hxxps://www[.]mejoresmodsminecraft[.]site/

Analysis

max time kernel
81s
max time network
87s
platform
windows10-2004_x64
resource
win10v2004-20230703-es
resource tags

arch:x64arch:x86image:win10v2004-20230703-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
13-07-2023 20:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.mejoresmodsminecraft.site/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133337540741958861"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1320	chrome.exe
1320	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: 33	5072	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5072	AUDIODG.EXE
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe
Token: SeShutdownPrivilege	1320	chrome.exe
Token: SeCreatePagefilePrivilege	1320	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe
1320	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1320 wrote to memory of 2268	1320	chrome.exe	58
PID 1320 wrote to memory of 2268	1320	chrome.exe	58
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 3000	1320	chrome.exe	87
PID 1320 wrote to memory of 628	1320	chrome.exe	88
PID 1320 wrote to memory of 628	1320	chrome.exe	88
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89
PID 1320 wrote to memory of 3904	1320	chrome.exe	89

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mejoresmodsminecraft.site/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffce7469758,0x7ffce7469768,0x7ffce7469778
  2⤵
  PID:2268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1744 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:2
  2⤵
  PID:3000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:8
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2236 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2800 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2928 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4688 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4848 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4896 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3132 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3856 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3912 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5360 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4576 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=744 --field-trial-handle=1716,i,12789887990424528655,2159440885357010003,131072 /prefetch:8
  2⤵
  PID:3564

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3748

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x51c 0x50c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5072

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
a9a9bb61ac419fed1e691af75427431d

SHA1
8f58b22ac5bd3b2abda7fdbbee0d073b18b4d6aa

SHA256
5016a3c34c022e29220d32c3e2afc7d13656cab37e8f84a6d536adab25da05f8

SHA512
e6d66468b0ee35add7a3adf21b87e848203ead806a3e06df9aaf7dbed8cbf6ceb75cf409c05bf158a1f089fd84ae511a46b0d4f936a55c90af669e8b5155c5b3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
5KB

MD5
5583de57c42d91874f335063e00bbb94

SHA1
cd41e79f38c39cea04a01b75a0f51c37a71189a6

SHA256
286d22912a17524fbe9309f4f7d09dddc93a48e45a338d588393727074bec2b6

SHA512
a36397295f178fbb0b87c19673fab0079082c09d8cdda45e088b1cf636a041437c32ad953399b79d55b073f0a31da399afcb9db1a5dd3e8f42dfa2da8bcce630

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
69c924bc668dcc90045dafc1823e4b8b

SHA1
57b91aa2cc06a6bef0f38e8be5031f9bc11672e2

SHA256
1241a1e245da520b73fb3a9651e328da6a9e99e50ea796b60328a38d2a0fdf9c

SHA512
e57196291377ef7de93d88c2e211d6a842ad1bd151e79bd6f973a3a7d81d7b2cd52281143bfb12ce59c70ef6e841ac9660237eab2e105159885a634179e5c22a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
ddbe03c23428cf4cf9ac16c155fd2084

SHA1
32477a3e8c6511077ca69034d4f01fb446d320df

SHA256
307343cd2a0ffabe930889f47846b8eeba41145315bf229b4477e5b7b03e03af

SHA512
0d04f09dc9319036c02a983f46720ba5ccaeaf39582cbfd89059b077494bc6a6bfde6e63674b20267b77500358cd698bf7fbf16b2000aa26cbbb3e08f1304f07

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
1f6171b9af41be8057181217fafa3a91

SHA1
ad91eef77dbd7fd734c80190b994856effed1800

SHA256
e113844e058660ee9c26ca513a1a361915c7dc40985116bbdbf79bc496328d50

SHA512
92c2a688a03e46629a0059c923adea84e74444d0d841cc7bb5f1c14c8b64f154f1d96307208be17a166f7e6414b32c3db27507724b859f5712da8400eebd1ee3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
3556887f094a6b049213ce1f2d925191

SHA1
37ead14af4ea8b692363c4dbcf9c864e4c21aaab

SHA256
5e0543fb7aa3a4de28c2530cfd07a5722d7ce7de23d5294f091a780387b7cba6

SHA512
975d9395d98b3a113f2aae269efc6e07c352a8b6c1083db356e89b449600c4bba51d0ba9ac83be58d12108d9aba0d23158dc38e7c2db3468306cb5d0ca8df71c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
02159d308efd962f39626952c338f77c

SHA1
f7334ec92f335456f4d25679863dd7d47aef0d61

SHA256
00a01a808fc814246900e7547110e9dcb0e7027e4ee4bdc1381ecbf723f12420

SHA512
6c9f4df0fcd22563a2a82e6501933ee6fd3a043f895e2b36deb2996684fe27d795ee356bed2c68254be90c0fe2e128a37618434d6cb573eb585f98a85d64e352

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5806b2.TMP

Filesize
48B

MD5
0b21cd2276e1107483730d8cbf4ce5f2

SHA1
0172e6f8e7ec66c3a39c47f6368d4b9cc5fed020

SHA256
d453d884243ec97bed0f9f0ffce41b28d045ec5ca87b827971e5d9059374227c

SHA512
6238ba2d64813afb53937979b22f5f29ad5fd872077556127a422c10cc9e4ad795c93d450633a4d21a2a6787dc07bf7b33999bc56637acb22d29c1bb724328e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
87KB

MD5
7c04c3dccd3b167c2d8a432ab177d068

SHA1
dcd55a32b335cf8dfc43209f96d549f04ad66e3c

SHA256
200beb2ca9fc5313172a0561cf206db693b509c23f14c4f36d8225fc138eab55

SHA512
f65822f53e6e9f31328d4ed2f30c9d6b8a9e5a719e4f55efcf97457e5d90b611beba11c8a0b4f7c872d86558f10a32a7ab1c67a7212ed48b4698f46038e218e1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
103KB

MD5
a6853869dda61a1bbd16403d450e11b0

SHA1
a0afeb37b6a448653a3460c7866ab46848d5a5f8

SHA256
5c2c7d1b04e9a9c35e73ca62380344565243cac616ccb9dc8a05fb3c0b271b54

SHA512
6c71d9a76d78ad15462b17d981882a1ae7c0d5eb5e041308e5db3aa510b120308115817eea2c9c106339bd9ecb1d02aa33ba3a3a7df5fc54b850474c025aa096

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5884bb.TMP

Filesize
103KB

MD5
6de99f9b5e44f1a1777c6475d289360d

SHA1
e175d71f4bda7270c35ac498b1e1cb588e3ee140

SHA256
f970df5e05d385bfc99a7224e65417c017443fed6b95bf7bb4908c3cbe0e0f5d

SHA512
fd71dc1453396352be1472c3f162ae72d0786d1b71bd4434591c7e5e78cdc3edb843bd4717cf735e007a1ccfa89817729cef214b61ab0b591e82b1c56ed1f7e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit