Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    44s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2025, 12:48

General

  • Target

    0.exe

  • Size

    71KB

  • MD5

    2a9d0d06d292a4cbbe4a95da4650ed54

  • SHA1

    44c32dfae9ac971c3651adbd82c821971a5400dc

  • SHA256

    09a1c17ac55cde962b4f3bcd61140d752d86362296ee74736000a6a647c73d8c

  • SHA512

    ed15670a18bffa1c5c1d79f1a5a653d6b2bde649164c955473580321f4ab3d048124c26e1a92e9d8ba0edaf754617d2d2c13d8db92323e09957b6de225b5314d

  • SSDEEP

    1536:jWZpTtLcWyeYd4//yEZc1GJf7/QP4uirySj5e:+pZTvnyEZiGJ7/QguiryS5e

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 4 IoCs
  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

  • Gh0strat family
  • Deletes itself 1 IoCs
  • Drops file in Windows directory 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 23 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0.exe
    "C:\Users\Admin\AppData\Local\Temp\0.exe"
    1⤵
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    PID:2584
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1932
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7119758,0x7fef7119768,0x7fef7119778
      2⤵
        PID:2156
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1204 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:2
        2⤵
          PID:2404
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1580 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:8
          2⤵
            PID:2732
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1668 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:8
            2⤵
              PID:536
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2252 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:1
              2⤵
                PID:2776
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2264 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:1
                2⤵
                  PID:608
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1520 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:2
                  2⤵
                    PID:2084
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=2924 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:1
                    2⤵
                      PID:1832
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3764 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:8
                      2⤵
                        PID:1536
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3988 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:1
                        2⤵
                          PID:1468
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=2944 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:1
                          2⤵
                            PID:1640
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=2560 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:1
                            2⤵
                              PID:2924
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3096 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:8
                              2⤵
                                PID:2404
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4040 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:8
                                2⤵
                                  PID:1780
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3796 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:1
                                  2⤵
                                    PID:2776
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4176 --field-trial-handle=1408,i,10831036823579222027,12192676578322273330,131072 /prefetch:1
                                    2⤵
                                      PID:2176
                                  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                    "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                    1⤵
                                      PID:2792
                                    • C:\Windows\SysWOW64\svchost.exe
                                      C:\Windows\SysWOW64\svchost.exe -k imgsvc
                                      1⤵
                                      • Deletes itself
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:1920
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                      1⤵
                                      • Enumerates system info in registry
                                      • Suspicious behavior: EnumeratesProcesses
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of FindShellTrayWindow
                                      • Suspicious use of SendNotifyMessage
                                      PID:2904
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7119758,0x7fef7119768,0x7fef7119778
                                        2⤵
                                          PID:2172
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1120 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:2
                                          2⤵
                                            PID:2088
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1352 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:8
                                            2⤵
                                              PID:2164
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1576 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:8
                                              2⤵
                                                PID:1296
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2228 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:1
                                                2⤵
                                                  PID:2804
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2268 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:1
                                                  2⤵
                                                    PID:308
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1908 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:2
                                                    2⤵
                                                      PID:580
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=2956 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:1
                                                      2⤵
                                                        PID:2092
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3812 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:8
                                                        2⤵
                                                          PID:2852
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3192 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:1
                                                          2⤵
                                                            PID:2692
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3832 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:8
                                                            2⤵
                                                              PID:716
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2536 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:8
                                                              2⤵
                                                                PID:884
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=2520 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:1
                                                                2⤵
                                                                  PID:2700
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2516 --field-trial-handle=1208,i,12863627813970825214,6887721958488625197,131072 /prefetch:1
                                                                  2⤵
                                                                    PID:2296
                                                                • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                                  "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                                  1⤵
                                                                    PID:2668
                                                                  • C:\Windows\system32\DllHost.exe
                                                                    C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
                                                                    1⤵
                                                                      PID:2164
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                      1⤵
                                                                        PID:3036
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7119758,0x7fef7119768,0x7fef7119778
                                                                          2⤵
                                                                            PID:2232
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1180 --field-trial-handle=1308,i,7612405781845860845,15704519662921836026,131072 /prefetch:2
                                                                            2⤵
                                                                              PID:2852
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1528 --field-trial-handle=1308,i,7612405781845860845,15704519662921836026,131072 /prefetch:8
                                                                              2⤵
                                                                                PID:2872
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1612 --field-trial-handle=1308,i,7612405781845860845,15704519662921836026,131072 /prefetch:8
                                                                                2⤵
                                                                                  PID:2688
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2296 --field-trial-handle=1308,i,7612405781845860845,15704519662921836026,131072 /prefetch:1
                                                                                  2⤵
                                                                                    PID:3220
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2320 --field-trial-handle=1308,i,7612405781845860845,15704519662921836026,131072 /prefetch:1
                                                                                    2⤵
                                                                                      PID:3228
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1488 --field-trial-handle=1308,i,7612405781845860845,15704519662921836026,131072 /prefetch:2
                                                                                      2⤵
                                                                                        PID:3536
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1360 --field-trial-handle=1308,i,7612405781845860845,15704519662921836026,131072 /prefetch:1
                                                                                        2⤵
                                                                                          PID:3700
                                                                                      • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                                                        1⤵
                                                                                          PID:3364

                                                                                        Network

                                                                                        MITRE ATT&CK Enterprise v15

                                                                                        Replay Monitor

                                                                                        Loading Replay Monitor...

                                                                                        Downloads

                                                                                        • C:\1609800.dll

                                                                                          Filesize

                                                                                          64KB

                                                                                          MD5

                                                                                          45dc749351fd65d71da89ca2ed2766cb

                                                                                          SHA1

                                                                                          e080faf81157b7f867cb56938c5e579c206af9b9

                                                                                          SHA256

                                                                                          391109432ba2df9f3ebc74e0144f42a490405f7c8ecb51da01b4ce793be72f25

                                                                                          SHA512

                                                                                          7e63d8778a4656a19397849a6edb483993f1183257fb8c0793ad4b5c625ed69d1b9472969bac6dfc98938e19baed7e3e61ab80085a1a6edd8a50ca660ce3bf74

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\53a6499e-9874-4723-a14c-a3e5d5ca35fb.tmp

                                                                                          Filesize

                                                                                          356KB

                                                                                          MD5

                                                                                          9f6af39263e728c646fc476e5fdd71dc

                                                                                          SHA1

                                                                                          562dfbf41acc0d07b491b5fe60ee7a0c58623c4c

                                                                                          SHA256

                                                                                          6b309cc7afe67841a6e0fa1dd3ecd7294ce9dfdf8911261c140c154668a5aa5f

                                                                                          SHA512

                                                                                          5483788d86a8d18313ba501924db13da195c33738e562f3f51ba92c434e9301b5f93e727e121327ae4bfafe1e315789f7e6e6e4e777c777e1050b9a5b8c27888

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

                                                                                          Filesize

                                                                                          40B

                                                                                          MD5

                                                                                          ade370d72a5e4a9155639bd6aa7522f6

                                                                                          SHA1

                                                                                          1f3fd4c8c7c358053efb7a665155bfced357badf

                                                                                          SHA256

                                                                                          3fa4c0d6a158c0cf88ab17ad09018739515eefc3ff31bffff3414cd50c4a73cb

                                                                                          SHA512

                                                                                          5723284b5ac7e7c953f0582598d34b302ce620bcd0f9a4261bc364ce033669eaaee298c47f4a17940710f3e656c7e160c0dc0638b839317e7221427332ef076d

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

                                                                                          Filesize

                                                                                          214KB

                                                                                          MD5

                                                                                          ba958dfa97ba4abe328dce19c50cd19c

                                                                                          SHA1

                                                                                          122405a9536dd824adcc446c3f0f3a971c94f1b1

                                                                                          SHA256

                                                                                          3124365e9e20791892ee21f47763d3df116763da0270796ca42fd63ecc23c607

                                                                                          SHA512

                                                                                          aad22e93babe3255a7e78d9a9e24c1cda167d449e5383bb740125445e7c7ddd8df53a0e53705f4262a49a307dc54ceb40c66bab61bec206fbe59918110af70bf

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                          Filesize

                                                                                          456B

                                                                                          MD5

                                                                                          a5a583e71d8fb5a243f1e4267977c0d3

                                                                                          SHA1

                                                                                          86448e59d52f066f03110ec7066685864b04bed3

                                                                                          SHA256

                                                                                          b62c2405efbe166341dbb1f0237fc36e23c2a8eda99816ab47a41d40bba3af98

                                                                                          SHA512

                                                                                          1894de168feeb345dc708de40c73ea8abb42d89021f876adcfb05a270ecda552adfca2b572e9e552f361af80d3aef91a32776d90c2d929d677be3b6b61ea9b57

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\000011.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          6de46ed1e4e3a2ca9cf0c6d2c5bb98ca

                                                                                          SHA1

                                                                                          e45e85d3d91d58698f749c321a822bcccd2e5df7

                                                                                          SHA256

                                                                                          a197cc479c3bc03ef7b8d2b228f02a9bfc8c7cc6343719c5e26bebc0ca4ecf06

                                                                                          SHA512

                                                                                          710620a671c13935820ed0f3f78269f6975c05cf5f00542ebc855498ae9f12278da85feef14774206753771a4c876ae11946f341bb6c4d72ebcd99d7cff20dcd

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG

                                                                                          Filesize

                                                                                          136B

                                                                                          MD5

                                                                                          4a5b23eb947ec79cf463f1ee0b78e6da

                                                                                          SHA1

                                                                                          086a72cf65b358a798adf0d5f6b4f26175dae078

                                                                                          SHA256

                                                                                          cd8170c574e3441a52caac922e8bc705ae2f2a48bac1d55fa9e03b3d0b80f9c9

                                                                                          SHA512

                                                                                          bbb3d8735071ab637f52287448d426f846ba305c2de5335143f74b208b31031a8e25cb472e3b3bd8f8ece947540fba992c202a2c762479e74170d3f0304798f6

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000007

                                                                                          Filesize

                                                                                          50B

                                                                                          MD5

                                                                                          1be22f40a06c4e7348f4e7eaf40634a9

                                                                                          SHA1

                                                                                          8205ec74cd32ef63b1cc274181a74b95eedf86df

                                                                                          SHA256

                                                                                          45a28788cde0d2a0232d19c391eae45777fe640790ac0674d6daa5672c444691

                                                                                          SHA512

                                                                                          b8f6f42d375e3ad8015d744fa2814994fa6e588b41cce0131fca48194dd40146b08169a8ce0da350525ff32a59a16edb503c72e0f07254955c82a0d38074856e

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons

                                                                                          Filesize

                                                                                          20KB

                                                                                          MD5

                                                                                          d7c147ee86080ae90bd539ea6cbff395

                                                                                          SHA1

                                                                                          51e4e44c9b57843bcb86fbc1515e05c6ebe86ddb

                                                                                          SHA256

                                                                                          cc4091b3f02cb8afe96f2744dce559d2a3a0ecddb229265e9302f72e34e075a2

                                                                                          SHA512

                                                                                          664f3994dcf3aad866fdd53f43f4516d738c22f09dda171dda9900c9a852d58b16b515d8d039f2f55000025628b79aa9f52ba3085fa27cd5f4b8d226f25fa013

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          aefd77f47fb84fae5ea194496b44c67a

                                                                                          SHA1

                                                                                          dcfbb6a5b8d05662c4858664f81693bb7f803b82

                                                                                          SHA256

                                                                                          4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

                                                                                          SHA512

                                                                                          b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

                                                                                          Filesize

                                                                                          148KB

                                                                                          MD5

                                                                                          e4e178f842d8567208a526dc5e87372d

                                                                                          SHA1

                                                                                          1316b72ff2dd14a2ac73b84fd0b875395f0275c2

                                                                                          SHA256

                                                                                          11ac4eee020c187a105378b69a86df0887b6c018e921e2f9fb47fa0dfe7f4de6

                                                                                          SHA512

                                                                                          c0b5030921e70b8aeed4d30ee5085f212245057ab260bc6bfc386f9e56f6cb92f91a92ae2b5443839b6f15e35ee9070466f71a71ddec8b4ea5442d52799bc9d6

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT~RFf76e791.TMP

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          46295cac801e5d4857d09837238a6394

                                                                                          SHA1

                                                                                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                          SHA256

                                                                                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                          SHA512

                                                                                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG

                                                                                          Filesize

                                                                                          136B

                                                                                          MD5

                                                                                          189d7edb1e591ca0dc4fb0144bfd32e2

                                                                                          SHA1

                                                                                          0aab31ce6d46dec02ab85cce2166382a02c2daee

                                                                                          SHA256

                                                                                          69117ec82a2382cfb8fce8d18c38ffabf5b86197c6fdcf03976b822ad32dd277

                                                                                          SHA512

                                                                                          ece43f12ac8d6a0f9c7a9396a893cce85ff46b3cdb9cf5d6e51a3720d541cc37226b0616aa5696b2540af27d0fd23815a5be879596bc9a7af13ed0e8eab98663

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                                          Filesize

                                                                                          3KB

                                                                                          MD5

                                                                                          d4a69a5cb54cebd237beb0caf40e0403

                                                                                          SHA1

                                                                                          91234b9aedfc1e6c6ea0df0ff2667ebb284ac2e8

                                                                                          SHA256

                                                                                          ebd6cc63c67a61b012d45f7d4b98663723cbfaaf3ff59d1cd167e8a349850514

                                                                                          SHA512

                                                                                          def6dc25dbb74845fb1bff7eb31e458a17c3405dbdac61f13a1ab61f2294a8ced47d22abd8b1c286f2693b40bd28185457894c5f21ec83f8ad73008376b0030d

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                          Filesize

                                                                                          1018B

                                                                                          MD5

                                                                                          54dfac08cb7091c30ed7f0a18f47e38c

                                                                                          SHA1

                                                                                          de97ea68eb9a56e901d5e8770f08d693931b3a80

                                                                                          SHA256

                                                                                          ef5c6e88358bd7941921f8e6b4e60a5bf157a1551ebf0bfcd8061360b054a833

                                                                                          SHA512

                                                                                          5b3c93dd4437b98849adb934850dacf494efc90727caa2acd3f5467401b4236be000c5173666d2c17c61176df145644b8ac2d59acce83a7320d19b3c02772da7

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                          Filesize

                                                                                          855B

                                                                                          MD5

                                                                                          fe01d6b619e475f66475241fd36fd1d2

                                                                                          SHA1

                                                                                          8032ea004742935756fd6cce1e2a4c365845b9ad

                                                                                          SHA256

                                                                                          9933d2651c3c528d34874ef8ef586754029ffce93d5de7ec218c6248fe9d880c

                                                                                          SHA512

                                                                                          5f379f324cabc80d121a75cf1529198571cf3323d4eba1853f1cfb2fd6d66a5442db55b3ae436f5f4184122a1953e65b30e057827aeaea4334dabb51eecf806a

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                          Filesize

                                                                                          1018B

                                                                                          MD5

                                                                                          c4fb3ca2d92c5a3d4b9605da09640d3b

                                                                                          SHA1

                                                                                          1693ab49749d8faf335b3c5909d67c53ae5dbb65

                                                                                          SHA256

                                                                                          83ad87586762cdac921652bd9809d70d30777e3bfad3c7fec39ba8105fee26b2

                                                                                          SHA512

                                                                                          917bab86f57f49171ce3a82e4f2e1d8248fda70fe7aaddb99a15a47cdd7fa5ef6d2d1393bbc7c0d5fbf7141cb2562119c09b2a02b1e80316fc4cda0ce235a93f

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                          Filesize

                                                                                          1018B

                                                                                          MD5

                                                                                          675c7ab04cbe8cd0f67bf24b6c3a2144

                                                                                          SHA1

                                                                                          867e520acce54eafa6460f53dea9cd0a73cce4c9

                                                                                          SHA256

                                                                                          7f6312bbffa782b28993129275ae8f32dc186425136cb369da589c5f6b70e94a

                                                                                          SHA512

                                                                                          5a2eaa00b5bcd60ef901d36cb2f055049e2c47156dbfbe3c82b1581a9505585631f2ba0c1d47985194439b4716daaf5dbab82e38b2a7d73776d6fd4540091996

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\000004.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          6752a1d65b201c13b62ea44016eb221f

                                                                                          SHA1

                                                                                          58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                          SHA256

                                                                                          0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                          SHA512

                                                                                          9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG

                                                                                          Filesize

                                                                                          191B

                                                                                          MD5

                                                                                          13a91f2541b641cc9d2122f0edf18d1a

                                                                                          SHA1

                                                                                          d434b5a124b95cb5272c159fabf6319fd1291d87

                                                                                          SHA256

                                                                                          4b5db93eb58bfa8156a1870c0a8b00f12a6d104a001d9ec160dc333338a1e265

                                                                                          SHA512

                                                                                          2b9d1af29f353a5dd56b485d26bfd7d72a11eeb1cdf69537a006a1ca14ca49dcc452556776bc3ad224dc69df4c5f8badd16e524456b3a1647815d650c787ff02

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\MANIFEST-000002

                                                                                          Filesize

                                                                                          50B

                                                                                          MD5

                                                                                          22bf0e81636b1b45051b138f48b3d148

                                                                                          SHA1

                                                                                          56755d203579ab356e5620ce7e85519ad69d614a

                                                                                          SHA256

                                                                                          e292f241daafc3df90f3e2d339c61c6e2787a0d0739aac764e1ea9bb8544ee97

                                                                                          SHA512

                                                                                          a4cf1f5c74e0df85dda8750be9070e24e19b8be15c6f22f0c234ef8423ef9ca3db22ba9ef777d64c33e8fd49fada6fcca26c1a14ba18e8472370533a1c65d8d0

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          7c4b4859c5a4645f0a3feff0d6ccd9eb

                                                                                          SHA1

                                                                                          f9cb90073d23bbdca8d1010872bd7b9f63d60f67

                                                                                          SHA256

                                                                                          0665eac2fdf3bf86c2d4dedb7a56e0b7ace87a8f4e894a5a65f46d501bf61a34

                                                                                          SHA512

                                                                                          fee49aab82f1a35505741a9990a6b2d80f411605a54f7cdf004941bde1401e5aa2cf6ef324ad3998b740282efd10a8b98a6bb17001644ff49f2f2c35830e4431

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          ce256c601cf797e9cdcaebe80fc662c2

                                                                                          SHA1

                                                                                          8f8f2ea30a559ba14e8b15800a3cc58743dbcecd

                                                                                          SHA256

                                                                                          a87bf1a8a57903e95b9fd20c18c0f22215f4b07b88601d94274e37df9820250d

                                                                                          SHA512

                                                                                          110d633712420a9387b0d7d6785cecb2536323a9c84a1266ed4bdc54ff4f15ebada55b3a3eed169edad65e62111842e2a8bdcf800e4864c125f7e5367ce9dd84

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          34345545b4695df83f6a1576d6c333c1

                                                                                          SHA1

                                                                                          0c7d74ab36656887b439cd9ee8ea3c3ca0f499e8

                                                                                          SHA256

                                                                                          c418a909b38c7253432e5f2433c07d99440b1488e0baed2ba295712bcddb7da4

                                                                                          SHA512

                                                                                          c8cc4652b743f268c94bffc265bcd39227d2c87a2185ba6d0963a3aae7d44cbb5d426be3c4ac3854dc2766005fe378a3d03e4cb999bf3dd2bee599eff283d134

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          b5879fb39d58c3e98186f86369dc8e8c

                                                                                          SHA1

                                                                                          db7cd769e4d285b6c52e3ce1a11b1827a847d374

                                                                                          SHA256

                                                                                          8c39cbdfa1e655dac4cdcb75af304e0b56291eace3c017eb66ac6f460594a324

                                                                                          SHA512

                                                                                          8ddbfc6b1741c1156529a0630ea6fe23e8d7767406beb05199f558f5360cc00f8af7f0741c6729c4e9cd8f5b49f64b06f6a0429616062d53f69f25e4ea48c531

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          5KB

                                                                                          MD5

                                                                                          1f160993f569d5b23608e3a5c3433c7e

                                                                                          SHA1

                                                                                          e0290aa091b19a75f177e9d8d133575c685d5b67

                                                                                          SHA256

                                                                                          6130b76b6395f9c396dd8b8f6882f903fc5113ca2bf491c41f9a9fb99af9d773

                                                                                          SHA512

                                                                                          1d69e2663e2b7689160fc118c869900e830c4af87077630b1ae453caec9e42206e71942bcf53826102ea7c39aa26b01f82b8e117f8fa9131a4e734edba3b0f23

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                                                                          Filesize

                                                                                          176B

                                                                                          MD5

                                                                                          461a423d4ae7eb83cc1265099c814f31

                                                                                          SHA1

                                                                                          9977a296aa3e43c3b6d87ee22c2734a4b5f8a30d

                                                                                          SHA256

                                                                                          0f33f44aca49285687d7ad3d697ed8ce6c2271fb827b23ecc888d26ecfcf59c3

                                                                                          SHA512

                                                                                          cef4e5bbac72d49e96f72bf086714fabc1d81fb469e45efcc56582600d18e44d53ea8d3deb77a1b62999c1ab2a5425c30f6bbaad1e900feef1f8143aff5229f0

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                                                                          Filesize

                                                                                          112B

                                                                                          MD5

                                                                                          5558946502fc5bb26cd6f94f9d7bd57d

                                                                                          SHA1

                                                                                          fb9ef371843ffd1644d984d0f9ad8486f58e22eb

                                                                                          SHA256

                                                                                          13dc79c25375a7c1ec6e13d4463bd6348076719973079f42944581358743c745

                                                                                          SHA512

                                                                                          59c9e6acac67b0675d3cf2ff2824edcea188a44da25cca62bee581dce43fdbbac3674c52384a3971ef333b44d785a0806fddda27e5931701eb6b432fae7fb18a

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000002.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          206702161f94c5cd39fadd03f4014d98

                                                                                          SHA1

                                                                                          bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                                                                          SHA256

                                                                                          1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                                                                          SHA512

                                                                                          0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log

                                                                                          Filesize

                                                                                          937B

                                                                                          MD5

                                                                                          d4aba10024d6fc27c8184304cafbbd43

                                                                                          SHA1

                                                                                          cbd3bccfd5cc3c5e7c566678ee1beeb01873920a

                                                                                          SHA256

                                                                                          7accfbb368109bbc57be8aa0c7af6befbe8fcf9711577715d5a7483a4853d97b

                                                                                          SHA512

                                                                                          458ed5ebba79062a6c7bee394d618cbc293f39e0dbe8b5e7d45ee301acf02949e52fbaf97ccdd7f1415c4cbec7f10f7f1a1919ec0ff564d4ca7df2f07944046d

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG

                                                                                          Filesize

                                                                                          192B

                                                                                          MD5

                                                                                          1dc360996ab930e7b06777103b422a1d

                                                                                          SHA1

                                                                                          f42214b3a15516947f516a10f4f2f56b1a704195

                                                                                          SHA256

                                                                                          07b61d01fed1c06d18de14f36478a9799d8329816d7d91bff9b99bc3a8e0cf06

                                                                                          SHA512

                                                                                          c5e70c2ffdf1480f0007534041590f3e895b10cd3ab2efc90592c620611e92c8a4cdac130ba4728d8c24a6cf359213bb93258a88a454dade1c7f85f727a8f96b

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG

                                                                                          Filesize

                                                                                          247B

                                                                                          MD5

                                                                                          c068e8b3e0554773803e1721c2bb3b15

                                                                                          SHA1

                                                                                          54009bb3266653efd0c7322a4d8613124837e257

                                                                                          SHA256

                                                                                          d17a9610d0e48e4ad40fd599107f3c2df02ab8e05a9d59b419461777646cedce

                                                                                          SHA512

                                                                                          edb753a8c773e3d2e9ffb13b4cf59507a12f2f6f269993e983270c28d1a7a9e694255aa4ea069d76ed85c58e442965b86ab904c4968159f13a7c78a8eb2e71b2

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13382542157039000

                                                                                          Filesize

                                                                                          5KB

                                                                                          MD5

                                                                                          d594eb23a9809ab5ac5ec7317e89bc3a

                                                                                          SHA1

                                                                                          9137cba711a9070e38a75a54ce6e57817cc96429

                                                                                          SHA256

                                                                                          172908641ee2bb73e7e21872f4d68e10f9d4a8f35dac0af474fe8d8fd31523b4

                                                                                          SHA512

                                                                                          443ca0790b546eaa89931850ca85bb25d668cc122396393b7e72f4920c95b75c7a10237feeba9d4e676df33ca23ea1d991d765af68f1ccf078e7a16e942ce11b

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000008.log

                                                                                          Filesize

                                                                                          72B

                                                                                          MD5

                                                                                          c8769ee25bf2c2b727402a49334cd687

                                                                                          SHA1

                                                                                          1bd2bb5b863e1f5ebace14a32750fcff7997cb83

                                                                                          SHA256

                                                                                          f7b32bbc65dabf6b98291a5b45687b3e1895a6be83433b507842ded130cb77b5

                                                                                          SHA512

                                                                                          7041b92237a2fbf4ef27ec457cb7a6c68cc5ed051947f7f8998c24f7bd5055520b89dd3fc7521cee96e87a25431e90a5512e4b573e0ef6e90c4ca7cedc80c9f0

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\CURRENT

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          979c29c2917bed63ccf520ece1d18cda

                                                                                          SHA1

                                                                                          65cd81cdce0be04c74222b54d0881d3fdfe4736c

                                                                                          SHA256

                                                                                          b3524365a633ee6d1fa9953638d2867946c515218c497a5ec2dbef7dc44a7c53

                                                                                          SHA512

                                                                                          e38f694fd6ab9f678ae156528230d7a8bfb7b59a13b227f59f9c38ab5617db11ebb6be1276323a905d09c4066a3fe820cf58077ab48bf201f3c467a98516ee7a

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

                                                                                          Filesize

                                                                                          136B

                                                                                          MD5

                                                                                          e76c2c9a44bb7c63f621bda7e2cc3757

                                                                                          SHA1

                                                                                          f0bf9a5057058a99cb7b75ad55f26880f9d145fa

                                                                                          SHA256

                                                                                          2dce8156cc40ff012fcc03eb5ab989fde925c11d4a3b9b7fcec2c81ac593a706

                                                                                          SHA512

                                                                                          39a110652e88d67f69cdba6c3a9267b801a67c0aef3d7e451e544d16c5c419cc45aecaa44e9d5885aa1986faf36f34bd5ecad6d468aa7622c1b5d719f2efb380

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\MANIFEST-000007

                                                                                          Filesize

                                                                                          107B

                                                                                          MD5

                                                                                          22b937965712bdbc90f3c4e5cd2a8950

                                                                                          SHA1

                                                                                          25a5df32156e12134996410c5f7d9e59b1d6c155

                                                                                          SHA256

                                                                                          cad3bbec41899ea5205612fc1494fa7ba88847fb75437a2def22211a4003e2eb

                                                                                          SHA512

                                                                                          931427ad4609ab4ca12b2ee852d4965680f58602b00c182a2d340acf3163d888be6cfad87ca089f2b47929ddfa66be03ab13a6d24922397334d6997d4c8ede3b

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          18e723571b00fb1694a3bad6c78e4054

                                                                                          SHA1

                                                                                          afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                                                                          SHA256

                                                                                          8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                                                                          SHA512

                                                                                          43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000009.log

                                                                                          Filesize

                                                                                          5KB

                                                                                          MD5

                                                                                          9833f04ca3e868e840397316091d79aa

                                                                                          SHA1

                                                                                          02faea369e3858222441774ea897dda3856f9664

                                                                                          SHA256

                                                                                          55146daec9cb3838c8c7cbe0039a2039e6cd2e1b3006b052d027e212615b275b

                                                                                          SHA512

                                                                                          071b6b76c83258232b683acc3e369eccf6121b04201321e58abbb7fac866e0658530c5df6847b62dcf15d04d8da86c776e6edc92013dc9c98b7ba8fd823ef39b

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG

                                                                                          Filesize

                                                                                          250B

                                                                                          MD5

                                                                                          00fc7bdd3fee51507ed11012b62803bc

                                                                                          SHA1

                                                                                          7f46a358d691118de16059565a81a0e41f319d72

                                                                                          SHA256

                                                                                          376644513b667657c7f3d92359d40f568b61db1cd000bb4f1ef61450a9fbcd51

                                                                                          SHA512

                                                                                          553db72df8b928961b0ab7ef9ddb598da2d6e4a46de5fa535577021eb5dfe9c138f36ae3ea3f48ebe8616416edb4628a432067dbbeb668366de0d65076bbf46c

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000007

                                                                                          Filesize

                                                                                          250B

                                                                                          MD5

                                                                                          f3e5497105538916a4a27e319681c079

                                                                                          SHA1

                                                                                          1b92c17f1ba7e66ea9058eebfb21dba1acd840fc

                                                                                          SHA256

                                                                                          697b7d0935fef557c883d53fc8cecb0567c652b495e645d609180b06a43ae9da

                                                                                          SHA512

                                                                                          c9aa65f6f740f04bf8e60a04da403bd5e8fe7f3c219444d94ae0afa17c8fb7f3d742a9ea3fa69e538616d4610b151b3cd9cf0dbc568cedaa1c42736ef796c0ee

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Top Sites

                                                                                          Filesize

                                                                                          20KB

                                                                                          MD5

                                                                                          9135052ced8562397226d5b41e743e45

                                                                                          SHA1

                                                                                          0cd36b73091118b3bf58892396abbd2c2f60f0b8

                                                                                          SHA256

                                                                                          78229b6c8e23e1c9ca9598b745ca5456e236867a866d632dbe988e1310086fae

                                                                                          SHA512

                                                                                          76ca0e58495fbab3dcdcaf768605267729622491ca651f992e662362f262bf4b924b0887a3657553a3cedeadeaf4712260153fd42cbb2f38e736af49ff963492

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Visited Links

                                                                                          Filesize

                                                                                          128KB

                                                                                          MD5

                                                                                          efd72c48de3adb544a985cfdcdbc2220

                                                                                          SHA1

                                                                                          382f1026e610caf3493796080f543ea7d61b8bac

                                                                                          SHA256

                                                                                          b882c9703d6a0eb7b23f5d5ddf5fa5b514c5d73509f2792dd3cc555dfa708b30

                                                                                          SHA512

                                                                                          d3e00524950182a28cc73b34b731925ada58be7173886b8222ab0db74446215f04b2902f8b6765eb8585878e32cd79b0942e1e5d04dd109bed24243487dc034a

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data

                                                                                          Filesize

                                                                                          92KB

                                                                                          MD5

                                                                                          9933e69994be60b6de8ed408e350db87

                                                                                          SHA1

                                                                                          86d564a42723fb5ea2d617d654cbecadf4572539

                                                                                          SHA256

                                                                                          bf3e5dfd9097810319f936488a35601c0bb2b79630038afc5c490ef95356f457

                                                                                          SHA512

                                                                                          40fd322ed934c6feb3036a0feffbd1d2e778565efe4eb43dd8c3249875523bce8130055ec80970be76f4ed768352047c8b36befd86e8844a50c6da069b4b82c7

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\dd78d4fe-6611-4a41-bcc1-6f0c33902a54.tmp

                                                                                          Filesize

                                                                                          1B

                                                                                          MD5

                                                                                          5058f1af8388633f609cadb75a75dc9d

                                                                                          SHA1

                                                                                          3a52ce780950d4d969792a2559cd519d7ee8c727

                                                                                          SHA256

                                                                                          cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

                                                                                          SHA512

                                                                                          0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000009.log

                                                                                          Filesize

                                                                                          92B

                                                                                          MD5

                                                                                          9ac5dc420a22849d5ddb42c31ede7dca

                                                                                          SHA1

                                                                                          d63dc64a6a655a06a47df6dcbb192c7a92d2e085

                                                                                          SHA256

                                                                                          c91252f5377757ce8cc957f08b3e337fe808b69cd36b57729d4195f5a17bf33c

                                                                                          SHA512

                                                                                          cd1e773f0c399b1d39540d641cef97e0fd2278053bd0391a3b4b099c5f4820d910cccf45ed0d02fe3ee3f8dc5af31bad8523b7999456056e9b313f867911f92f

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000010.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          60e3f691077715586b918375dd23c6b0

                                                                                          SHA1

                                                                                          476d3eab15649c40c6aebfb6ac2366db50283d1b

                                                                                          SHA256

                                                                                          e91d13722e31f9b06c5df3582cad1ea5b73547ce3dc08b12ed461f095aad48ee

                                                                                          SHA512

                                                                                          d1c146d27bbf19362d6571e2865bb472ce4fe43dc535305615d92d6a2366f98533747a8a70a578d1f00199f716a61ce39fac5cab9dd67e9c044bc49e7343130e

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000013.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          a6813b63372959d9440379e29a2b2575

                                                                                          SHA1

                                                                                          394c17d11669e9cb7e2071422a2fd0c80e4cab76

                                                                                          SHA256

                                                                                          e6325e36f681074fccd2b1371dbf6f4535a6630e5b95c9ddff92c48ec11ce312

                                                                                          SHA512

                                                                                          3215a0b16c833b46e6be40fe8e3156e91ec0a5f5d570a5133b65c857237826053bf5d011de1fcc4a13304d7d641bcba931178f8b79ee163f97eb0db08829e711

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG

                                                                                          Filesize

                                                                                          249B

                                                                                          MD5

                                                                                          e533c429cb033ff501621aa55cc991f7

                                                                                          SHA1

                                                                                          22fa464a348b3af84ab3a6a24d14ab52b13c9cba

                                                                                          SHA256

                                                                                          b5a9b644faed154615f9d1b7966927fb60dc5fc0f5046b9ccc00c3501c41fdf9

                                                                                          SHA512

                                                                                          3ebac38eb88037687b73c539a6495c7551f0e6be39e1d78b304d3ab5a55e4b2f0640805ec56ddaa84e112e16d53b84ea393c1595de3c74731c8cf33624476c3c

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\MANIFEST-000007

                                                                                          Filesize

                                                                                          118B

                                                                                          MD5

                                                                                          d757e9f525200060aefbd2e00bc69809

                                                                                          SHA1

                                                                                          ae551809c3435fe3e6716b76dc23b7294189b4ce

                                                                                          SHA256

                                                                                          729406f9e7c1e50d927d0c6916ee0a97eaa26c46e6cdecef7580e61b8c0dfe20

                                                                                          SHA512

                                                                                          50c15062061f449952bda82a8b0cd4bafe6f3f434f642fadb8017e65c09886bb4d0b52967c80f8fa380447c63d79b6518f605a3efe7d8eea40c2dbbaa0d41953

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

                                                                                          Filesize

                                                                                          14B

                                                                                          MD5

                                                                                          9eae63c7a967fc314dd311d9f46a45b7

                                                                                          SHA1

                                                                                          caba9c2c93acfe0b9ceb9ab19b992b0fc19c71cf

                                                                                          SHA256

                                                                                          4288925b0cf871c7458c22c46936efb0e903802feb991a0e1803be94ca6c251d

                                                                                          SHA512

                                                                                          bed924bff236bf5b6ce1df1db82e86c935e5830a20d9d24697efd82ca331e30604db8d04b0d692ec8541ec6deb2225bcc7d805b79f2db5726642198ecf6348b8

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                          Filesize

                                                                                          183KB

                                                                                          MD5

                                                                                          6bcb3ba62a67bb1425d98606dd8b5af0

                                                                                          SHA1

                                                                                          d4d9697d3021472fd45cb38bd09c275fdd889cc6

                                                                                          SHA256

                                                                                          99d0d84e27df0b3f7ce8d54ad6455b5aab90354e9c8479cf47f9e4df91c53d12

                                                                                          SHA512

                                                                                          b537b478edddd778cbda44629db958a86b77e20a730aafa17b3ee453fe90734540f77b0a2178791d80a273b97483fbb06012584ba5e8714f43918e19827385c9

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                          Filesize

                                                                                          177KB

                                                                                          MD5

                                                                                          c12344db08e9026fc6f3eef545c4d470

                                                                                          SHA1

                                                                                          a53399e49ea02f7c75be109eb5da04da748d869a

                                                                                          SHA256

                                                                                          3f28bb30b47dbc56b7c4afe84301263c3c49c6bda235113c99e49b45d42884d1

                                                                                          SHA512

                                                                                          aee3149e81dbd0620290af18d357255b1de805b183c5ad0d74e26a062229cbdf2d04421f3209976eb9d35e9e6fcb7c940b9bde95852d1ed56c8184d39c844298

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                          Filesize

                                                                                          356KB

                                                                                          MD5

                                                                                          533d746aa01c3b2aeffcf0f1b42a9e3f

                                                                                          SHA1

                                                                                          f17b639181d70ebccab3f0641ce262c1be24cc45

                                                                                          SHA256

                                                                                          3e76a2d0c89188a2cb186b8d8cfff4b06b8993c34f7428ebf4fbcefd54673a40

                                                                                          SHA512

                                                                                          82495d4b4f86bfbaae1d18174c092d142d06b5448a170087020b17f05c1f3b21eb59003dffe5593184495e561ee150594030e89b7f40a87b74ac3cc45fe67d9e

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

                                                                                          Filesize

                                                                                          264KB

                                                                                          MD5

                                                                                          f50f89a0a91564d0b8a211f8921aa7de

                                                                                          SHA1

                                                                                          112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                                          SHA256

                                                                                          b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                                          SHA512

                                                                                          bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

                                                                                          Filesize

                                                                                          86B

                                                                                          MD5

                                                                                          961e3604f228b0d10541ebf921500c86

                                                                                          SHA1

                                                                                          6e00570d9f78d9cfebe67d4da5efe546543949a7

                                                                                          SHA256

                                                                                          f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed

                                                                                          SHA512

                                                                                          535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ad9aedd4-1d0d-4323-a9e7-c7cfe508aa55.tmp

                                                                                          Filesize

                                                                                          183KB

                                                                                          MD5

                                                                                          c2db0ff5c98980d4f5e4b95a79418b7b

                                                                                          SHA1

                                                                                          c7a722e38917abecc0c9bf27ad154d2373f18b9e

                                                                                          SHA256

                                                                                          c8663b63e9c7da9cdc769efb05d75a58b2b9f44b04b311ae105609f33681d5d0

                                                                                          SHA512

                                                                                          92c9fd5b1d066cebdb67290632e241ce4870abbe879d47c21d88c390eabac6b331d75b4637b3e416dc6abbecf055a9282634a9a9c854b8ca9f8a2292179d5df5

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

                                                                                          Filesize

                                                                                          2B

                                                                                          MD5

                                                                                          99914b932bd37a50b983c5e7c90ae93b

                                                                                          SHA1

                                                                                          bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                                                                                          SHA256

                                                                                          44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                                                                                          SHA512

                                                                                          27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                                                                                        • C:\Windows\FileName.jpg

                                                                                          Filesize

                                                                                          17.8MB

                                                                                          MD5

                                                                                          484362f003988fe0a958df756e5b2b6a

                                                                                          SHA1

                                                                                          c5dadeb62743488e6e5bdc4b2dd63cb867467128

                                                                                          SHA256

                                                                                          b2ad61f5c898042309c63536b134475d2def57bc37a4c764cceb77a49388d01b

                                                                                          SHA512

                                                                                          16c18a09478476eccf9116bf0a89841709b991c101d13f3d26ac75040fe1fc0f68d5da5d3cbbe9cbcbdd0f42fcc92bd2299900c836ea729e9520a7a43a2df739

                                                                                        • \??\c:\NT_Path.jpg

                                                                                          Filesize

                                                                                          54B

                                                                                          MD5

                                                                                          9fce15bfef482bcf00d6752e5125e037

                                                                                          SHA1

                                                                                          be67eb92bb06c57b3808bd29e73277bfd09f851f

                                                                                          SHA256

                                                                                          63cc0093d57e4a9e8b01e6b7106af634f691fdafd2600101b451d694d89e6fee

                                                                                          SHA512

                                                                                          bad2cabbb88c3fac238bf71b3eed745c9a21c895a67937dfba1f28220c7cdefdf92296ef4d9151e06b6cb5ea04154f9febc455e9cfb05f3e2b24728b23fdbe1a

                                                                                        • memory/1920-109-0x0000000010000000-0x0000000010013000-memory.dmp

                                                                                          Filesize

                                                                                          76KB

                                                                                        • memory/2584-61-0x0000000010000000-0x0000000010013000-memory.dmp

                                                                                          Filesize

                                                                                          76KB

                                                                                        • memory/2584-2-0x0000000000401000-0x0000000000402000-memory.dmp

                                                                                          Filesize

                                                                                          4KB