hxxps://t[.]sidekickopen27[.]com/Ctc/5D+23284/cQn-k04/Jll2-6qcW7Y8-PT6lZ3mtW6lSprq10_SYFW9d1bT62fw65vW74GpRH1z9FF-W2Z4BL78hVRc2V-KSQZ3rvd1RW7kKrm_8ZZ6pWW6LJMXb6KGn03W6LYmHL9k4z3ZW6n3wp55P-YhpW3Y09wm1md22gN3HMmvQ7jfZ5W7DGrj53pZxS3W7BdXY43W00CmW8b6hDs8cYl_mW1wJVd91yZCDQW6qJF-g32Q36wW2QxktF87f20zN6-NbDR2YgKZW1n0dv11JZpPZVBYJTw14sphCW4Gf3rh7LSVtPW87qwdz4djHFCW8t_2K53gg3GxW5vhZdm823w79W8GLDnF5YWGKmW7z700m6tYVxYdWLX0-04

Analysis

max time kernel
600s
max time network
596s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
05-10-2023 19:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://t.sidekickopen27.com/Ctc/5D+23284/cQn-k04/Jll2-6qcW7Y8-PT6lZ3mtW6lSprq10_SYFW9d1bT62fw65vW74GpRH1z9FF-W2Z4BL78hVRc2V-KSQZ3rvd1RW7kKrm_8ZZ6pWW6LJMXb6KGn03W6LYmHL9k4z3ZW6n3wp55P-YhpW3Y09wm1md22gN3HMmvQ7jfZ5W7DGrj53pZxS3W7BdXY43W00CmW8b6hDs8cYl_mW1wJVd91yZCDQW6qJF-g32Q36wW2QxktF87f20zN6-NbDR2YgKZW1n0dv11JZpPZVBYJTw14sphCW4Gf3rh7LSVtPW87qwdz4djHFCW8t_2K53gg3GxW5vhZdm823w79W8GLDnF5YWGKmW7z700m6tYVxYdWLX0-04

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133410088658458295"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
4464	chrome.exe
4464	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe
Token: SeShutdownPrivilege	2356	chrome.exe
Token: SeCreatePagefilePrivilege	2356	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe
2356	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 552	2356	chrome.exe	63
PID 2356 wrote to memory of 552	2356	chrome.exe	63
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1244	2356	chrome.exe	85
PID 2356 wrote to memory of 1000	2356	chrome.exe	84
PID 2356 wrote to memory of 1000	2356	chrome.exe	84
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86
PID 2356 wrote to memory of 968	2356	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://t.sidekickopen27.com/Ctc/5D+23284/cQn-k04/Jll2-6qcW7Y8-PT6lZ3mtW6lSprq10_SYFW9d1bT62fw65vW74GpRH1z9FF-W2Z4BL78hVRc2V-KSQZ3rvd1RW7kKrm_8ZZ6pWW6LJMXb6KGn03W6LYmHL9k4z3ZW6n3wp55P-YhpW3Y09wm1md22gN3HMmvQ7jfZ5W7DGrj53pZxS3W7BdXY43W00CmW8b6hDs8cYl_mW1wJVd91yZCDQW6qJF-g32Q36wW2QxktF87f20zN6-NbDR2YgKZW1n0dv11JZpPZVBYJTw14sphCW4Gf3rh7LSVtPW87qwdz4djHFCW8t_2K53gg3GxW5vhZdm823w79W8GLDnF5YWGKmW7z700m6tYVxYdWLX0-04
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffddf589758,0x7ffddf589768,0x7ffddf589778
  2⤵
  PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:8
  2⤵
  PID:1000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1664 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:2
  2⤵
  PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2272 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:8
  2⤵
  PID:968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3056 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3076 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4756 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5416 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3364 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5072 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:8
  2⤵
  PID:3628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5440 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:8
  2⤵
  PID:3560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5204 --field-trial-handle=1908,i,206856981211316588,11978508948598297122,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4464

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4696

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
857a61a1f359a3b00340bfb166815ba5

SHA1
5fc73ec4e1707d310d2ab8b35d8866b4fa8cf928

SHA256
dd7f81b033e1fe0f910986288ac3ce479c9a52aafb6afea6c5967e69b4e580ee

SHA512
fb51feabd0198ff07c0e2d27b8caefb493ed00030b9f4f34a8d9b859be1a5b9fede6d93e47da3a88f532690993fd3eaef697096cef5ded1f8163224925005934

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
2f4844ad4a947dc41e57c3361cbe3e33

SHA1
c95cfe37ba13e93c398647d974b16fd2a4cfb3b3

SHA256
d01393fec8493b149c96f5d2f1011fd9ebaa0d1373550370316a983ba3f2644d

SHA512
6816a54f7296dbe62542dc09e2dad94daacd2e34417423c9a1bcc8a8534dc774f8fbd6dd1fd27e0ec91434f2180f3d3179a807e64043731880f397e7325b2f26

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
5fe3ee750d47d1e88fe5e4197b0089b1

SHA1
c1466c42e3d63126e6f1e8d244ed222658d70334

SHA256
640570cebd1fc1549231d9fa5befef21a4c20ccaaded29fd700a35b4346f2b1b

SHA512
46796a85cf22e8e561265ddb853394606e6e8a591ef0c7866fb5d4edf7fa3be7c987f4ac90094a47cea15270a29249cb32c71afe9c127dbaa9b8f4d5bb09312c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
410389b383f392501135a634ab9c314d

SHA1
05d37a1f509465efb61a4a6c4127a118aedd79a5

SHA256
0734c2745c8cc5026e70f01b38ad1c3ee351649c0b0edcd8dd8015e4a414b93d

SHA512
f3c63cf885ca194dc29cafca66ab8877da4a234f3d3e695d480a512fedcbac68fe5ed50fdf961a777754361b4e128584af90d7abf43d4cad799e77a868938b09

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
872B

MD5
22ceb0895c46d686e2c084376e9c5d18

SHA1
de5e7fddfbff0582f5c2c643d9dde99dbd7c3975

SHA256
d00483d87ff38e59178eaa2a002f114eb830cb48e26b9fed490ae0a4dcedc9fa

SHA512
9295bf10928912e89be93d682033ad04627910ae252ed2ccf35ed24181d28358bf886c6695eaf04bad77c42203e71ffb1844dd944af8103193cab67fdf68da5a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
872B

MD5
7fca126f4cef76eacc70eb83979728b3

SHA1
d45a244304e2f6f4c399eccbf0f66b6742cdb69f

SHA256
69830431403682fbd636491e800c8f5c3a9de4be90da060a47c5fb99afdff823

SHA512
d5efebabb08d776f65d6e9f1f92a518438e2c08132dd43aaf6d7fcf3be92c584f11c165ca56015db78d871d922c3b689acab5131bb8351cfe61f53954999ef6d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
f589584b9d25803e78f8670535a24d35

SHA1
bf05b306562f250840042c56565c0ba949e81f20

SHA256
fc25394130b4e9b35827c04be775c50a9ab3c83e60b5ac67cd0a698478496fb2

SHA512
4a0979291b6c78f8543bd4f10ab08842dc765e4cb7c6931cd330b361497620d977307f07da2e9d300bfc98a774362c3d9d3b770e4baaadb40fc221ab8718a75b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
2cdbf0aa0ed3fb96ad4925c7090caa6b

SHA1
5a0adff6c2160a28682e1b59dd7d86a4ed704f88

SHA256
af94eab23a368913b9a516acc89b922c76accccad33e32415b44c09329c974f6

SHA512
ad45a784e7f2de606e05fc2b1ea02dffb3d6ebb86fa8bc62f5c64507a039643efdead82260b434f950d4c8d2da9d05ed40b04632e7b19f90aa63b02ac2153880

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
1628eb83c40b71f8f094ba52b81fb588

SHA1
28c497f976675cb570686e2ed5603304f9491545

SHA256
1e10dd838af2b30596af0d1c83a0bd1791d95cfc62008b604a72f7bc2e0e5e36

SHA512
cd34d967f9facb83f8c70ff40482d087cd5f4e75537e6e541a9d28c7b350e51406992dc615ff6a48ec28cd857b1c584eda3aa6ea4eaf852e616433dadcaaed3e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
10b216cc241151b1b53cd24947c667b0

SHA1
965abe34ca6a60faa39a82db92a2c069062b9049

SHA256
ccaa0f1fdca7e4bb7064f3ea40fb2c758b0823b59bd5a47042f6de179b5ba4e7

SHA512
114b9a67a4e0f88a8e7ed1ec2ed5ba377a3ffd1aa8615d82df342de90abb8ab13255b77822d065f3d8250bcf6311b3d8c00bf2a0866616c41375bd4dea8b637a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
7e26cdad3e5941073eaa5ffed74fe770

SHA1
efab2e839bc159681a194274a1efd70c6e01dd7e

SHA256
e9cd274bc5deb9b2bf9425353dc7db6c355153735683cf0cb4dd9847f0117059

SHA512
d691f1d6ffb8cd51cea5bcb7d446ca431bc54e862dbf4727258fa3acf14218eb07d167aaeac8196443a9b8bd5d278e7a940d249faf5e2e53ba379495c4f895b1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
104KB

MD5
b7fcf72eb72b36fe57486446882799ea

SHA1
18cb8ed0a69a9ce2c6a99fec373929920693e1ea

SHA256
600b8ac7f28f2094ab2ec053cc4a2cc0fa7065443e7c38e381aa0469c0cc82a9

SHA512
b8b1c6c7691abd0c07d35b6d24aa427ded75ddc6a3aa4fe9240988ad5551622ca533a56380d32ad630f37f59ec0a95da127601e872b7c6e8972cff0dec4f6755

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
121KB

MD5
d3a3c4e1a16d970a6f4f8c1ef77e3398

SHA1
ac651679737650e66ae144626b253076a1a2dc59

SHA256
5a8d1bac9c98fe64da9bd4c66b0fd11f3f52e104997b1884f8090288cbec66ab

SHA512
808331d8dc9dc72e25bba3f739621724e8d9b6583f0d5fc771799e3abc13231e0c50f5d9a2a977e88f3af300a2f831b722e8c98fc6e4323e49555da779c3c353

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit