hxxp://freemovies2021[.]com

Resubmissions

25/05/2023, 15:37

230525-s2nwvsbf4x 1

24/05/2023, 19:54

230524-ymzbyafa8z 1

Analysis

max time kernel
1800s
max time network
1802s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2023, 15:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://freemovies2021.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133295026717523353"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4996	chrome.exe
4996	chrome.exe
4164	chrome.exe
4164	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe
Token: SeShutdownPrivilege	4996	chrome.exe
Token: SeCreatePagefilePrivilege	4996	chrome.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe
4996	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4996 wrote to memory of 2460	4996	chrome.exe	86
PID 4996 wrote to memory of 2460	4996	chrome.exe	86
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 424	4996	chrome.exe	87
PID 4996 wrote to memory of 3016	4996	chrome.exe	88
PID 4996 wrote to memory of 3016	4996	chrome.exe	88
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89
PID 4996 wrote to memory of 2400	4996	chrome.exe	89

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" http://freemovies2021.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbf2b49758,0x7ffbf2b49768,0x7ffbf2b49778
  2⤵
  PID:2460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1792 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:2
  2⤵
  PID:424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1308 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3112 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3152 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4536 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3304 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5400 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4964 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:8
  2⤵
  PID:948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4728 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4848 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5520 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:8
  2⤵
  PID:3020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5640 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5676 --field-trial-handle=1820,i,1920537082897581118,161271612599134582,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4164

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4460

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x240 0x298
1⤵
PID:3112

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\36e075f6-66a3-4961-b0dd-828465324943.tmp

Filesize
6KB

MD5
f260b328c5d453cdece09fd0f984df2c

SHA1
81a745328146fbfb66d7a324bf7632e36198941f

SHA256
6ae44230c3bebf0051f924799b4d8ef3438bda53a2b7a4be8d19369518288c8b

SHA512
4756d23fc013e47a92f87453367a0757e802874440ecd55efd224b698050791eff1ba6419f04f5c2a694f3ed83b05603b77631cd87be596fd3383638debc5535

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

Filesize
24KB

MD5
a42c6333a13e5376af95f46fd9c7b627

SHA1
57a98e519a44915e39a0cb6f23812adfa6611e67

SHA256
62bff9dd0379da44f9d7f739af671bb6b243c016b49c7146b431ae9e6b9cb41b

SHA512
68e511708465c75662845c55169de20572adfb359e1f4fd037c169bda44d853fdc622794912406b1908b585c3965d4a8612c007af9ca2601dacd4a14283fc894

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

Filesize
162KB

MD5
08f3851748975142ef7c08a8ea1ce61d

SHA1
31ffb52b4d2e4263a2b5a19195ee1784bc884a15

SHA256
e374d418c7975a482356a79e25f0722ab71616be443cb19d96ef88706937bf30

SHA512
d4b86e69582cf1bc33991cd44eb1db26eff3013dcc7ed34d8b7d890be510ef3949a50332e732c22182a8fcbba418c6ba18aa031a6f0b5b621ea2211e665af3f7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
e7c2eb64e54567df2571d2b024418140

SHA1
055d494c9bcfb4f861096ad9569d70a374bf144d

SHA256
fbad4ffc1120a628cd65364ddc6e4e4dac5220b9c26cce6a77d224dc1066c696

SHA512
290189ef8027069cebd79a84383631740ca5b8ec6864082d43d168b2cf5e6b20a795335c91eaa1f4821cca734a39abda5839cb31ade56c421b75cf17e10f2410

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
960B

MD5
7acceb28e8ec5f037fd2cba06172f47c

SHA1
ffa217bc5708098359cde40c6ea98cfa45e2b7fa

SHA256
9621a8ce4373fe3545465a883601edef7d0318893a8cfc1becb9a2b71dee9162

SHA512
08c878c7068b24eb5035cd830b9ef3f615ba23fc02aae7c8c9abc9ac1461d8c632a9479734d8d92b8d67c6cc04d85bf9eddea7307fce8174a36c0e0e5618209e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
8ad17cce76af3ef32eb2951a2868231b

SHA1
500228e2ef02208ea498ab85202895f426830439

SHA256
bbfc6744fa36087dc448331499462ce774c8e85d9a35f7e5c0172794635e78f0

SHA512
717e6579b2a3247bf2741ace4bf56a773aa8a89e4a0cf14762232518ea233ccc0f27b46b4e3c809718e1dd315d68cd399616c6e52bc9be9f9645fd04a7dae40c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
cbb1ac1307a73d7546afb55ffe06ac23

SHA1
3280f25f8bd86be0983c42b1dfd3c8ac78cf5db9

SHA256
1cce4a770778752f7a71c401fa01b5f6e6c8c74d0ba9782f8c5a42ee37e70ae5

SHA512
aebfc0ab9404b962888f3fd793bc611a3e400ad6a7288e130df9a95a7ab87beb333cab1aafd8482663521c4492de41e0511d0ba6efd749bb2cea049454b9665c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
ff68b44862b76fe770e903a660d61984

SHA1
4a37840747156f9bafccd569e9ba14987643ab0b

SHA256
5445b0b8be6175e93574fc7d7038d15b98ce17a75b1fcea53c39d40726ffa73f

SHA512
3964e163d34bce497233e224c23330fab2bbdd04803ec76afd81d23cf56b0157b36ebd9ea260977c34e34738ea47d4eee1a751fd05337a3c8f70d11316527e3a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
b22af10373fa0211d25da7acc0e9a094

SHA1
91f9f074cb1e0ae22dd6c76fb80b5fca6c79f56b

SHA256
03a907534b02ba0b4f1086f9fc5cd1262ba35840ccb4fd674860b78ae824231b

SHA512
bc9b4a968fb06ea9dafcbc861d64d9bb7322c58990c518c1aa60163a7a3ae87b82d3f99025ceddbc0d9bf7af9a711f0ecb8d447722a09ceaaffef950110ae13d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
c50fa5d6f6e3cbf1c86b49563303fb41

SHA1
3f0bc39f654342d209cb2ad4aa45af1db8489729

SHA256
04e6206b80280e0e964d3f1ca2abd10156075271b401d2532ffb553eea30951f

SHA512
0c41d3bd4c518674037432559cce20330cf939ca51f50c8365361e4624b862309b5d82a40b508436595c861db120c13ebccedcf57261fcf169e1a48558a90cb9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
1cd31caa84fbc882a9f1f7772aa0450a

SHA1
b029c0dbc1bcdf4b098b6b4b397a15ab9c9401aa

SHA256
e02d74ab185ea20a3dc0e0a91920fafb596a11b5823909dadf595e984d8c2cd0

SHA512
8e20f199e471652f91ec3cfb001df50896282325f8a9f727d1d03dcea96fdb558d3a7205f8cff71ee9ad2a46bbc0e350a5d99ff812a14a29929ee5492cff7779

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
3d836f5f2c62db8b6f63e9793011188f

SHA1
42a7371faf1a62efaceef61dac42d4ba9c84d164

SHA256
605e2e1d6d24d509129c52563e65a1c1e830c06b7c999ed24fa55173c49d19a8

SHA512
f5d5555dcaaa3bbac863fb2d4c375fccf5abc0f46edcda76511517e0a1ecb9322bd50e3ebcf3d97bc10ec1f5d0a518ef07d2942c717ec7cefe6b9e47cbfc888e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
e126459b1c1a22a0eb603b52c940eb94

SHA1
456a76463a036813c2e5a349acbdb376f850f699

SHA256
6fdd15dd23961ec54d72df563ef505db25cfd2579fa3523ad2df0846507ce092

SHA512
b3a54f33a6fb864f5b4eb6e5963e08c129bf1d8a0d4e785df1d8eefed628fe9f05164d69af811320c331e79c5716ab5d3b1a5a47796d8eb5b59c4c3090186a22

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
153KB

MD5
7714702e198286d61a99214c11af9247

SHA1
9e4ba87d440a12fa1717dd404fd71add88065995

SHA256
39455f702af46c630bc35270b2fc7a3c3f13af95679a7a45edb94aa45baab98c

SHA512
2704a2f0ab53f5a4066597cccd32be3025a80414572d11e47958d8549c413a8ba50d0332212080dc03d3bd38c7b04601989eda253ff936d706033bd9c3045886

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
101KB

MD5
f0151b6127c40f70fa8a1ed0f9dc22a3

SHA1
2e7915be1ed4dea64944609241b1d53018ff4557

SHA256
c4a6763f26d4f3d8b91aeb5c95903c0f3a733454397baa9a9b9673ff9c638a49

SHA512
73321164d7742aa67529cb857a0651bbd03b0b2648403119e1949948b75cec0a9a361af10d616cd0a6d709342722f58ae741438ec35cd25384919a1e1d93fee4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5836bb.TMP

Filesize
100KB

MD5
3f47e490298becfceec132baca2c363d

SHA1
1c5b3626fbb13972e44a874979fb5a0f66b78598

SHA256
a22218552be561dea406d45983b3cec11b1c53cdb164d5f24636fa3dccca10cd

SHA512
d853627e2c9758985e246bb96522d4f2c77d3a6529e5c117d6ffc8b2e5dd796456d73ae9ee05a677a2e53ddc411327aead94d25a81ccd2da88b90c0d19db9c92

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit