Resubmissions

20-01-2025 22:12

250120-14wy9asjhn 5

20-01-2025 20:38

250120-ze75jsxrgt 5

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    20-01-2025 22:12

General

  • Target

    https://uk.varsitygamehub.com/home/tournaments

Malware Config

Signatures

  • Detected potential entity reuse from brand STEAM.
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://uk.varsitygamehub.com/home/tournaments
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2588
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff80094cc40,0x7ff80094cc4c,0x7ff80094cc58
      2⤵
        PID:3408
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1784,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1788 /prefetch:2
        2⤵
          PID:3648
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2024,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2104 /prefetch:3
          2⤵
            PID:4616
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2160,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2324 /prefetch:8
            2⤵
              PID:3200
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3064,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3104 /prefetch:1
              2⤵
                PID:3180
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3096,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3252 /prefetch:1
                2⤵
                  PID:1064
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4648,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4652 /prefetch:8
                  2⤵
                    PID:3660
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4928,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4940 /prefetch:8
                    2⤵
                      PID:3136
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4952,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5036 /prefetch:1
                      2⤵
                        PID:3764
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=3228,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3216 /prefetch:1
                        2⤵
                          PID:4824
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3204,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3084 /prefetch:1
                          2⤵
                            PID:1428
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3212,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3184 /prefetch:1
                            2⤵
                              PID:4820
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4940,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5268 /prefetch:1
                              2⤵
                                PID:3840
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5384,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5160 /prefetch:1
                                2⤵
                                  PID:4724
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5420,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3360 /prefetch:1
                                  2⤵
                                    PID:1444
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=740,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4504 /prefetch:1
                                    2⤵
                                      PID:4688
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4416,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5180 /prefetch:8
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:1380
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5200,i,1559072476187712922,11215176802547064133,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3124 /prefetch:1
                                      2⤵
                                        PID:4508
                                    • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                      "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                      1⤵
                                        PID:3712
                                      • C:\Windows\system32\AUDIODG.EXE
                                        C:\Windows\system32\AUDIODG.EXE 0x00000000000004C8 0x00000000000004D4
                                        1⤵
                                          PID:4712
                                        • C:\Windows\system32\svchost.exe
                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                          1⤵
                                            PID:5056

                                          Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

                                            Filesize

                                            64KB

                                            MD5

                                            b5ad5caaaee00cb8cf445427975ae66c

                                            SHA1

                                            dcde6527290a326e048f9c3a85280d3fa71e1e22

                                            SHA256

                                            b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

                                            SHA512

                                            92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

                                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                                            Filesize

                                            4B

                                            MD5

                                            f49655f856acb8884cc0ace29216f511

                                            SHA1

                                            cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

                                            SHA256

                                            7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

                                            SHA512

                                            599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

                                          • C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

                                            Filesize

                                            1008B

                                            MD5

                                            d222b77a61527f2c177b0869e7babc24

                                            SHA1

                                            3f23acb984307a4aeba41ebbb70439c97ad1f268

                                            SHA256

                                            80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

                                            SHA512

                                            d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                                            Filesize

                                            649B

                                            MD5

                                            2e0140468be0c49f0eb86091564eee7c

                                            SHA1

                                            a19728f76a44559cad18c7a37b0a3ff5856aad8d

                                            SHA256

                                            45e6a26f38298efcfa5baa83407c06d12f17507aff8d3f271c35572868a601ec

                                            SHA512

                                            1addd360dcfdb48f5595b39e54959b97b678af4b629cfae760d5c32bedcbd83289f13db4496c4f09eec6882f0dcafc7952d1e3110fc4ec9363f545b576afa48d

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a7

                                            Filesize

                                            1024KB

                                            MD5

                                            6302d788d0d0361ab51a17c858bcd281

                                            SHA1

                                            95eed2d9df4d883a02c04366d6582a606fd7e10e

                                            SHA256

                                            8413dd82b086e77fc8f3c8208bc22b4d2dff5fe0884b46b8c6375eafbb5a9d5d

                                            SHA512

                                            8428f8d4bb8efc56547b764d691a2dc3768a6bf85bd27570a43a4d46a1f0ea4d0f53310e420768de25388f51c4cd41e1187e540910d67d4473603ac6a04e6e4b

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a8

                                            Filesize

                                            1024KB

                                            MD5

                                            0f278c099e8fc4883404a97f61c14884

                                            SHA1

                                            4664edb50870221e7173adebd87830cc4cb764f8

                                            SHA256

                                            b028b155dc3a6f6a966707442d9b1b4894f1a689e40be9482d65ea9669f8f82f

                                            SHA512

                                            a73b7b66805e7b494a4b65e34a16d85a2dc60713375b650c5e4efcbfdfdb6ec945684ea680988d138e48df0227490973c56766c6330833a2526bcc2bff5f4451

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000cd

                                            Filesize

                                            157KB

                                            MD5

                                            c8f4c0fff87e55599f47734e1ae5cfa6

                                            SHA1

                                            d935943a44889f7a97498efa60d128ce9fa278f2

                                            SHA256

                                            631a0db705b67dc5606287515e47a33423b9000fad9e66f19455fb10e1ca8423

                                            SHA512

                                            610151a2d94f9780a60d7bfb7799bf8365b46b0d4444e6bb3e24b7a30274d43e1a1ddf842a57803fc29345e09b04f4a73a39459fcb8127a2ed73da5fc8fb3f9a

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ce

                                            Filesize

                                            33KB

                                            MD5

                                            66c777c1df7df986bc91229fe7954756

                                            SHA1

                                            d145e8c449f345b7c4ba413b467f05a8cfa36837

                                            SHA256

                                            a4d6fa8fe0b24c62a3f9d088735eabc7a3ef86c728683d736d4cdcb92dfa729b

                                            SHA512

                                            4adb7025ca31655ce31d4758fbc4837872c5efc4fcf0e5ddcd400e32e38abb6a4c4323a1a420ad9ca1c909abef6aa678f9decf1ced82af5da6f09c70deeaf6af

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000cf

                                            Filesize

                                            107KB

                                            MD5

                                            c7788f08a12db4e81f30bdcdb8ff14e7

                                            SHA1

                                            e7faee8b261b301f9c8b903994b26f6dbee8407e

                                            SHA256

                                            89f989c60ee0357a62303da90eb2bc6219378ffc3e3f7d0ac063e48fc1269e5b

                                            SHA512

                                            3035e5e347264026f0d03e24b279cbb9468b53efc749fcc2a858d0bc95d96c4b8b1cb542a457cd7d682c7a83803adc0706bec3dec0ef5a1496048ba5e8707482

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d1

                                            Filesize

                                            212KB

                                            MD5

                                            302c0c0bc5fda63b9835373829a13384

                                            SHA1

                                            0d973e1531ae6adbfb589074ab525025e5ec86bb

                                            SHA256

                                            bc9ad62b7ad10d0c506a6f528c19fe5b70b747c88380ac7170eb4577ba8ae89f

                                            SHA512

                                            936c760ec1f4cfa4d79401fa3d8b957fe9ab3fe86bf656727d55da5b770ce95584f571d04f8d74ed10267ddec76a2777d9ec17c2b73c6b278ebdd285505d5070

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d2

                                            Filesize

                                            260KB

                                            MD5

                                            a3af4bf518df2436040c7593e9dde0cc

                                            SHA1

                                            0745bf7498a1e6ce8b5f636adb5df5fb3f24d093

                                            SHA256

                                            7497ee34f4af2b1b202bd069439e5f05eeb1a9e8db215f3f4ce019a8803a14c7

                                            SHA512

                                            2bc06c1e4f0f938d63746e8261d5127359e629d8975ed0734154c946501a70ca093b6dadadca7358090ce92423d388415f226df620e8fcf4ed3dec020aa9796b

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d5

                                            Filesize

                                            66KB

                                            MD5

                                            dec49a79fa2f842b931fec162a78d80f

                                            SHA1

                                            d0ae824ff117105d7cd37d04e4210c5b7979a527

                                            SHA256

                                            aafd72ae96598f27bcc0077e5f145fa3d0aa6a3c9e234d12000f69179d367346

                                            SHA512

                                            5689c699e574835abe63f65aeab1608550b9077cb0609f2915042f800b6093eb2adf3aa3a4a9c3adf66dedda2bd48ff55804cac545549757e3490dbf0f12b1e6

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d6

                                            Filesize

                                            68KB

                                            MD5

                                            e6a8f9e52296514a11cf340469bed893

                                            SHA1

                                            dbcda0b136af717d36deba0e29fc2809a9cea01d

                                            SHA256

                                            627289adf9ff4a90a8e9d57b9e55c401c02d06bbcadd2d304ec88e6e54f8ee16

                                            SHA512

                                            38446deab0b37297ab5f64fd22819a29f8935c057bbd8f4262cddfd5fc31110526930479a9bffba8c14a8e49c2c2e146289c346edf012fe83437b21184e790e5

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d7

                                            Filesize

                                            25KB

                                            MD5

                                            befe1afe57e8ccf9b2364c38f5b0ebe1

                                            SHA1

                                            04978735b9b26ec43c6795b188a3cfc0e0c4a638

                                            SHA256

                                            f0e6de0a6986fae03e352c00b76cc9ddd77e5e78e358fb89018f278b6d395ff2

                                            SHA512

                                            9fd0a687fe5f918b525e7ad00ebaf506f67efabff5575d1c63a2705db5c5fd6419c6e6872f5b86fa3f92217f94362581247aec25a5b2436668eca92d39d79975

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d8

                                            Filesize

                                            57KB

                                            MD5

                                            9e309fde9b473e1e6001ac8071363261

                                            SHA1

                                            0ff3f4740c14724afdbf49d40990e5f4dab2f2de

                                            SHA256

                                            0c3100da4604113d62c3eb2099d2cba832e3a024e688982c2cb4b376044262c3

                                            SHA512

                                            ea0f70e32236e19acb3e95dd6a2299d72e5afaa0656608793df28bf42029aaa37755ee1abbf9e19f55bba699cc730748284581abcacf20b4847a75878d93c2db

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d9

                                            Filesize

                                            55KB

                                            MD5

                                            7f8488ab41d11a861f54ce9dd0a005b8

                                            SHA1

                                            ff3fb0a386bd948d241fdc2c48a2f4fc5ef6f0bf

                                            SHA256

                                            e4a0e2b28759888f7248424417db7edd0780493697632d406ef1f60d630115d5

                                            SHA512

                                            2a23a194e83217eaccc1ed035477386974be9057714276c638334db8cdbd5f8557e805a0e80f86609c7ea4c5c739bf6f24b2e6852316c49f394e7af76fdefa5a

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000dd

                                            Filesize

                                            95KB

                                            MD5

                                            2925781a433cdc5603d0aa5891c961cb

                                            SHA1

                                            e6820222d44cd784e93fd135832a921baa51e941

                                            SHA256

                                            b1075c22d8c9054499b78df3d4b0d0e15cf6eab24676f507da1597b0d10379c1

                                            SHA512

                                            b0e21d13b27cf864125352ac084d111fb21674d2136fc7adade0e2ac13b919a613fd0f94865f7ec428cb978da05d0f565f9b66481618a1942379d90e27be22f8

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000de

                                            Filesize

                                            38KB

                                            MD5

                                            4cc574d36ad4c961885e3f1d18f78601

                                            SHA1

                                            9f8bbc0f714dd9a0d7f9bb5fc5f0579077cbac81

                                            SHA256

                                            98e9a5621331ad20b26fdcbaec37d7e99641f3e05d748891a1a1ce2f9db22bd1

                                            SHA512

                                            d7676aa2e7ecf48e1b9eecaca92db4799dac26ae00e9a91b7c02587529cad7dae7b98bf801b888403e5ed6940acf25a9095d4b9c11a85a5697ec2df1801e9a78

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e0

                                            Filesize

                                            46KB

                                            MD5

                                            d8f70f8bbd864148dcbc994ba96e17a6

                                            SHA1

                                            0525680b02e70ccbad2bb6c2730fa1540b8095c5

                                            SHA256

                                            cad3e3930719ba23634e6635d732c7a3cd61e808bdeae58239924b36e20cf4a1

                                            SHA512

                                            fd9040c9adc69f122b8b8c9aa2f13154dab59bcfc2e571a4aa0029bbaefe348272f31ce2d3c66b218b883bb45df18fccd500df69f6ef42eeafd821ec490cfc30

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e2

                                            Filesize

                                            567KB

                                            MD5

                                            72399f80551960388b15ec527ab92b41

                                            SHA1

                                            e6e0241e1b227f2ab9337a3f7ee861be854a6002

                                            SHA256

                                            7a6e41c4bdf13e1cae315cab0744982f96f3b4fb16f23ab87acfeca502d0275c

                                            SHA512

                                            2f057474becae7a31c3937566524bf07cf827cb3ae2aacc286f0a416b9b00c0b714d9275ac9261897a54c10a0ca07abe831f3e1cb72509e321f1ed942b05a79b

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            1KB

                                            MD5

                                            7e287d712456977f64dbf242f64b2a6d

                                            SHA1

                                            c29443a4461c7a711eadaac7a3fd41d1155006a1

                                            SHA256

                                            e0e038615eded1901d51e80953141c23a31d9d56ef6fb129774c695a23d33917

                                            SHA512

                                            8c98aeb5cc09e6c7280466f9c0a18342994671bee87a5d8550c573115093b9970eefe8679c87d0836d4b47791885a5dbefdeea670ed86dabfb64694c0c3d321c

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                            Filesize

                                            1KB

                                            MD5

                                            b8f2c1a09f37d2d1537c1df9955f9ca4

                                            SHA1

                                            3b81f54e6ac47b3553a465ce9ee1e89a992fe808

                                            SHA256

                                            fc65916e3cb1a5ecb26777ed397b18bd8f242c260d1d4716962e6fe42d965cbb

                                            SHA512

                                            cfe0b93ec045742a4458abdea3ef3da563d2b3f77ea337f41a5a7b3589d89c46752290cc1bddfa0e43ec20b8f5e1dcfb0943cbb60f2a2cf56f43c6a2e0f9fcac

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                            Filesize

                                            3KB

                                            MD5

                                            26648b742f07f3d557d5e48844ecb376

                                            SHA1

                                            cf6a057d994006baae9c3cba8c0329e8cdb36b34

                                            SHA256

                                            c267f98853fbfee0cdb261029f299bcd484fee48673a813248ebc5bbdcad96ea

                                            SHA512

                                            aadeaa122b1bc5d50dbaa36b6a91730f736ef534cce0aee7df6a80b41cf2f6487848310bebc20d3ddc37a2918e4fce96aef63b53a0a34409bb0fd87df5260953

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                            Filesize

                                            3KB

                                            MD5

                                            181d6e7a1202ea48a8ab33fe7d1a191d

                                            SHA1

                                            b13342a7769c440fc6e28fd95450558ef3c0819d

                                            SHA256

                                            dfc35e0c5e80a4b84b1cd1661a788baa1b0cdbab29e9f171ecd473aa0730a9f6

                                            SHA512

                                            e254b875beba820e421a63355375b2f80ad15020b3585fe884cc77f2ce11c6dc53d783030b8fbf89b8759cb38424fd331d6bbd02bbb8b11056e94a5e55d2d1f0

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                            Filesize

                                            2B

                                            MD5

                                            d751713988987e9331980363e24189ce

                                            SHA1

                                            97d170e1550eee4afc0af065b78cda302a97674c

                                            SHA256

                                            4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                            SHA512

                                            b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                            Filesize

                                            524B

                                            MD5

                                            7b12a231d8eb18b8441ec27e9f27d700

                                            SHA1

                                            f8f1c4d4ed8ae837ecc2342f427ed34060007748

                                            SHA256

                                            ae10a19e0ec5116b4a420118d9724281f98302a763f411d5e2cf5f5ffae0fd19

                                            SHA512

                                            3c60b29e54bc18a12a53725f1da4107e1b633e9e6fee61906607b5149c2075b75adc70c9e3d264e7648d21b3ce38490dc430538a1f4ebc2ef3b3d2a8390528c6

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                            Filesize

                                            524B

                                            MD5

                                            91c98a55c5c6f362e9a23a3a8c198caa

                                            SHA1

                                            51302bc4eeef61b0d0466721ca32beafde40b176

                                            SHA256

                                            c3bd5ee309498261d3b4224b407b7be1fa2b385bc3fddc35a095787bbf681594

                                            SHA512

                                            ed592040e22b358e6017476c5e2b60106b47c98c8191397121ae78411ee77b3fc996a1dc0a86d662207f9027c21c3571691601ec7661e010ab531f495fc60b2c

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            9KB

                                            MD5

                                            791533b5ea8d09818b313819771834ae

                                            SHA1

                                            ccc26d1566b7da635db7331099e3159294a2c4ba

                                            SHA256

                                            317c0c528c4d078479dfe5c3f3eb6ac6953450f2978cf0f96e3d3280e6d9de9e

                                            SHA512

                                            1963ec22c93730d71525c34b3de3c0dd9d2cd97b976b48723517c11dd72442fece5e574e99d61ccbd43e6c6b25aad3ee7a522cef1759f1c3d181507dea34711d

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            9KB

                                            MD5

                                            36ce901d109d55418125ae2aa0cc7ce3

                                            SHA1

                                            63ecd72f6e67af4a18b50be529713803a86866f6

                                            SHA256

                                            0abaf54373220327e96b61e01bdbde79c116f4769af3006279b4e4e924416ce9

                                            SHA512

                                            558d60e03921a4eef1dd47e2cf1041b517ee13dbc075aa8a23fa915da2b3208f2d71fcf58f8bb401d024116c2c821866ea9996eba1f7d69c847d1bdc0e66b215

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            9KB

                                            MD5

                                            6d876f5b01433ec7aab1a7ee3fe7a69a

                                            SHA1

                                            e7883dd72cba8651346efd58117f5a05229f966e

                                            SHA256

                                            f26a34ff7c2127d5e5f5382878d3d40a648439a462f14d2bb71864757d4e1f93

                                            SHA512

                                            b5095f0ce1e3d18a60091d4e3e41a95322006c4057bdce238de6faa9d615a1fe6a6ecfd92d9f0deb6fc4c348c25cba7313732269d41e9a148e4ff1bbcb6699cd

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            10KB

                                            MD5

                                            79fd5fbc86932fe4e70c3f018a1a96b9

                                            SHA1

                                            72d3edc4ba8d8f4db7d7c7df31989a7c889888a5

                                            SHA256

                                            b85888a897e099a97f5f20c54b9e1dedfaacb6c9777b50841ec7436ba709ee56

                                            SHA512

                                            5950d396eee1f2260dbed8f0190ef862d852562c67a7c9a9292be649fcfcb1a9367f993ea9267598ff097cd2b660d3299ae92e94984838652186a031ee968fba

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            10KB

                                            MD5

                                            76aa3b63136b8e6ee8d361f40feb5fa0

                                            SHA1

                                            8f2025261815069f8d14e6a3333285c8f1c45bed

                                            SHA256

                                            ff8167ec0e5c0fe10f6c603779747306e0d96a4b6fc8a7389b1d9d03052080e4

                                            SHA512

                                            6b5f27bf9b392e15612ab500362ca468a91eae354f2ba949c88053b6fc16b8ecf586f9fe028a2068e55d40af6bb062429d4db2f56bea700e4f0dea112a7c9fbe

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            11KB

                                            MD5

                                            28c124f7828c1dfbf1441e2cfdba4277

                                            SHA1

                                            dbd53baba24e60c1a5d99240b28d9ff253adb9a7

                                            SHA256

                                            7ac681b6124cb27e63e200e36dedf447f131989306ff9b02af3c9fd52a130541

                                            SHA512

                                            33eb4c592fcd48f713d3f6084774b6df8e93b94b683b84adc0394d2cf000828dca39d4a04029b263d4b8d2feeff7ec858cbadd0f9a8693f9558d45d6c3071b1a

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            11KB

                                            MD5

                                            c4ddbef5f2ebb8c434e7742c4c1c1cf2

                                            SHA1

                                            9f7c653b67d031d013c421b787a0b64020db7d83

                                            SHA256

                                            35708580eed3422e56b43c13e781032205995b73744603a3b7ad6b1c19055fdc

                                            SHA512

                                            5371be7aa2665520816cfa8ced978df3cf85911f2cbc4b7240428384149ab69af1b4536684af77d2e28df6d06a1feba1ca52bdccf3490a9d5e77d7cc2bc6a1e8

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            10KB

                                            MD5

                                            bd647251aa1583907bb61c2cc19b4fb3

                                            SHA1

                                            9abfd78e565b34f38fd119abee9f5c4f17d1b039

                                            SHA256

                                            83c56063cbada108578f2aa1065050b470a8d0e85c137d82bc7236989e0a2db2

                                            SHA512

                                            5c261a82d73a968a3279ab32d1d9c64d24b549916b2b26188b1ca2f313db4b1d535634f51c340178a8db5b0ed4d904f72f039f21a36c9681bc754534af073475

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            11KB

                                            MD5

                                            6caee17bc03501047f92c8f9eec6bbe9

                                            SHA1

                                            15486021653cc7e4e2a47de8890df1d6e9c9b5da

                                            SHA256

                                            0b4884865f27591a7cabd94dd510c628a3b56548247f0779e0a9fc3182f9565d

                                            SHA512

                                            e87c190c2aa96b2dbe6b692517000f880ecb9125a9b9fe237f83eb6af91d085b3596ab66e74dd1588a103466360f5fa995d38727ae4dde81adf7bb16bf7fe66e

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            10KB

                                            MD5

                                            be2df5b45c367ce6a04688e574734f6e

                                            SHA1

                                            f2a106c606a19a49a27cc1cf95a60235f876b88c

                                            SHA256

                                            5d4e7079be91d68ca6b28140bb5eb6d923aca1a50f0d9de09c53ae9d253fc30e

                                            SHA512

                                            e3c55e828fa36f6827b73aac1a5924ffaed4e743c84bc4a79decbdf213f2cd4f0c425e3b26f777ca56cd721eda67163cdb025e078c92d2394ee5484076307af3

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                            Filesize

                                            11KB

                                            MD5

                                            b51392f4a7b998a12779a049987bb6f3

                                            SHA1

                                            9bb4cf6fdbed9c649aed20d1a0fe38b33eaeb8fc

                                            SHA256

                                            66d5d35e7e357aae3b564c9de5c90e454810327842f5129b02fed1d23187b4cb

                                            SHA512

                                            6bf3042d0834f857f1a9742d22c178ec78eef2fdbf404bac76e427017f6eeca3364e221e03de11ad4ff12c7c0e373bfcf0c24b432b06207391bb4c4bc82e27db

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                            Filesize

                                            228KB

                                            MD5

                                            1b86c434fadbd7465ba3f12f0df3040c

                                            SHA1

                                            c521a74758501b94f3094f1c514a51cda234d59f

                                            SHA256

                                            dc51753f658e8947882e9ad599b4068dd4d406a6e86061085a4d7bf7462701e1

                                            SHA512

                                            b99642e2a9fc473e6f4d9d1f3100750c307a7f22b6c36688513ec2db78be6478d2a21eac034fc5f5be32225b6babff8e44a73d365e3847721d2018e6807a59b3

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                            Filesize

                                            228KB

                                            MD5

                                            b2caa6f2d191dc12dd964e65000cc00d

                                            SHA1

                                            0d4e93987d44fd1e2779a719c40f7942bd875b83

                                            SHA256

                                            2224d30c3149b12acc49bdfa361161707fab55439fda8803319b245ec283cf26

                                            SHA512

                                            b92c8d17077766504d7fac41b4e24ee5f993f3d46911abf4d9271a7de9ceb41f169717363f9b6351cbc840ad670ef151f5e14157944ed5505d5f9809284160b9

                                          • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                            Filesize

                                            2B

                                            MD5

                                            f3b25701fe362ec84616a93a45ce9998

                                            SHA1

                                            d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                            SHA256

                                            b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                            SHA512

                                            98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84