filesize
317B

MD5
9f7974bbcc96f12769c1856045eb7bc7

SHA1
fa0b9b9d709718839ea525ab838260a4e124fb1d

SHA256
e7fcff2549114496e8141f46a7606f740bbadf22c9ad818c40d9ff9b9ea12198

SHA512
bc38c23791a8ad4e596e921bc5e391d39bea998434915d5c25b1b37015a089fe91ce9510774c48fbc91e52400c5843897a5780aa1c2cf5c8b73d3f89a2aa0856

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\dropdown.png

Filesize
224B

MD5
ee8599707751befddb2b94bc79525c15

SHA1
e118b48e25fe42d933377b03fb5a9a710e1c5caa

SHA256
c1f6844923f7c311d996d81eed6d8e769d52df6d95c898187d92997abbb2770b

SHA512
cdce6d59c807dd1d2b13af39e2fe078b0c0ad51b021dc30373e18bde2a807449051f3f9084afa15b2f6d943169c1bc246c7dbe6e965ddacacb961f67269fb548

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\dropdown.svg

Filesize
289B

MD5
4585f70294e7b625dcd1ea8c585067a5

SHA1
11c92ae523b0c588c5469814b0c3c7778cb3f133

SHA256
7e58a1cce147df03605a92ffda1b88ca26005c09d1eb9ae56f37accdebbfe348

SHA512
deb1ce83d9bdff93eff950ed267076e5e8a7bb43cd2dde28561c3d07f68094a9c99df594bf2fdcb38fddf9656cd51475108ad1b29f8c9d4bf197e6da5a093b03

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\errorIcon.png

Filesize
466B

MD5
7978536150734ceffaf0720837e8b302

SHA1
7c11361af6e41d00beffaf4ef9e677506b32164d

SHA256
5d10637927b7a623428560eaf18fb8eaf439cd8731199c3b4d251b9846841183

SHA512
da5bb4329783ba623e12d3dc50b2c080e8ac2aff4d4f25dc3e1d84561fd9b40b158570b98dd24618762562674fc1b7d10e081677f214ec859ecc5d0b477db0f7

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\folder-open.svg

Filesize
602B

MD5
3530c5040ac9af92cd0a7d347f764593

SHA1
b815ef3654ec2c677e8f8f68d8527b6d8142b4e9

SHA256
daf26ad61aee6152cf7c0e8f2d3936d0c220de2a3c329e6ce0fcc007cb64ca51

SHA512
0ce187a12445054e270337b6bdd6b035e8fadb3b0a4e8c822833c12431bb520340fa509ab3e1df564cbf67700b9ba78ee246689267878d386e88f709d10c1fbd

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\productIcon.png

Filesize
2KB

MD5
c798f5f4b98fd335a77e600ce21e32dc

SHA1
3db71eb6d87c8a4fcc6fded25d420cf7ea79231d

SHA256
9b249680adc23b858b08a62ea83fd8373e3480ff6f9120195314897c6e5f2cea

SHA512
f74351c5a9535920a81ee42f8caf82bb0c97664b6928f921b4bc74cc446ee61884b1620bce5e57abd6e1a3311d6f70c1f66c459ee4531cbf0197093feadd29b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\spinner.gif

Filesize
18KB

MD5
7699a4c54b1f5515a64e93fe3f801321

SHA1
2e51f7e1a331d921eaf15bd7dc9721a742984d47

SHA256
9146e2390273ac868609dac1be7f1a0458b7d4f7ecdfe1eaec107b3211f33aa2

SHA512
4810abfecc92866145a22f73639264574958d6db1157da0b6ff0472c14d8171ffc633fc6ba04843fcfd617ce4f0c19633475d2501ace48f8ee34ec8fa6fded87

Download Submit
C:\Users\Admin\AppData\Local\Temp\{23868A49-E276-4242-BFCA-C4329DCE22F0}\images\transparent.gif

Filesize
43B

MD5
325472601571f31e1bf00674c368d335

SHA1
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a

SHA256
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

SHA512
717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc

Download Submit
C:\Users\Admin\AppData\Local\Temp\{29238BDA-98DD-425E-8728-1F13D39D01FD}\Dictionary\en_US.json

Filesize
72KB

MD5
c693e1bd4feda683ae5c71f2bd6b9de8

SHA1
2f3c32dbb95623c52ebf3b608074afdfbcbf050a

SHA256
5dffe13d4c72f59dbc6f8efb439350518acd4e8e07efa124973cfd1a625f60d4

SHA512
a48c520b1432f208f7494759d316cf2411163373ef7ba5bb2b2121b4520beb2932d4ea612e9d2dc8997b6221fa2d44c9312928c79394a5d8c577fa39aa5007d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\{29238BDA-98DD-425E-8728-1F13D39D01FD}\clean.css

Filesize
702KB

MD5
4f3364af3e396f92a8826532bfb1a7e5

SHA1
7f7b613435ece78a358f2066287c2f2c3c6aa168

SHA256
45b9b77499356527e9047256db96a542a720bf075d67e9f6ba55d51fd562339e

SHA512
c022a28656483106095967ec4d57eb743d04f029406c2c553c9d19c103520e274c0eea19f411bdb7ae16f388211c456a413df5a0a6097036deb0010573d49c72

Download Submit
C:\Users\Admin\AppData\Local\Temp\{29238BDA-98DD-425E-8728-1F13D39D01FD}\common.css

Filesize
2KB

MD5
1265d497504870d225452b3309b0e06b

SHA1
29a3b783e6f2f2cd3f6d08833b83c7848f8e3450

SHA256
4273a5d4ef990dead6cabe760c27b25f7fcf8a51177f1b31813ad8866a565330

SHA512
9aa8b24e800a619651699c193a7747b8673a3cd4f8a5d3b16ee35f5ef6161f953a904631b97d118339332a3d2c7292c910802f6e1518db18d48fab5e9eb91681

Download Submit
C:\Users\Admin\AppData\Local\Temp\{29238BDA-98DD-425E-8728-1F13D39D01FD}\main.css

Filesize
16KB

MD5
ee23e36c90c9fccd530504285d371ac3

SHA1
7a4e24d18ec723d38cd922e3845ff290f0299e15

SHA256
32616e0764c80efb4607a0dccfec7cf7862886c4ae80e6405dc3cc5c62cd0f82

SHA512
542937075a96f6afb8170c6f41915efeec5e067803606c2a26d29e6c990d93a255ad8cea18600cd0825a0c91ff935d057870a1724062543a8e2bc09c4041b375

Download Submit
C:\Users\Admin\Downloads\Adobe Premiere Pro 2022.zip:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit