bitrat | hxxps://github[.]com/Cryakl/Ultimate-RAT-Collection/tree/main/BitRAT

Analysis

max time kernel
751s
max time network
731s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
28/02/2025, 19:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/Cryakl/Ultimate-RAT-Collection/tree/main/BitRAT

Score

10^/10

bitrat xenarmor collection discovery password recovery spyware stealer trojan upx

Malware Config

Extracted

Family

bitrat

Version

1.38

favorali.duckdns.org:2331

127.0.0.1:1234

Attributes

communication_password
81dc9bdb52d04dc20036dbd8313ed055
tor_process
tor

Signatures

BitRAT
BitRAT is a remote access tool written in C++ and uses leaked source code from other families.
trojan bitrat
Bitrat family
bitrat

Suspicious use of NtCreateProcessExOtherParentProcess 2 IoCs

description	pid	Process	procid_target
PID 2924 created 3044	2924	taskmgr.exe	129
PID 2924 created 3044	2924	taskmgr.exe	129

XenArmor Suite
XenArmor is as suite of password recovery tools for various application.
recovery password xenarmor
Xenarmor family
xenarmor

Executes dropped EXE 11 IoCs

pid	Process
3044	BitRAT.exe
3296	Builder.exe
2400	BitRAT.exe
1140	Stub.exe
3724	BitRAT.exe
4892	BitRAT.exe
2220	Stub.exe
4092	Stub.exe
4916	BitRAT.exe
896	BitRAT.exe
860	Stub.exe

Loads dropped DLL 8 IoCs

pid	Process
3044	BitRAT.exe
3296	Builder.exe
2400	BitRAT.exe
3724	BitRAT.exe
4892	BitRAT.exe
4092	Stub.exe
4916	BitRAT.exe
896	BitRAT.exe

Reads WinSCP keys stored on the system 2 TTPs
Tries to access WinSCP stored sessions.
spyware stealer

Data from Local System
T1005

Credentials in Registry
T1552.002
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Reads local data of messenger clients 2 TTPs
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Reads user/profile data of local email clients 2 TTPs
Email clients store some user data on disk where infostealers will often target it.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Accesses Microsoft Outlook accounts 1 TTPs 1 IoCs

collection

Email Collection

T1114

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-250031470-1197856012-2659781506-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Stub.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
71	raw.githubusercontent.com
72	raw.githubusercontent.com
73	raw.githubusercontent.com

Suspicious use of NtSetInformationThreadHideFromDebugger 18 IoCs

pid	Process
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
2400	BitRAT.exe
1140	Stub.exe
1140	Stub.exe
1140	Stub.exe
1140	Stub.exe
1140	Stub.exe
3724	BitRAT.exe
4892	BitRAT.exe
4916	BitRAT.exe
4916	BitRAT.exe
4916	BitRAT.exe
4916	BitRAT.exe
896	BitRAT.exe
1140	Stub.exe

Suspicious use of SetThreadContext 3 IoCs

description	pid	Process	procid_target
PID 1140 set thread context of 2220	1140	Stub.exe	146
PID 2220 set thread context of 4092	2220	Stub.exe	147
PID 1140 set thread context of 860	1140	Stub.exe	168

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2220-1365-0x0000000000400000-0x00000000008DC000-memory.dmp	upx
behavioral1/memory/2220-1413-0x0000000000400000-0x00000000008DC000-memory.dmp	upx
behavioral1/memory/860-1731-0x0000000000400000-0x0000000000494000-memory.dmp	upx
behavioral1/memory/860-1737-0x0000000000400000-0x0000000000494000-memory.dmp	upx

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Stub.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Stub.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Stub.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Stub.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Builder.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133852439275543839"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-250031470-1197856012-2659781506-1000_Classes\Local Settings	chrome.exe

NTFS ADS 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local:28-02-2025	Stub.exe
File opened for modification	C:\Users\Admin\AppData\Local:28-02-2025	Stub.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
932	chrome.exe
932	chrome.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
3044	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe
2400	BitRAT.exe

Suspicious behavior: GetForegroundWindowSpam 4 IoCs

pid	Process
3044	BitRAT.exe
1140	Stub.exe
2924	taskmgr.exe
4916	BitRAT.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
3044	BitRAT.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe
2924	taskmgr.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
3044	BitRAT.exe
2400	BitRAT.exe
1140	Stub.exe
1140	Stub.exe
3724	BitRAT.exe
4892	BitRAT.exe
4916	BitRAT.exe
896	BitRAT.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 932 wrote to memory of 3696	932	chrome.exe	85
PID 932 wrote to memory of 3696	932	chrome.exe	85
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 1492	932	chrome.exe	87
PID 932 wrote to memory of 5096	932	chrome.exe	88
PID 932 wrote to memory of 5096	932	chrome.exe	88
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89
PID 932 wrote to memory of 4484	932	chrome.exe	89

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Cryakl/Ultimate-RAT-Collection/tree/main/BitRAT
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffef7bbcc40,0x7ffef7bbcc4c,0x7ffef7bbcc58
  2⤵
  PID:3696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2088,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:1492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1740,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  PID:5096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2100,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=2256 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3124,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=3156 /prefetch:1
  2⤵
  PID:724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3116,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4476,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4844 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4508,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4548,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4728,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5200,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4624 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5244,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5028,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5180,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4572 /prefetch:1
  2⤵
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5128,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4852 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4584,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3572,i,10412690102238185916,7780415897382283972,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:4808

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:4012

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:440

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3472

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\*\" -spe -an -ai#7zMap27337:354:7zEvent21113
1⤵
PID:3784

C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe
"C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3044

C:\Users\Admin\Downloads\BitRAT 1.38\Builder\Builder.exe
"C:\Users\Admin\Downloads\BitRAT 1.38\Builder\Builder.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3296

C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe
"C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2400

C:\Users\Admin\Downloads\BitRAT 1.38\Builder\Stub.exe
"C:\Users\Admin\Downloads\BitRAT 1.38\Builder\Stub.exe"
1⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- NTFS ADS
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1140
- C:\Users\Admin\Downloads\BitRAT 1.38\Builder\Stub.exe
  -a "C:\Users\Admin\AppData\Local\4b4bd5e7\plg\RN83HEug.json"
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetThreadContext
  - System Location Discovery: System Language Discovery
  PID:2220
- - C:\Users\Admin\Downloads\BitRAT 1.38\Builder\Stub.exe
    -a "C:\Users\Admin\AppData\Local\Temp\unk.xml"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Accesses Microsoft Outlook accounts
    - System Location Discovery: System Language Discovery
    PID:4092
- C:\Users\Admin\Downloads\BitRAT 1.38\Builder\Stub.exe
  -c -o "C:\Users\Admin\AppData\Local\4b4bd5e7\plg\MB0cq0jx.xml"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:860

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x51c 0x33c
1⤵
PID:884

C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe
"C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:3724

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\BitRAT 1.38\data\plugins\readme.txt
1⤵
PID:4596

C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe
"C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:4892

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Suspicious use of NtCreateProcessExOtherParentProcess
- Checks SCSI registry key(s)
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SendNotifyMessage
PID:2924

C:\Windows\system32\werfault.exe
werfault.exe /h /shared Global\b7c6aeeb89fa416eb533f0a41266bff7 /t 1040 /p 3044
1⤵
PID:4388

C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe
"C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4916

C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe
"C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:896

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x51c 0x33c
1⤵
PID:1984

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Credentials in Registry

T1552.002

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Email Collection

T1114

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\BitRAT\BitRAT.exe_Url_wqfk4fvzt4s5ini04s5t2mb3ucce5gb0\1.0.0.0\a1vohiyb.newcfg

Filesize
1KB

MD5
3e080a7665f2d5b331608e165b8f1b8a

SHA1
7bb92cdfc705adb2baca634d08d668cdf45ee980

SHA256
9fe2915cf7951aac01a86dac61d89dd1d71c5e804a38bb6c69ec1be2ddc925cd

SHA512
400603601fb622e5b83c2b59fc176e0bb0a629c1fe43392b463e88252ec6233d5af92a56e819bc70b2277f68d8dfbd57420af9f42b2e87fc98fc11a1ef40b92e

Download Submit
C:\Users\Admin\AppData\Local\BitRAT\BitRAT.exe_Url_wqfk4fvzt4s5ini04s5t2mb3ucce5gb0\1.0.0.0\evrnjmk5.newcfg

Filesize
1KB

MD5
7cec84055b58fc838f64986bb8f96a75

SHA1
05ab0dc39d4d0dbb1788d4079fc4ea9db278777a

SHA256
1e23ae8cd449386eb7f16e798f4975456fa99348e65b8c2e8d6de0c9901b277c

SHA512
90111fd771433f72f339c86408157fdb414daf5cca29bc87fbfcbfb506bba68c723004c19d7260a98df20de01518ccb18976a0462496e8afd2db56b42de54133

Download Submit
C:\Users\Admin\AppData\Local\BitRAT\BitRAT.exe_Url_wqfk4fvzt4s5ini04s5t2mb3ucce5gb0\1.0.0.0\ezye3cp4.newcfg

Filesize
904B

MD5
6ce5576f3077ca353b8ae03cf91e36c6

SHA1
57281ac57916923b6cf0f47534db3cc779372af7

SHA256
21910624a14527d7acfc70843ba8a3fdd4aa935b0bdee808bfd93ff8f98aa61e

SHA512
1100bcb3a42e371c38f94cffa8f973ebe0bf4f56eb851da8e5c77f361ba3f19da7722779dca6cba7f848e6131951237d0930ecb0083df3799e91ac91555cab95

Download Submit
C:\Users\Admin\AppData\Local\BitRAT\BitRAT.exe_Url_wqfk4fvzt4s5ini04s5t2mb3ucce5gb0\1.0.0.0\user.config

Filesize
780B

MD5
96ef5f4ce942c5f922fc435c6690743b

SHA1
3ce83d2f3af3d0ebdf571fcf366e169109667495

SHA256
bdc1eb034eee5183145b5c5537b5c2bfdb8d04ccd8961cb566e887ccb6ce9356

SHA512
30a909b2ec974baa754bd9283a4645a344066c7bf58476529400a5760b9fc6f13bea9b4cef316c0ad753efb9a71e46593e9a34be0c0820c3e16e58d64aae88c4

Download Submit
C:\Users\Admin\AppData\Local\BitRAT\BitRAT.exe_Url_wqfk4fvzt4s5ini04s5t2mb3ucce5gb0\1.0.0.0\user.config

Filesize
1KB

MD5
a1ad3f28b18318b1bbf7e830bc8305a6

SHA1
faa1bc0ec8ee3c7d070e82c64d15e337bdbbed35

SHA256
b15df0b139553f079893717a9172c8d538ba7cefd091c12e20872b70cd052bae

SHA512
486f33b935787419205c0fc19054dff7cdaab681c436c4c99370bdba69f8b218481ac26a070b95b6f2b8389707bffccc8933d5bf1cd878b4fc17c28399262d31

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
22334bf766f7c3d54f93c897a2cb1d34

SHA1
fb7fd2704ae107b85fc35a78be3e39d8eea7c969

SHA256
6414231b0a3d154c6cda71435727054ebaf33df4f8b995871025a59d0522fd90

SHA512
0adcb815c42d202c9e7e8579de0c5da6028d992e67def1c37a27d36228fc85af197860f5cc84a4547bbcd459447ad3579837cbde50e9414288ae81fd01972839

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
41d99c11d4bbd21a0df0ab0e740722c4

SHA1
f7914c209696b42bab97776436c979d98d2c29ce

SHA256
954cd688c354588185f5b4a56ff35218ca22bfac5e18e78a650c99928c173155

SHA512
80b679e05fcd7ead1ae00600db2ac4c76a3bb3f19ff780e854f437c117d68cb2fbc7c5bec9decf97adc667b543c99cad60852755f5f4a858b511869a56404966

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\0c4065c6-9aa7-4e64-8898-f788f0a29ce4.tmp

Filesize
1KB

MD5
0c95caee90a0ab14e8c1bf6f63368507

SHA1
821cbc7e1ea2bddf1b7f6126c5a1a50fc2d11c9d

SHA256
823431aae37c0da962d5b4036210904cbe1387675381e9069caeec9893ff89de

SHA512
e7048ac216c9104c955b50e86698d5d675249fe40d93d32da580bf59eee3162678a4daac081312e37b9a9192a787fa4aa8a8eb8943c04ce408fd02a7566a8aa4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
d65f06dc1371dd7bc7a22bc0ff41d3cf

SHA1
e60d7d2d36bfa0878b875701da54790d109d2707

SHA256
0096465a4730c27c04ce3b519061a08d449c20379c726fb9157aa7c4a34038a0

SHA512
f76a0b36912af100610c0879099e449e0340fdf5713bdb44e0ff182486c3acbd6a782e1d06b0e76ca0cf086c171e47bb9f579b04c092e2409f83d37d57024e93

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
df2f2cafdf29b3a08a5650f4849cc57a

SHA1
ce4a47df00b5e6e75f555c245539114a2c8298e8

SHA256
ff81ccc13ce0424e7da3b367efc9686e09b88176d74f96cb19089a3d330c925e

SHA512
36132dd5ab70c699389bea4168527d39fabad7d6df9c86b93721a72b0b2b2d33b9d88acf929ea209a88078cfa24b2969dfbc3421180e551227ff76d313535962

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
6736b6f93deb8fabad30999940feadb5

SHA1
89e44aa6e1d34bef21475e190d01bf0032a44b0e

SHA256
0c9b0fa4eb26f2dbfd75cc982ccf2af96756516d9c8fc385248f19eda4830cdf

SHA512
d767f65b44ac0d12458420cbab9ec722641b484a6a8256c3e03f201d7e0e11481e9151f19d26cfdc0f840ece72864b74103998377955490dd1eb452d8284e729

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
76e44dbb69bb37e4e4683d938a701cb6

SHA1
eecaaadb2f6bbe4bf2c4f65430b355ccaa9142db

SHA256
d4cb55d8de1d607342bfd0a0eff963757d3d55d18b51c801dada1bfcb2ecc0a6

SHA512
f0605c1825867c3e8adb252e7190fba06af8616947b6052e24c6dad936397a9d657e1908138d26c95268125b09f8a5492eaf4f0a83a2a9966db4abb8be43de1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
836fab3a036419ec1de770eb94b63e43

SHA1
9dc406e765d7a519abff89b872ebbbf95ce61851

SHA256
91c80cc3722b2f90a558442ced3587c2f60d72dbdf4eec774567cfc218f952c8

SHA512
994575e939414de1bbce425bf1a741866fa77baf5be6db33920835cdf9c6f562c80fa8d264af79597de0699ebfe0038ffc07ffae711026129ec8dcfdc8231e5d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3cf53364c415b8c02fcf31a30cb3cc53

SHA1
4b708636dbe295c8b3185dc2615399f235bac01d

SHA256
8903176bdefd4722af3235dc6cf285e652ff345ade0688ee5bbd5b2de747c3bb

SHA512
a949f817d2abf16fdbf72d3cc3b955a9b16f5350fbfdba47dbe46d679ab86fe0ae5f5a2fa1fcc40d79de998a1997d8603854d4d081859cda6015b1893e540f1b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c93837b1dfdfd3dd92799d85b8014fc1

SHA1
fe6a384b5a58f9ef3f60dba268545662b6579669

SHA256
4c4273f96a202bb6f782b08b86a91b861d7691f9c2851f81f4c854866c6a6bfa

SHA512
65bc329b468b3cfb6295d5280514e4cbf41232590e2c65a6ede2c0d4019116fb8bfedf0a86dbb3a473822b821aaeb70ec9a2ef1b3527df9b0e62d43c0098f47a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
dfca11b5dbf51357a59b5e67865b972a

SHA1
96cb3251d04a38d2d56ad9d95d3118860b0a9291

SHA256
dcb5e0e396d0666d0229a76af67609b2e2839290651eaccf8f410561db628b17

SHA512
d0fce6f3022f90b0614c21c2915edb9c7d99b708a07de70ab75064e0e2078933980a38d2dcc435b8780c9d6f9e6b847fc392114f55b6468135e0a95fca6750e7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
a055aad40dbac8980c8204a138e6c08e

SHA1
5332f66d0a8d184c2c4a2474962fe2700d25a089

SHA256
3eb1fce394e16d7decbb06636c34c856b05c0b521458b9edaea345b1dd591324

SHA512
15505f479d09c63512e8d3d063481bf125a9bf713d0f7c867de7ebcb88a4a9cb2fdaa2c15db2b0f44704f9b785ae0775ce9d31d55d7daf407b08d13796c3b727

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7097950f0609c07506075c0894dbc6cf

SHA1
7d45c78c253fcc8136a91a56f26eed250b9d8a08

SHA256
e4adddd5f4617888df6ae2764be90e19c74f1339904b59b3b8784c28bd97524f

SHA512
44fec90a2d70b8b1add45fa9ab3423e81a47a3ebfe26819e858ab1428828ca75ae64677dbc253da3ff0ff3c457129bbc4721e406ebd41aef3ad25f1f8145a185

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
17a57949644dbe2cbe2f98a90e1c2651

SHA1
29abf5cc8923caccd14cb128d0cbe143e3ca8ee7

SHA256
6832c1927c5148e795be14253e3f14af0c814807b2a5b6ef543beec808b6a587

SHA512
9b4f38f8acd022fb3c8ddf50d44195b8e5d21234c9a2eedfda4460f823d42a37c6854a9cbe1f3a8340c3185be0db3f6b67b596ca3b02d4fa345e455a81e500e7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
809e6b8eacccd9390de419cb64c7c572

SHA1
1c02410480efa00def8318114784d9f11c866567

SHA256
f692fc0e595de79cd4022d6899f6c366227b7766ee3b551bbe9a243f39315c53

SHA512
ec766b625523f4ab583bd4f27540f978d0d403e23ee035f5d4ecb73786fd750af95d1469f7438512825d7bc476e3a615dfdac05dc1e24b020ea57d64e7a0f2fe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9fdd86da30e7af1b963aafce15fa95bb

SHA1
4aad92e503a85c62ee68f09ecde3f9d738261b4d

SHA256
e6fd87970e9fbb2e7b8c6a37f3aa296f757553286115fbcd30a5c9c115266e81

SHA512
6c084213207e0e309cf5b04f275158912361a68d332d665b08fa167ff866c77ebedcd087442e8523595e12526337e07f53bca0dde7a0568396592d61bc607d61

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
47efee511c00e7839c3c7682e091b1cf

SHA1
f580a06fe8ee891dd75060bdcd223f097dc251ba

SHA256
a6359eeaa7e3c919e2a4f1b6c0dc8005d311fd823ea834b57cca960776e3184c

SHA512
d1382c4df217d1c6a63072e3869ec0b620d6b2df2f8d0a88625ab3774cd8c8c3a7bdcae65a6b9629faa855bfde23130487d4b2f2460f54a57c25212bf79f2005

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
edd78106dfe8d6770a23fd6627af7719

SHA1
aad69d0cd3544bfb35a636a29ddc1633cd590706

SHA256
eebe7e2220d5e039250839d0db8e1ade902383c8aeb5d86497fa488fa445128c

SHA512
a4d69982d47198e3be9c8fbf557c018969ba97c0bec2b6b4e7057b0fa02d37fe7be9a7738ebb237b432c287bf6555384e6d325897e84be4ff7019312408d8196

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a78540fcff0aef2cb2ec023a14796396

SHA1
d2da8ea2f95ed99d57b0d4dc22c462e1d96c9f6b

SHA256
f322148a0162be26771e1945149a8e0ce3b04d412e6d0b30ec6576bc5a92e3ed

SHA512
9af836538ea1cdfd647fa1685317bf0536f08d3bbb7984fae45680edd0e5b97a5060dbfe38e7bd6106afc2fd32de0c536b4838c46c541294fbaf9e9b9395ff5a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
44399d17dd507f1e441c21e0a95778a7

SHA1
e2b3fccd1ee5d85d1ba9595aa6f5b714c3d750a2

SHA256
821f6ad2704d5880f25158f67dd447012b157af30ff4986b7922e9878834a857

SHA512
d66411be3761bb9db384cc2f88f96ba330f9805d19dbedcf358afa5dd0017aedaeb93c8af356aa199406a1f1fd18f1afbf8c26dd53433327efc3a5139a4daf58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
99949a9f251173291695c0f675d6d9fe

SHA1
9960d77531036e388ba288f58f105c20cd9fb1b6

SHA256
0e5e210d4e58edb58c70f8d72f0abaa6e4469121204d74abc0c21f2c7639a748

SHA512
8bc0cc3225db293509348267ce9173bcf7b0828dc997059dffd9df9996ce34981ae8bf27397cb8a2116285d41aba4e6f2302aad326e43a8bd5d4fb130e60a1ab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
c0800c6b020a0edff1ddc31622751753

SHA1
039313d8a770ea289719d526ebf4fd730a9e1588

SHA256
ec9c613391647c0474185204a85bfe3e499590ce925c4735d8a09580b074a413

SHA512
9360dc70ef5b6c7225b9393499c9016c94590b023ed3017dec39fbc9b4c1d98ef698dbe15a032236d127650261e3bfa296117540afadf777ebf4fb98daab5dbb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
0d9c301ce6d73aefeb6d1e7fa43d21d2

SHA1
85405ed1e755ecf9ffda0a0b42e01ef6a52eb08a

SHA256
868e32e669f1a941879c78bc27eaf93b38cb76c8d7e2c968de8fcbae1312d1f3

SHA512
87c96df5c652e8d2f8f8834ac26a2f85382ae2d2268d50d2aab0948e609eb1711f4b39309c6727c4900d25be0f74f4699f77f5e9d64567c536805380ca881103

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fe0fc35cb5b8b2a4421acb85be58f5ed

SHA1
68f83f3d788fbc9300b968a30c7e4eb32f18cf6f

SHA256
e98378ad1e2971f91676a2a3e9c3611169e3d9991b29708834ee268d69f585de

SHA512
5b15f0aac0423253337b7602d3e3b6e40782f91ad427b6f69645dd9a76b63ccd55edb924953ee8144838c9b25f28bc8b530aa1745852973abf26cb42a6119c55

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
83542cdc4e4644962f3544ca1b10cb17

SHA1
831cde2d3f9beeb4d6cec43818c503ea17acd97a

SHA256
5e690eb02a3aa20ddadae4e1bdb7a6fae737efda054295c329b6a6e54405f0e3

SHA512
06a5403561b53dd4575d6db2529a89d32abe316261811b86225273848cc234b885257b7e22b9a3dfd8237b137607d5e49c7b7c9a042b643e706556405cc166e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ceac5d1e5c637b53815ae361fd584ad5

SHA1
a8512d0fc07124f74666a040db4bfd68093ba119

SHA256
9a343067ae2da50ec197407b75a2722c72744d7fd8db3d68ba022c14682353bf

SHA512
643fdbde0afc7a344131665710d09889a2489f8df18e6477090075bd106972ec68a73c06a790957c51c744a306b2a8a29a6a2779030c93fde6005a8a752fc37f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ecbe234e358d6cff402da5111f1c2827

SHA1
cdad672182b48f76f8dbf4dff288017bf8384d05

SHA256
c3519ae4e2247a856b33286841e25561b4cf5ef73672f0a32c8dafb3c424a150

SHA512
424d1579eb94b210bd68160d1b591017a7cea0d2b9023412d501dbfa3745be92c82515832a8cfb54fa4688185bedb912e884dce660611a8db34432b893e60da9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3962afcc87cb6c973153b3060dcd4a39

SHA1
af55ef2f33a738d8d1065aaac991ac18f8c780fb

SHA256
6c70ee08c1259bbb108853827489b349e55e83da7ef855839b3d8548ac872cfd

SHA512
8af79e1c7704ad70d9bd5c2f9cd5f9b1bbb4b7780006d79982165480a7ca29e6b08d2481b05aa339c84b8dd13ed5f5e529b0a63e3eddffab4785e46956e305c5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
566ecf27df8eb48e2a08a548dd47a6ef

SHA1
b36133b10675c5c422f6ee44a5f515dff427fec0

SHA256
b7f611958d3ccc012ea384f108baa1b6f2ba00c5184e9316d4b9319e332271fb

SHA512
4c2859cc3a63b29681904b3a6e2821e19b33f6ef55cdd41ac588c5d7ac4635f0dbab0d76b25e2e6973087dc9188a1711826fb91a7b70c992e076f05acca9b33b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1be76dc9f27d0012f46de15b7304c894

SHA1
78bbd6104115a4955e04eecec63d8277a24b3844

SHA256
7988352d8330f9776e3efc2daff433ce55a50fefe06b46af6630f90cadb20caa

SHA512
7bd73b317ee6ede69e560bc91baefd2b4124c836b09fdfeef40965406d1c5e3644cea73dd8edab4c13afa92c0a9ff2c9af8d1d50ee5da3da308c90dcca2997b1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
eb9fec2de725f3ce393ae4c50b6620cb

SHA1
8283ab5ea2898ba62185ee68a10719e0bcb28b9c

SHA256
c492cc709266cba8e97bc7c8a66f8760c59e975cca0efaa35c74ff2d5db88ec9

SHA512
20b9f8df800941dc7b61bac6680ac787b4bf877ac09c3ea0b6d6f6b9cf3548f991af180450a4f24e983e9738e7c02264daeaf9949d6b2a9f6c6a0d3b5b1596d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
cdb028c05afa29a859d8f0fd2c33fe6b

SHA1
8d7181a81167151ed8839a1d0ed1e71d17fb19af

SHA256
6828005cd2ab6fabd61bea31463297bf1d706abdbd3ba249851bf2bf9759d510

SHA512
8b9f10a99726b731619e60bb7731afcdd2aeec6e1ba309f160af0a49c4613bd8d0eba69e49fd0217c8bee8dfe1302835f62b1e7fd17adf1c35c7ebc0da19f349

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c783b47cab769314e4fb769a7963737b

SHA1
ff96efd9fd61ccf36c09f69bd38c3b7f07e5c5ab

SHA256
bf9b5cbbb17972438974bd524be726df7817198a15168ac1bb2b9b13fd72928e

SHA512
a0535771848d01b496f0f4b61e8906de11ec0d495fd54bd44fb9a55ef2984a82114dd6b96ae3150de683ad00c3720c46f6f63aae76e075396a354d2c7cf7c579

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2fbb888a5bffc54af265b33128f9a512

SHA1
2adb3de8a13b649ea5e316922d6641a73aa7f7fe

SHA256
fb564def1799a50e3ea6c224855012ef84299a1252eaf08ac1c196cbb7609d12

SHA512
c6d6c5213b08c2f45fec811702cba561a98496255996ed06eb6c4e5cce04f9d5b9f41fd189e64eab49983c85bb897be07db8560edb30e7498d0a67986638c7f0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
33a4601f683f2be61f0e5ef4f084c078

SHA1
ae03a78b82889fea90a394161ed745ffb9dd5404

SHA256
0ab523025d16678295fccb8c06fea517619cbcdac59ac32e383a39089e97fc7a

SHA512
f7b15ea0b33196de9b6df55806153568354d3916a5a2e886a125c96ddc2ce785fd016378f5036f919f0e6b048ec3817382b61c02a1784f1d9844ff4851567fca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f2283f688de220c3dddc742986cf5d4a

SHA1
1e5cb94037bc9a9a017511bc9e417aa3add5481c

SHA256
063dfe5682e7a26dc854120e08823461131a3d74c7df6f85b9ad07c769ba2379

SHA512
4022ef493b847e745749697974fad3c47221732dc874a6b7485a0eadd916903878edb74d6a6ae811b59476ebe0e236537ec200d48bc6794e26fd98bf3eff8a61

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d534690acca7bd6cdcf69c76addf6a92

SHA1
30fb87a31318d417ab6e676fb75995071db1923d

SHA256
271e4ad98b71ae72329790d49140a658c056fb3c137906dabff7adb207c20fb7

SHA512
bea64e2535afae9bd030b4e307a3bec616508c8f38e9c4ea189b6739f63dd1c0c9e37e6bf46f1e3875cb4e40a4399a9e5fd5dca2916326368e417e8430c35c7e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5f072d7712c581bb0dd45252a4c37df7

SHA1
5c5cc271fd7577e2dac7d2d48cf74b338de4395a

SHA256
61cb2611bcbff219649ac0b2d21aee283d8b96947199a7e467315abe588a5ac3

SHA512
8660b8b8aaca386676b002bd05dfc97c8a344df6d5a79e0032ddbf35ee00c0ba97e448ed83a5d4d3f0b8820d464d8206b73034364c4132fb53fd8cee50c71b58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
aa86ec5a7dc7585dc3c1d12698eba45d

SHA1
2950f6d113d4e3432efd9244077b2fb125b330b3

SHA256
b7b856fa9b6e82347a9a5fd9781d0abc193de49ab62f2dc56c10d72a63bc47e2

SHA512
58fc93f9c9d582fd46e8f802e53c3163080d62ae8820e375abeeebf801b740239394d4b1540002b8875138856488d5210f998080d9be5c02466c6c8a0927624a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
34668f8262bd42223fd9bb30b03b3ce4

SHA1
a59b6e28b437888d3a8684970b43f09f00833238

SHA256
76a5b2532dbb99c113aa33ed0afcbb1fa72184993ce45dcdf30a319d46a47be6

SHA512
9a412691fe0451b2164d6df861344aa713fd2f5175626462557d663aa8c1f54f8d0e659b7946b5f733b594540ba2e6cb9be71a60a938a8a1a7b47351d3b3052a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
30115af34821d93d9b47ae6f496bddbd

SHA1
dd61e941f4815b9cdbb5aea697069f615aeddba4

SHA256
b89829f338d604e64e9039ad3bb0f71e31c552e5f415101fbde5ba758e5db045

SHA512
453a7a9d943eff74bef7d1cf3140f5b7df6ff6c44c889b6c9e9aaa096e55f70cb4e2346efccd85dbcf2c8278584f671c447a3dfd90793ccf5209dc1ba35428ef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d19504acc9b33910e93e546c358b1d50

SHA1
2acf4cf873f6b1a61b19bea46965b4db153d9e11

SHA256
d08f520d4563fc2038fa4faad58bf77d7a58135390db8f68426f461265b63aa4

SHA512
1d070afc8f93f5c5606c43256f47dc0e28baf78b0827e41d75a0b1f341cf296deb1558a926a84a30449d1263b5e56339df5c529560950e94c3d48ea3fafc6fe1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
4b3b453b2f0054162a55b0bb441ccae4

SHA1
e3771f061b1acdefdd1476ee7c486a057cb0b11a

SHA256
f3fe22363c18b5b1001a212836a5d1dde2997acabbbb985c7829232877bd252e

SHA512
be40a3fb2b6e78eba370bcb93abb5bcdda4318545a51c4bc3e2734dd00ea4b68a2929c529a14a03d760d80ed080b77afbf667e60f2fe5755549995fe7787a220

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9b110a770e182173939f945fbc167352

SHA1
f5ee03715b8a06ad899ea99f0175cb28728998d0

SHA256
87af3749201abb570d7aa785d9cb21ebbdae36973e00aa9fc5006a6b787f1b7d

SHA512
d38472a48196f75be3743e8768cf30ae497c2682da6b992151fcc851e5e1ff905abc13a8ed54d8e107928b7375ca8e65e335b5164bc9f599e5d7467923bb656e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e890dbac71bdf0dcd7c6f8380533d195

SHA1
bfc8eab9229b5ae59706e7ba98c0cb8a66aee830

SHA256
e9120929d5d6de1056a59ecc452364119a3dcf82d53b20d03e1190a21279b5de

SHA512
67d2121481159b4f9760913346fb6b1e0cec04498d055ca164cd16b427ab6c2647223dafb1b6c5593272fba72fc365ffd5f3dd3f0535bb16e1b9a123d0ac39a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
5daea1ff8ae9d2c54b91f47b5dfa6787

SHA1
4c001abdf13b1c8d43c8744bda373803fc7e04ca

SHA256
a1c060a9e2da955421b441906b6c22926caca4e06e48f27a8b602aa907e7891a

SHA512
709592b8810313d1351d426b32a7739548966164673a34224166275a48ec5c1b5dfadf69bd9f3d084bb0d102ca5b68d530e8a76ebb1aa1c76f9ab272ad2ef9e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
070cccf1dcd90ac116180a9005da3e95

SHA1
ef63cf09496e068a22a691b797484ec729addad3

SHA256
6b453cc8d9bcd89a3877f16255c360e0f074c54fc58d511dc7bafd501861d1b5

SHA512
78e4ec57ebcc846f40ac39cc91d66ccf5cffc7134e747587c63ebe3b0bb483d904b68bfe02dafa0cf580b8112da8df1d05df098870248e20791c8be8725b8e96

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7a38676eed64f68358594f8171222f46

SHA1
17bad8af696a9b8ad1c2314c2499236be552b9cb

SHA256
409d4b3ce392e7885cd1250b95a5f0786e452d4c65bff2ae38ec956c88a52dfc

SHA512
22fa823b381f31bddc2f8d3ec024c8d402b0ea9c548969d493c20a89e2ad7a850f35cfdc445187333a1c90a3d95a8d16665637555b1eea303363c907bc6946aa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
971c1586e88dd7210c2d32886eb4d7a9

SHA1
1724b6a50db1cdefb1183620b4854df05b4c5ccc

SHA256
b8a7b5889f321c45a656ef4f4e42566ed80a3d679a08a2442f990a29943f30d0

SHA512
e9b1a3c7c6af2855912b25277deef25a8cfdd0a4a330c27f65cb45f86316c5440964d489e176c459f98e5e28d1416f877fc8e95063191afdb7e8d86f287d4855

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
15ac00754ece76da04ea5784c02ca3fd

SHA1
1fa96fcc28be2ab0e6224ba35489248902e81bd8

SHA256
90445d8da79486924f35bbfde1df905d3ed545f410e137856e82830e6d57285c

SHA512
05d5f1491429e65108c7f90a2c640d688e36e51a5ef7a26538bad463c7b3fb7822eec9030195036862e42c7135b195f22bfd9c8108f8305f5d9beaaa8c979959

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2c70bf742bc00dde273657a37d5b8ebf

SHA1
834ab7879d29d137ec9fd5cd6c92507072fd160d

SHA256
0a4e8d8bf8d8be4720bc4057f468f0e91be252da80c347d6a33e0f7c74ee0f16

SHA512
e67be52c7b003012adbcb9a1f87f61358f3dd37144461f559579f3fd678a2de15b3beeb45f37b948e2e84cc4fb6eb7f8458a53ab311e1bd5610cde32d0b81c40

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
90ca397a77a787c328cb1af5809d7151

SHA1
178d0bfca043055c60b5499b506f3d442192834c

SHA256
a6edc88d45f157997c486fb1c8e9a7f98d8a27c638e25aa28801f31765d29b9b

SHA512
f8f811c9be391c8ceb4dc7a7a0ef40c001e76840f30c65f14128152028e37668e6bdecb378c1bbd71c8af04f850284fc57f213783cf8ec8824920975e98d291c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5035b2632935b2aad756b44613aab0af

SHA1
2914d86446f4b6dfe2298a2994bc6064155c5a82

SHA256
6d972301f06e23d8d9370eb504cd45ce6d74988726e215dd8166893aa0e2536c

SHA512
16adffbfc6c8ac086d2a5a8327fd23b45f8b0756c367eab75c6f6fd3ac449b1b80498a5e62a1e03c60c3733cd1a94168147996d447ad7df8236b488ae3d91306

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
262835f4c0a6107093e68421fb83abb3

SHA1
68f43846afdc11e7a8f621ee415ee6f00b040cf7

SHA256
525f673e243aceaa026402bb31b5734e248e1be571353c98abd91450db16ac84

SHA512
147d8ff02a120e3c49969f99525a30b6ecea4829a9fb93b1f440078b6647dccf690b1844e4113c15b20c908ef9da3460706174d6d08ebcb0b2de4d98c4fe2799

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
379ec9375bc888c309fa85c6a67813cc

SHA1
9fba6eec2cc4dc7dec8e32f373137ab532b3ee71

SHA256
ebcbea3e7e277b074527be279772c00f54bd64badab7c8693d57cf09f12ae35c

SHA512
176fb316108b8e43da47bb96bd3a31cbd492de693b3f828663a122d0227eb005abb2b3791281e2cc28b9e2946867e558887ed3162921df17c3730910924566df

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e369caba4d186e93ed713b402c8be477

SHA1
c843096ad32dedd244b84827616f57d2e8c6908c

SHA256
8763c0c0e5b1d4ccaff85006b682ccd85dfb4568f84198746b5042a3419e33af

SHA512
c36b5f83194104f33a72eacaf3936f5538be373ad9dd1bce2d114d4aed01cf7733d187abf4b547c442b7e7ad21b24caa23516fe443685b5bf6de84afa5a342c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3c97f925b91411a9236cd58a2fc34db9

SHA1
d77381dd27b219bef07bc70f6d4730097404a64f

SHA256
6d13ca9c37edd4f290fa60f34fdba489e43def9497b39d15dc853f0186b4535b

SHA512
efcdc2f79cdba300a8f0791f9ac5d4193b6a869da158f274249960e2f92eb87f0b85ea891e28e309d9169d0d1b00fe26532110bf71714d30d3f87ff9206ffa97

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
123KB

MD5
b051f0ef671fea646081a6da73452186

SHA1
85f52c03feb22aab07ad3665b8d6f9377ff6ff8f

SHA256
cac8cdd75fe176261f2a13db1d694e796226041bde88d806dff7acd393a51bb6

SHA512
c5a45756c039f5a6c7ddfb71227ca5d8095eca24db35bd7991a8871d5aa55c6693e348fe99240046b308f5504b38813b2077f5e7bcf8191de214c471d642a500

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
123KB

MD5
4fd18286ab054a57d4d38fdc66c663e1

SHA1
1a2c19ffb325a30f508999cebe215fa1772236f4

SHA256
4f5cf9f3d2b9307766b4767c3005a0ba98a82a92367c4fb867d6feb4cac8d944

SHA512
dd276acd543e86ad0a7a5684edd77a94151cd1abecb8b9729d7f9690b6a8c0d53cba5ba5f6652e1b5c4fd74a11a44a7df34536486e5074aa6225c5cab083061f

Download Submit
C:\Users\Admin\AppData\Local\SkinSoft\VisualStyler\2.4.59444.6\x64\ssapihook.dll

Filesize
67KB

MD5
4d9943a0adc1a3bd1472bdbab649a436

SHA1
f0f36e014a71e21e629cabaa835f39a4e775e092

SHA256
87dd71ac71bca50d9f1179215bbc4a25783c6a959def5c1850683eb41f6b0322

SHA512
21766452cd53a2344c321b042984a08bcb46dac5e2b06dcd25f1a740e4018cb0f90d39b95414febd76d4c1447efc0dcae6dfa1ee176fdfab654a4efd2e705492

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-250031470-1197856012-2659781506-1000\184bacb1e4870105105a7405130c42a6_1b26b30d-d6f9-4319-8804-cedddebbb6ae

Filesize
2KB

MD5
0158fe9cead91d1b027b795984737614

SHA1
b41a11f909a7bdf1115088790a5680ac4e23031b

SHA256
513257326e783a862909a2a0f0941d6ff899c403e104fbd1dbc10443c41d9f9a

SHA512
c48a55cc7a92cefcefe5fb2382ccd8ef651fc8e0885e88a256cd2f5d83b824b7d910f755180b29eccb54d9361d6af82f9cc741bd7e6752122949b657da973676

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-250031470-1197856012-2659781506-1000\b0c72b8b672f20fc6f022920799473b5_1b26b30d-d6f9-4319-8804-cedddebbb6ae

Filesize
2KB

MD5
7fee9e7e725823bc4768e9337cddb2ae

SHA1
c74e18f2a7f1c3981c4ef80de7947f88bea5a6c5

SHA256
8a9f2c482297efd846e9d02ad065693017d3b8b4e818cd00caa8c0ca0deec73b

SHA512
b38bef9318e7017394701cb2af99614d6834ddb0cf5da7fff3249467ec40a6ca4d09533d52b4d2b6ddc3459af7915230f935caedf09750cf0f47363956387e4f

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38.7z.001.crdownload

Filesize
10.0MB

MD5
67d7db0fad05afac6e71f15b6bf0726c

SHA1
5d66dd39e34e2931e6f6d543102fdf1b82e02386

SHA256
2e7b2dbbd04a30c97d0ac195bfc5f0ebb1a95b1a67278103990e94979c6921c0

SHA512
93577631caf0017fa46723d678b63333b5958c9c229afe0ba09aaf84927cc2dc6df64578ce8c6902bf0951041941f0fb71a974f223bd316833343cceb8e7a12d

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38.7z.002

Filesize
10.0MB

MD5
14d59cd52b11348730503b94d853b2ef

SHA1
8b3087dfc38997fd41961f18fff2f4bfa30731e3

SHA256
1a7b28d4b552f2a4b5a01f5ed11b8f472dd22e817c0328dfa7414594d8b5375c

SHA512
abef8d2784213d8289cb20f2c5cefb47758c7177bba6817955a885e82619e90b1c46601eddb3101134eecf7ebabdef8487ba5026185c11b45ad55ee2ba143734

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38.7z.003

Filesize
10.0MB

MD5
efa6c077f42a77f5e63cb54f23fbac57

SHA1
203852cbaff9a1a7835dd171a07e5436195e5ddd

SHA256
4d4bd2541cdbf27db231ce70a624c344713d70c5a7318c742389e75f3db0b61c

SHA512
f753468e9223081d0caf65b51c7e1149367e1cadf1d092f47a811f0f5cfcdded8da38fd5addcda3bf0738e3f190d35c60878fd1364d9449842f5b5db094bc1b6

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38.7z.004

Filesize
1.7MB

MD5
84623df9430f2acc3ca05d2ec125ba8e

SHA1
deb7a3621385f434546e0489918a9c74c3d6c2ca

SHA256
872de6b345646a722c3caaa0f3547503af7f12588015c017ce19077baaba44b2

SHA512
92c1f5db4a78688f89cc73955bdd6217df339c5e104c99aa189c062b9639e62608608da12e10b5cba2f39b59361c69f154f56d4ad4143c1df0cf98a832ed3b0b

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\BitRAT.exe

Filesize
38.2MB

MD5
136dc8a8d3366b213c1e81a0c4106f7a

SHA1
440fc8da50b803f443d3c390239e951c1a858631

SHA256
faaa35195a9d631a9a66d6fb65e81c8aaaf881d1f8f10ee154a0a8357313cfc3

SHA512
ee8e1b2461b536a569a6e5dc2d9c025f93a29c9064a3121becdbc4a534954fe71afa944bfa41044456dd77d5a71320d14fd39ee7092778ca4c575ef19bd7d9d7

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\Builder\BitRAT_Lover.dll

Filesize
63KB

MD5
c19f45e83944fcff90de29d67816623d

SHA1
b4896c417038915fcece58b0953e9163c38f9e56

SHA256
f1514d58c431a3f1a0f8e19fca9aceb3ffac6c74a56d788dc30ba5f5ecb01b07

SHA512
ed31dddff225eee8953abbe785a9d9b3e5ba2ab2526da9144b07d05c715cfe51e5a14d8dc644cd9aed49a246b9e3a1bb9e52f7d9c66d23cd6979c687b187c3e4

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\Builder\Builder.exe

Filesize
2.1MB

MD5
e31a8fff0cddacb974bb177689a19fa8

SHA1
97df1e60130e99f740913fd96001dca216784efe

SHA256
56bed10b80665b084fa1c1f7acd75e03b42931249116eb5056541ddbf7665ce5

SHA512
7eafb8079f37788bcca35cb0b167b2bab926f75eb895c8dcb83d9ec63702b260334ebd15e529ad3497a00752bdd9e927eee5b8a0d2f7ea7b1da427f6df2e194f

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\Builder\Stub.bin

Filesize
3.8MB

MD5
c29fa8ea072936ccff2cd6825ba3498d

SHA1
73fdff8f9d5b45291fb33ada577782f1241c11d2

SHA256
8b424e81e72bead6c3067c2988c62d52fd7456ceda8a6eb8f09fa9d884274c62

SHA512
4182b9c00bca0d0b69607c84314c596ef87371d55054fc0457fc8b9a08fde539ab795238f12ef88c767df1e894101fbb4e9181f75a75e4075a027d6d0266cb11

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\ObjectListView.dll

Filesize
434KB

MD5
b490bb6c6bbb4af7c43c15071c0e5034

SHA1
828a03191d6df0d17975007f6bef8c56e371069d

SHA256
0b94b3824761723400dc0357e7d490085a5ccf3415e332155c5b8d6c7bfb8788

SHA512
27c60b0c7e85d22249332aeaf5fe1f0d6083e8f68cc461e4e97e3a394e108601378fd2bc7ec39c1fc2dc8338db87f5555511337e95921d63ab9ff7d5d18056a6

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\SkinSoft.VisualStyler.dll

Filesize
1.0MB

MD5
60ac512e63a6b95eb37cfd530a01b94e

SHA1
4b5a1fa50008439ac074d732447ab9032a157114

SHA256
9f3e7ea22d052fee0e5be8cd904ac4425f3840df7452c760d5cc5357830c394e

SHA512
a6cbf2f1f6eedcb142aeca7218334dd16058b9f643e51cee4771e1a0f7124676361deac0c48d61468296e88035e4dd49b55fd139b80ece54c86c0338bdedd681

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\Zeroit.Framework.Progress.dll

Filesize
4.3MB

MD5
ec5d2e878ad0432b246901e0e41e9f25

SHA1
b6032f95b0fc77a682628365cbbe7f1f3392e744

SHA256
a249008a635defa206f4568dcaae7c598e4dcf605bcace5117a407a8ac23da96

SHA512
0fe13c6cdf6f38db58340f4a0e1cbc8d069ba58df9d49fd9c6039a41cfb8ddd4c987f192de6dc9d776f5898cb891c89b2aac137505b18728579c592c23a34f78

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\Zeroit.Framework.UIThemes.dll

Filesize
6.9MB

MD5
7ac51cb077c41caf0978285700503ef7

SHA1
799373157da37b3057c9fd4b4df2163cb452a467

SHA256
ec304dd519a9f70f963b094fb4eac73e49471bb124e47a844eafefcce959b31d

SHA512
82388e4796b4c4b4156967a589399d892b1de971e8693599c66755401b240d3b5f3b972fe8ac2fabe693dfa8798c38b43bc4f0bb79ab1680b3d61be8a376af96

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\ad.png

Filesize
643B

MD5
cc750844215aed20b2b05c10d6082b0d

SHA1
48fe2e042a75efb26c8b1822b51a8c9ab44bc4af

SHA256
8adee4d665c8119ec4f5ad5c43a9a85450e0001c275b6a0ee178ffbf95c4c043

SHA512
ff5a1141d9a3de908416f50bc184713e3cd340b100742726b86b03a8e826bf1324348cc2a02c81027f263347aa4944f5af7d59af6a35fb48cb6e37b93de3d53b

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\ae.png

Filesize
408B

MD5
7391e6b6df7b181d51ffeb2a5a6d7bd4

SHA1
e442abb4c7713078983da019502d070f38c12e26

SHA256
6f20d866841c4514782a46142df22b70b8da9783c513e3d41d8f3313483fe38d

SHA512
0a642f43a40e2c75249abe5bc41fc76489e6766f8f8ed1f075ccb66beae6da1e3362dc5ab97747395e35560d5accc4cf6cc5a480655657f6d2c63379205b8105

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\af.png

Filesize
604B

MD5
ae7c58272ae46cde945ccc4bed00fe9e

SHA1
a2b715b803d7ee6bb2b3827e09912c9ad7fbee43

SHA256
c1054fb8d9595948aa96bc57c9ab6fb6b3770d2ee7e09ba7e46b09b21bf51bcd

SHA512
aa0df3c684f97b47dbe2b0f51d271814d48b411e3cc9e82b681e9e8d43c35eef1e1d2295b5fcd999dfba56658fdf46ce2200cc853051421284ef5161423c1d86

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\ag.png

Filesize
591B

MD5
390af4c36d462bbf2627a1182946825a

SHA1
3bd00dff1ac2a305320f31048389fe1c57d67e70

SHA256
0dfb5c39e2a3eebe18b431cf41c8c892ab5f1249caa09d43fa1dd7394d486cd7

SHA512
3a8768da603e5a7f1b92b75133a68f4cc776aedf9750d1d388fc23511797b86348dff3bfcd837e1f561fa052666cba05a53e272405e1555055956209a2ec388e

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\ai.png

Filesize
643B

MD5
08cf0788a582710062140f69887300fc

SHA1
55094d8c1c4461a2b49f2815726bda895c7c5809

SHA256
721542818b00e197fea04303b0afc24763017c14b8cd791dfaf08411d9a99cae

SHA512
b16c87d694cd0ac9d94afc619754f46ad3c4dafcd155494da6ee2cc5c0f6869784e310711d12cb73b58ab7d7a48b6e08bc60c6885774a56dc89fcf5b358db541

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\al.png

Filesize
600B

MD5
7c5bc720b2cf3047c9fab800e271eec9

SHA1
a8e31ed33613d407953b976ad42b3994b283b46c

SHA256
3f7278c0c4272b6ff65293c18cdbb7e2e272f59dabe16619c22051d319ef44e0

SHA512
2fd48b6c49d6902bc749d1028b14d00044374f144aacf0f6155cf226b2d3024170ee6ae37928b889e0fe9791ffe52040e6c1932280c4e672196ee66f5f1b771c

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\am.png

Filesize
497B

MD5
fd5d9d1d864ea76406afec5e11f2632f

SHA1
1d65a04d04fe6acc226f51521048745aaba27455

SHA256
e34d4e7961e7e994775dddfa994e4d9f709876634d36facff6bac70155597c23

SHA512
17f6b1bf5337103f5463204c37d13fd7c09a45e05442b8907dfddea210d28bf020fcacb044ec31bb80838c613af4fcd3268f783021c3d63094b39f37db5d3cb2

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\an.png

Filesize
488B

MD5
7d7d682a9dc9f2a26a6dea1fdb87334f

SHA1
3e14814df061e038b586544045bdaf6b598f9318

SHA256
4c9bd8548dfa58fdf9e6ac703f94c8b96d8136c42b06fbdc8e2d8817e592ffde

SHA512
b740ec275b1e82813e0ca0ad33258dd78111f37abb1ca42db8c393f2d91eb1fd19783e3d9cf66e2cd51c905ad66d22217e49f161c83249290c9e94109784ed8c

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\ao.png

Filesize
428B

MD5
41a8aa1e11f7086d2413d8d9a777680b

SHA1
7669fc0f93de2266e504c5d341c34cdc1bd14c32

SHA256
49b0a50005440417bd679d03d4d78f9ba0d1c457285c97e94f36e56b1e8b623b

SHA512
5ee0853320a1122eddd3df7076f02d31e03088274ddcfee9488dac56db90b6fc2dcee7a3b2b77f73399d25a7cd5399032bf141834a4ca951b36332bbc5abee20

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\ar.png

Filesize
506B

MD5
2fa357868e66f1aec9c4c4230baa45b3

SHA1
4c849a943c12cf8d1cac1190b04ec82cd68483fb

SHA256
776fbb0600f99ccdc44e2ee7f8b6559988c443f3a754792585b1b7008aaedb91

SHA512
811a0b184ab99c7d2fa41b9f3794465d18896bc6cae3aa286044d78f4279aa8dbec72a5810c029f028028a7014944d0e77d65075e5ab8f920dbce177c657feed

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\as.png

Filesize
647B

MD5
96e49204e758277b6720584c4d844ecc

SHA1
0628b4658024559820d908dc541b16676225f43c

SHA256
3ef7f1b82b2f28cae0c7df163c5ce9227ef37244da85118374869fc5f2e05868

SHA512
16363fae8431677648eb0357d30bef20d10a625d5beddc4da7ea77caa66a07fe98abb24a446374f468dc0a7564050a93dd857c7b87a97e309d0320fdcbf5d2ee

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\at.png

Filesize
403B

MD5
62bf1a5653692b34b2ee1f734a59b062

SHA1
56dced18c23f60ee643fc024952a22a4df96d521

SHA256
a3acc39d4b61f9cc1056c19176d1559f0dacbb0587a700afdbe4d881040ccd52

SHA512
35b772e4867d22d70b01564fad66fcadaa02729fe9e7f1687411185c8cd6f36e8d8926fafcccde6c86791b7ceeaea4f1be947f8f8bdd6f8211a8a441b04dec24

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\au.png

Filesize
673B

MD5
2fba49c88880e9ffcff947015cb7ab9c

SHA1
20361b7e4d3cf488c5e6330b6abdb1efcaa9e866

SHA256
a7f9683bc4240ef940ee3d4aaf127515add30d25b0b2179a6cdec23944635603

SHA512
6d826ac84a3ba2f845a1092c75a4416f170fca0e74122de5d031095942d51f2c1b53604589a8960a3d48319f3040361d9b66f1733de19a5fd2b18f07fe6a29ff

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\aw.png

Filesize
524B

MD5
6e82279ceb4702171f345fead7ff3e35

SHA1
d65c98f09c2aaa4ea7b80cd0194fa5c2b2139803

SHA256
2dc58a1fcd65957140fa06ba9b2f1bd1b3643724cef0905e23e1561a5b3dfa5b

SHA512
b2b8f49882b977571bd3ba5b6f601d292c52699e2cdcb767217061cc5c1feaecdd37ea0f7b1604ad810a6bfbe718cc360a2bdda1565847641fb4f166b9412e33

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\ax.png

Filesize
663B

MD5
27708378fcc025e375fd3c303fc1cbd6

SHA1
80f2cae567c864f698e995b85c315c081a923a6d

SHA256
3f38a42fd54e4c7cb1154026f734bc444f9cc942b8b91f099cc65dccf6c7f431

SHA512
a328121605cead5dbcb9fe46e37f70236b388832ab3c217602a10da5be19e685c9d38df9b4cfcbb162264bf647565a50e56e5ace56c5602ce4d49c83d7829f60

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\az.png

Filesize
589B

MD5
d63f5c99e25eca9de2a97f63161f38e6

SHA1
c983ba7753a911badfee041c7080760754ab8e45

SHA256
45da74f4c8a50cfc13ff612e9052a7df77fae155e20c2b67ec34c4e3d46dcebe

SHA512
083368f19aeca2b40d30d471026dfa677e759a467c70e3210455188f76b002ef342839370a8d9eae1f662c9c022b99f44e085256d4df982f8b0929d5fe7fc11b

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\ba.png

Filesize
593B

MD5
cbb6ce46c69e14bbd8d2c8fd91680d33

SHA1
40dab3c90fa2fabee16fa59ecafc129a104f7ac1

SHA256
8aab9c83759b1a121043ae5526d7bd4174d6612c7d0c697609731e9f7b819b6b

SHA512
a357a26bf7b21290c9d03be41861260989a43201ed9bf1a18bc70b325290d3e9b7c80ac1bfc033b2a2e334c12986654250bf01c072679e42d850b1c80a18ddca

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bb.png

Filesize
585B

MD5
47c8aea417660e5f4e8b5a7a73f2cb18

SHA1
15d59280f37a9fb8b064c4156052ca33bdaa4b1d

SHA256
93977880a9ae72940ed7560758b51a1ba32d27aa5fd2ad5ca38d86fe10061c1a

SHA512
d17bc4b09cefeb62fa1aace7e7513c6f3dfe347eb09b7d1a507709ab82ae4cd7466576ebd7e634082281dcd549a7026d4f96e6bcb12d965f7e4dfa3663a3d2b1

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bd.png

Filesize
504B

MD5
f02d8deb9de271cd246646872798af15

SHA1
6aaea46541a17ff8dec854d63ec14c70305a2249

SHA256
174d63b291981bb85bc6e90975b23dfd0538a28af9cd99e3530d750dfedf1807

SHA512
ddad0886d7e1fb1bf99be5c5d36b18e00ad2ee74908510c5280ff7b6b080fcd836b3e053bdb77fc17ae551b9e35d84f57e0e3f1a69e73a3225ea34c8ac909458

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\be.png

Filesize
449B

MD5
2404b88a07bdb7aef652eec0f6fce287

SHA1
200d6ed719a85e07e7671db820f14a1c57d2c978

SHA256
45f75a63fadde9018fa5698884c7fb0b2788e8f72ee1f405698b872d59674262

SHA512
02a0c645e41c64e0117737b800083b5dbdd017d0fe770124625205bd9297de8b40a4db487876ae4e8513f698bddb11e944d619abc0616866cab0a325dfcf6a0b

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bf.png

Filesize
497B

MD5
cc65efa74cd7367933ecd52115204b2d

SHA1
750295a823985b7223edc2c230ae1bc4f74b5e81

SHA256
9069275d6c18aaf67463b1fffb7cdefe10da76cd955ee2c5022cff06efa241f2

SHA512
3a8e8cd077a197844a4457cdba5ba62c123ca6cefe62f5f5b1c7835a947f6f66c78c79c4124028b3ae9491121e3f54def46a9dd42ded83d6cb9043f84467a4e2

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bg.png

Filesize
462B

MD5
77b2183ab10cd26ee4e79fdfc12b8621

SHA1
c46dc6e0512560af14fceef6be24e8448e0f85f3

SHA256
c4838a24ad388f934b04dbf9dba02a8bc6e9e58d0a1076477b47b5987a5c2d64

SHA512
50ddb2ce4bc0597bd3abba49ccfed0bc57484bffad6d44b8eaf2e8bdbffb52576167c7c575d218693c984d94775f6dd4b573038740d95cd6c402b8aeea49b885

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bh.png

Filesize
457B

MD5
5bbf6106968b2517d924bac4d99b41bd

SHA1
6ef2942798482bd782411d4e68d71f6930c2dbc2

SHA256
d8dfd5dc5157e30aa9e241e4a7d13513dedf608045b6736716ea6c5ca4047855

SHA512
cdb7e87b132ed0fe8ae73fef815c0a0226d09d8bd4cccf8d02e6c3d34e4347e2f918938c3938058478441199239d16de8913b119f69f67cd7b5c79bada680a96

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bi.png

Filesize
675B

MD5
427c72cd341f288faf0e62f03586c7ba

SHA1
fd42dc950f5d2de44453060d7c622ec6fe59d763

SHA256
f2489dfb66723f8585830a51ec1ff4f5a514f5b6fd8bfa423e2880118e18ba75

SHA512
6b1df49193ecb906be51092d5681a74a19314fbfb3ac20750bad1661b3b189c227d498fc681f6a74d5c61c6e1f52652c011a647b645183f0f39a5174ccab6662

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bj.png

Filesize
486B

MD5
67bd2e990cc7e3dc5bbae821fd38f20c

SHA1
9e062661797722a7465a0b5f744423acd88c1b75

SHA256
3eb78453cea7aac6afca9a54ec8a2b0d4998df40a0c5494534992fc38f5c2402

SHA512
84d3b1303094bbb68f998ab404ce4ca6fbadae88612ba7c326f4b17c3bdaea94a3dfa8e09ebfe6620a8da423fa644f607025a357064a7a8a5008317587bc62d2

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bm.png

Filesize
611B

MD5
cf195bf1921659202cf8ae899e9171d0

SHA1
21034a5d819ab57acccfa58ebfc9d4d2c563cad5

SHA256
e8087faf03f478266cc279382009391155615af6a7f3eaa47b21717ce8eaa401

SHA512
de22db15f55f8fc593ef18784f72dd9a5887ad8c7f273a7bef2c44357e9fc825a91c0ee39d6f23b31a0a14f8cbc79a79e8eb9f2243df51cb7587149e622c13cb

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bn.png

Filesize
639B

MD5
4911cd2a8fae48d82f9ce124d908be3c

SHA1
b3d168a79813a05521960b3312bf5e304e165c69

SHA256
05a6a5da710bdd98eb1d8c9b097b687a34ace268e106bd3437298d0ffc8a7473

SHA512
a96fa3219085d85240c9bfb63bf39d074ecc55c1722d38b2ce808d3ec5858cf79cb14f168aff6025bc15ff3f9f10d0c337462bc7685e4b6535025c9300460541

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bo.png

Filesize
500B

MD5
151854ff619d7a44894a37b5be73f463

SHA1
7015bf855de3a85d62d9f7b3cdc1a102cc4873a1

SHA256
a802b4b4b31e9c87062e725760b052083ca0d2cc2cced10f44731688289c4ca5

SHA512
e4aab0ecd844869c2762036d3b4220a8953c98ca9afa86102a5070b60d760c571cc4aa253854abd3101cc831966a03e6eac19192bec859e42d8d82d3ee3f5abc

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\br.png

Filesize
593B

MD5
54c40b8a9ad7df4783d19acc05910f8e

SHA1
8cf2122c23d375e4d752ad742f2f54e6a270bc63

SHA256
dff6f4d907290bdbe74812bf73b590f268694e0a30e64b4bb24b803a47b3e319

SHA512
7245213a9d1468d18a75cd96d91e7b8b602374902c2a852dbfc9d5d6e341d6183d8b5517651d3d546085ec490b196ab6e0b37ae9f5f140009a29c99201da7ef4

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\bs.png

Filesize
526B

MD5
8b45f84cb140ec2448692187a82abfc7

SHA1
db5a9faed06fe64c851985621c61b1cd22e09ff0

SHA256
aabf518642010552de4ed24400d5d40fa7e6bf1142a183f4989dad88d7cede5e

SHA512
d57877e3737f65e18d6aec00a71ea8b69d7f8a1c656db7c4a2ea56c718dc34b71f1a89bc0d92c950903517f3e756a3e438481cc635a06638dc9c9b94b11db17a

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\re.png

Filesize
545B

MD5
c1cf1874c3305e5663547a48f6ad2d8c

SHA1
0f67f12d76a0543772a3259a3b38935381349e01

SHA256
79a39793efbf8217efbbc840e1b2041fe995363a5f12f0c01dd4d1462e5eb842

SHA512
c00e202e083f703e39cafbb86f3e3f6b330359906e3a6c7a6a78364d6adeb489f8b8ab1b2d6a1b8d9ef1a17702cfc8fc17219cf1aae3e5a7c18833f028037843

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\flags\sj.png

Filesize
512B

MD5
559ce5baaee373db8da150a5066c1062

SHA1
ee80e5f63c986d04f46bff10f639113c88107ced

SHA256
f8dc302371c809ebda3e9183c606264601f8dd851d2b1878fd25f0f6abe2988c

SHA512
c0ca7595cdd2dcef0385ccb1c0d15bb74accaea63b9531233bddf14c1791ffc9712dff660292706cfa269a975d29d7a189885cd09046ac6d8ed39a57ec9557ca

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\media\skins\Luna.vssf

Filesize
128KB

MD5
a4dbb427b36745290a404b07cf72fa5d

SHA1
d339965d74022657252f41057bb3967265bc9b14

SHA256
05c0d7e6f31d9f4bc54c22c4baae33dac8d352ec96ed38cf9647d8da1a299a05

SHA512
478d4fac97f98cc0f6f62f4bb867528c1640f23c1be75a94cc23efbe1e35c8c031a9bf91cc17bca34d9f7f46f114bea33c9d6f090af3011e4ea5cb77900b851b

Download Submit
C:\Users\Admin\Downloads\BitRAT 1.38\data\tls\BitRAT.pfx

Filesize
2KB

MD5
0aebbfbdb99c7669f47158e27c25fb04

SHA1
c786bdbf7846f3b3dd303c7a29fff5e5c044e98e

SHA256
e6a9e9447cd1495534c572bbac98628528ce5ec2d707746a0b94bb2e7500b3c5

SHA512
f3c47c782eaf49027aebe3f82133878f28ed6e5248e7753d05dcdb07fc1bda3e061f890b5807bc5054f084284464ee47905c25b03eec578b55e150adac561d9f

Download Submit
memory/860-1737-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download
memory/860-1731-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download
memory/1140-1105-0x0000000074980000-0x00000000749B9000-memory.dmp

Filesize
228KB

Download
memory/1140-1597-0x0000000074520000-0x0000000074559000-memory.dmp

Filesize
228KB

Download
memory/1140-1202-0x0000000074980000-0x00000000749B9000-memory.dmp

Filesize
228KB

Download
memory/1140-1201-0x00000000745E0000-0x0000000074619000-memory.dmp

Filesize
228KB

Download
memory/1140-1132-0x0000000074980000-0x00000000749B9000-memory.dmp

Filesize
228KB

Download
memory/1140-1607-0x0000000074520000-0x0000000074559000-memory.dmp

Filesize
228KB

Download
memory/1140-1740-0x0000000074520000-0x0000000074559000-memory.dmp

Filesize
228KB

Download
memory/1140-1247-0x0000000074980000-0x00000000749B9000-memory.dmp

Filesize
228KB

Download
memory/1140-1095-0x0000000074980000-0x00000000749B9000-memory.dmp

Filesize
228KB

Download
memory/1140-1705-0x0000000074520000-0x0000000074559000-memory.dmp

Filesize
228KB

Download
memory/1140-1083-0x0000000000400000-0x00000000007CE000-memory.dmp

Filesize
3.8MB

Download
memory/1140-1094-0x0000000074980000-0x00000000749B9000-memory.dmp

Filesize
228KB

Download
memory/1140-1093-0x00000000745E0000-0x0000000074619000-memory.dmp

Filesize
228KB

Download
memory/1140-1643-0x0000000074520000-0x0000000074559000-memory.dmp

Filesize
228KB

Download
memory/2220-1413-0x0000000000400000-0x00000000008DC000-memory.dmp

Filesize
4.9MB

Download
memory/2220-1365-0x0000000000400000-0x00000000008DC000-memory.dmp

Filesize
4.9MB

Download
memory/3044-920-0x00007FFE852D0000-0x00007FFE852D1000-memory.dmp

Filesize
4KB

Download
memory/3044-913-0x00007FFE85290000-0x00007FFE85291000-memory.dmp

Filesize
4KB

Download
memory/3044-924-0x00007FFE81C40000-0x00007FFE81C41000-memory.dmp

Filesize
4KB

Download
memory/3044-923-0x00007FFE81BF0000-0x00007FFE81BF1000-memory.dmp

Filesize
4KB

Download
memory/3044-922-0x00007FFE85320000-0x00007FFE85321000-memory.dmp

Filesize
4KB

Download
memory/3044-926-0x00007FFE81C50000-0x00007FFE81C51000-memory.dmp

Filesize
4KB

Download
memory/3044-921-0x00007FFE85300000-0x00007FFE85301000-memory.dmp

Filesize
4KB

Download
memory/3044-928-0x000001633B4F0000-0x000001633B564000-memory.dmp

Filesize
464KB

Download
memory/3044-930-0x000001633B9C0000-0x000001633BE0E000-memory.dmp

Filesize
4.3MB

Download
memory/3044-980-0x000001633DCF0000-0x000001633E3D8000-memory.dmp

Filesize
6.9MB

Download
memory/3044-919-0x00007FFE852F0000-0x00007FFE852F1000-memory.dmp

Filesize
4KB

Download
memory/3044-918-0x00007FFE852E0000-0x00007FFE852E1000-memory.dmp

Filesize
4KB

Download
memory/3044-917-0x00007FFE852C0000-0x00007FFE852C1000-memory.dmp

Filesize
4KB

Download
memory/3044-916-0x00007FFE852B0000-0x00007FFE852B1000-memory.dmp

Filesize
4KB

Download
memory/3044-1058-0x0000016341A70000-0x0000016341CF0000-memory.dmp

Filesize
2.5MB

Download
memory/3044-1149-0x000001633F4C0000-0x000001633F544000-memory.dmp

Filesize
528KB

Download
memory/3044-902-0x000001631D900000-0x000001631FF3E000-memory.dmp

Filesize
38.2MB

Download
memory/3044-915-0x00007FFE85310000-0x00007FFE85311000-memory.dmp

Filesize
4KB

Download
memory/3044-914-0x00007FFE852A0000-0x00007FFE852A1000-memory.dmp

Filesize
4KB

Download
memory/3044-904-0x000001633A6A0000-0x000001633A7AE000-memory.dmp

Filesize
1.1MB

Download
memory/3044-910-0x00007FFE85280000-0x00007FFE85281000-memory.dmp

Filesize
4KB

Download
memory/3044-911-0x00007FFE85270000-0x00007FFE85271000-memory.dmp

Filesize
4KB

Download
memory/3044-925-0x00007FFE81C00000-0x00007FFE81C01000-memory.dmp

Filesize
4KB

Download
memory/3044-912-0x00007FFE84480000-0x00007FFE84481000-memory.dmp

Filesize
4KB

Download
memory/4092-1367-0x0000000000400000-0x00000000006FE000-memory.dmp

Filesize
3.0MB

Download
memory/4092-1370-0x0000000010000000-0x0000000010227000-memory.dmp

Filesize
2.2MB

Download
memory/4092-1388-0x0000000000400000-0x00000000006FE000-memory.dmp

Filesize
3.0MB

Download
memory/4092-1389-0x0000000010000000-0x0000000010227000-memory.dmp

Filesize
2.2MB

Download
memory/4916-1702-0x000001F6DD390000-0x000001F6DD3B2000-memory.dmp

Filesize
136KB

Download
memory/4916-1701-0x000001F6DD420000-0x000001F6DD4D0000-memory.dmp

Filesize
704KB

Download