hxxps://myreqdcompany[.]com/9Zt2TwT2mjD2yga1euD6tC8fXzegTjKzzmf3coslMEs/?clck=2155a077861e8a99c9de6c4a0c3fd807&sid=18735882

Analysis

max time kernel
99s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20230220-ja
resource tags

arch:x64arch:x86image:win10v2004-20230220-jalocale:ja-jpos:windows10-2004-x64systemwindows
submitted
12/04/2023, 02:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://myreqdcompany.com/9Zt2TwT2mjD2yga1euD6tC8fXzegTjKzzmf3coslMEs/?clck=2155a077861e8a99c9de6c4a0c3fd807&sid=18735882

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133257481635204183"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5016 wrote to memory of 4964	5016	chrome.exe	85
PID 5016 wrote to memory of 4964	5016	chrome.exe	85
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3432	5016	chrome.exe	86
PID 5016 wrote to memory of 3872	5016	chrome.exe	87
PID 5016 wrote to memory of 3872	5016	chrome.exe	87
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88
PID 5016 wrote to memory of 216	5016	chrome.exe	88

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://myreqdcompany.com/9Zt2TwT2mjD2yga1euD6tC8fXzegTjKzzmf3coslMEs/?clck=2155a077861e8a99c9de6c4a0c3fd807&sid=18735882
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc75499758,0x7ffc75499768,0x7ffc75499778
  2⤵
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1824 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:2
  2⤵
  PID:3432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2228 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:8
  2⤵
  PID:216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3208 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3200 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4828 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4928 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5052 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:8
  2⤵
  PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5136 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4972 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4992 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:1
  2⤵
  PID:224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5436 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4532 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5152 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5236 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:8
  2⤵
  PID:2768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5080 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5760 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5172 --field-trial-handle=1840,i,4635104673808574442,15586572356295167402,131072 /prefetch:8
  2⤵
  PID:1236

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4220

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
dc7aec30b493b365e7beded66ecd34ec

SHA1
f1db834a6cd29c915d76137ecb326e963b8b656a

SHA256
92a5275819856241dd73837a731f485fdb9478bc5b7a79c929461b1098ea94e6

SHA512
2ed4fd9aef69fca286d9daf26c4852f92e8a7d24a350f4860614cf8288dcb0187fb25bfadc9b5dcfb902f685d40b525512e78f1e7002c8bf9604a811df393740

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
5KB

MD5
d84ae6568604ff80386e39aefe7f1203

SHA1
2dfa4c59a1407b1ec9e3fd688d17ae7b593902aa

SHA256
fd4df9d0e78215a16ec04db50bab8a42f71e6d5b4a197a379b62da2e5e9011d1

SHA512
b4fbd900c57ae758bafcef1582beb6b73b9ea32faeb51349ad1f142867c3b5b41c60172606404835d2ef7a64df35a266bd360cbcf4f8f4856933f3bf1b2b39a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
874B

MD5
b0c199f0cf91a075e43af9e53e9705ce

SHA1
8ff1b03c871b60b9d36eec101340a39fc5786c24

SHA256
74816c40aeb084892de24ca7c6009acc8b7967ae815aa6b73bdb679d473bb52e

SHA512
a264f43108cf0a7b881562ce9a1999624fe48140d696f7946c86274a7f04c28827c65090a7ef13a6c7715b391467592ceb6b5aba7b34165817bcedf0695b0762

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
874B

MD5
75ca3b88cfb7939c862ce9655c507312

SHA1
6b035ce83e68520b56c1d30a0df15977798f8e0c

SHA256
bd1bb693f25469ae0de6f4c384ad0ef9c9e1d0a43eca16fbde01f5770fbb6a3c

SHA512
d049adcc3c72c9bf561f2358353c418bcbc68e718c3430cc9d743cd4b7fcecf843c391146440f986b066a67269199961dac514337d2ce0b9e6d61ac0fe740b1f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
836b69c38ef2b2df87758406b623e518

SHA1
28efdf050c719214e7a7b3d863dd3afd01e67f8b

SHA256
1ecef52a96a0fbf8f151f0354c628f09ba83f5d394ed955e7391cc720ae41a4c

SHA512
b1d93cc93d6266020e89e1a59a0c12fcbcb07aab2d404f9eb09e7b99b42e18a2ce6b7eccb9e43816709cd1ffe48a9669b1bfa950b5dc575bfdd858efc58ec412

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
ef07795b8acb17e2bbd5998039fe02a0

SHA1
15fa4a68dfb631665dabefc87af463fa8855a073

SHA256
49e21e4f5661a5cc986732dcc21ef7c11c73bdb685f469944add48b805594f7a

SHA512
5b892b8b706f1b25e34322a964a61b63fa5a356e5cbf654f58a2e2a790dee52c46fc84ac616e0f6ec19cc62fb10c7f9534e4a6847d6a9c97a2cda6b7e120dde4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
49e97c5a215019a14d8d84c55dabc332

SHA1
d3c7a0624a2cb661dacb15422bbed9df310f1dda

SHA256
e8327b8503aa2bd17cec22e78417b6bf04933251ba8a0ba68f7b37bc32f97b97

SHA512
320bbb9f3392ec8be53a7adcda6a13237641ce00f84a8c9aafb7fa9a00d8e62fbf8b9d409757654e23b7c25d210cd2703b077c86ba76b93eb30130a9882bc91a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
4d3cfa23e93462b1e1f11529f8931444

SHA1
6b63921888f80e3fd998dea01d488d7b67a80a88

SHA256
a4071985bc96d3725a4cbf4dde2b9ea44b16085e16f217398a0c8426ead11b15

SHA512
f037562a8a34e677ccf00635170a55bd3fb29cc361c56cebf61442e0d97058f553bc952cac8cd69d9a63e96219f593533751eac1cee0a2ad36855d395d77cd8b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
39978c1a2084b56e4ed0d2b56e5918e5

SHA1
ff353584cd1ef7b08745c60c8e1e9c921b78619a

SHA256
0225b26050ddd2c7d8f46eb0c0e618af9a291ad7fee8f13867dd1c21d69c8695

SHA512
ec58ac09b963259aeb84f09bdcb7c1f42029b41f31afe7ee3f62f606a9b25ef67727339a1ad9e2e8a52717c53212739e7f3f34f8353365e02f499d103af47a6d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
144B

MD5
fe7d0286956cb7338ea806e8a6505e33

SHA1
49a240bc7a831f9965223f3c05ddfc6d357833aa

SHA256
4dc7b119f6391082147e3f02cc0fb39bfba05ffe8bd0f7693cd85057d8ab3dfe

SHA512
d985b4ada05aabeebef5ce1d95316f0c087b7e0780ed3036dfed045fcd54d0dc9772bd5349644de4550ec102b4d735ad9f71c57701006acd706a4139b1c8d3ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe571453.TMP

Filesize
48B

MD5
b3470a84e447023c52f0c5f7ab1233d5

SHA1
6b1c843ef3d57377d952e735ad383185baae1f2c

SHA256
d35548f5975c95b4c0f8f800f7a93713c6fd5e46eca3ae98d1cd71510c8ce68f

SHA512
c80ea4c5ab547e7937527ff003d59390ddd92234766fcb13524c4d45937de9aa182a1cdbb1ac101e9a1e24fba4dc47893baf6ff8fc710a24883539bea6a57dab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
b9b711fc57d6fd6a18e96c8edf96f5cb

SHA1
bbf2a422dade22820a343f39122806768f61b533

SHA256
aa5d5a2e5dba149c575950e921eaa7aaab12220137f6853dd8d00ce995ae4510

SHA512
af8c2dd45dc417e48db1860b3e887f52d413ee968d5fb507e53ddda9ed088e934f38f5c49d631daac29b03a8b1a0a3a659101075ee6fa21ec6573a317edc6e28

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
ece6a1404ba1aa924579d6fed1f89322

SHA1
4396e3e4c2f768a9a44849b8f1536ae25e6df5ae

SHA256
e813ab4a6c3ef2b4c2c891b5e7a023a9d4bf3c20eba843fa9708a70a351b0df8

SHA512
1e3f5475325ab2feb9d8f33c24a00f9018eba60a0ed37c4baaca8628a1968fb5815ca9591488cbb20f514ee52901a7dc609473fb8509ab82fce2c456c64abc26

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
199KB

MD5
a91cfdc9316729db8fa302f7aa1bbfb9

SHA1
f3e78806ef7936bbe5cbe6206f4f28495a2d476c

SHA256
1353c40c14b72bf046249ebcc29497c6bab06fac5d3b30f449b318422b5eb88a

SHA512
913768f53f5f74320f0eaccefcc4579822bc44d1747933762c3f83c35de2a7b1828cfe7cee5ca5b59cf5250e8002b0f94def77bcfc063a948b1c5ec6c1a932dd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
101KB

MD5
83deed4e446492d6d311598405365231

SHA1
048c3c30e980d73f6d486196783c8d75d407e2c7

SHA256
44991bbb9afe9331f40e71607cec267a9317e4f39eb496371cecb799c2394898

SHA512
786a69538bb209bb010bdb6d4ca4996b4a9cba478934b53e7cb3c7f41a476268b3a01d0154fd02dc3fb3733dd54e419ead139ae410c1813dced360a01f2bed6f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe577fa0.TMP

Filesize
99KB

MD5
4244a056a72baee97a1d12fd8952e8fb

SHA1
07d51bc509623a25a4e4e4ae532d891af1eacd3b

SHA256
bf122b3fd5d0121cfd5e25d4cec61d583fb2e31c0c75cc19249d949a244fdd86

SHA512
8bde64bdc5432bd53a374bfd87c0d6e708ab65dc2ff456624c58c6dbfe49dc7710ffc6e54112383fd0c488dbc7a83ea3bb91d8275bd67c2ccb541dde0176cdb2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit