hxxps://acortar[.]link/zZpCg9

Analysis

max time kernel
92s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
21-10-2023 11:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://acortar.link/zZpCg9

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
768	chrome.exe
768	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: 33	3552	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3552	AUDIODG.EXE
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 768 wrote to memory of 3116	768	chrome.exe	35
PID 768 wrote to memory of 3116	768	chrome.exe	35
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 476	768	chrome.exe	85
PID 768 wrote to memory of 3348	768	chrome.exe	86
PID 768 wrote to memory of 3348	768	chrome.exe	86
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87
PID 768 wrote to memory of 60	768	chrome.exe	87

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://acortar.link/zZpCg9
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb74889758,0x7ffb74889768,0x7ffb74889778
  2⤵
  PID:3116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1632 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:2
  2⤵
  PID:476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:8
  2⤵
  PID:3348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2220 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:8
  2⤵
  PID:60
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3084 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3076 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4828 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4420 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5096 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5140 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5452 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6016 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:8
  2⤵
  PID:456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4560 --field-trial-handle=1820,i,1350959653264802751,9262289933281039285,131072 /prefetch:8
  2⤵
  PID:2692

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4436

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2f8 0x464
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3552

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
960B

MD5
afad16679414072fdf7bb0ae4c8214dc

SHA1
b2ebd3830721a3d1c55f81a5d1ba8ad05dcf138a

SHA256
fa01ec0c95b1304910a88a7c4990ba6375d8ed5150bef35ca5ec3693803d8ac1

SHA512
c5d22835645cfac7130a0d7ebc0c4f2a1df41d9d100022bf00fd04e3620bdba478fc35aca6c953098956d207d331050ca3c9c199220df3ce23a829a0ec775550

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
c2162ab23519cd060fe141ee97f77c9d

SHA1
ba9ec53c8b954d7f44cf95ff5cbafd614fca5624

SHA256
bd3cf320fad245ebefaef5d0df8e8e1bd865902254eecb9355895dea5b03f836

SHA512
3dfdaacbe3ae4c7efd6df2b2015d3df8c50fe797892d9493ed54db953bccc44cad7cce6c7d7190d546d0911018dcb12b0c82a56c4d3e340562ef7e1c59804872

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
cb5d316e0ade63f2c00a778c97fda2ba

SHA1
9f5358e7b147b2d7a42e7258e933524b25d86149

SHA256
c9bc822148ee70a9a2b59212d802c6163ff918d282569b7d0e51454eeb0af6f0

SHA512
662a53268447505f52e9c8588195a5842a89b990bc69f6e3a4b1e4f2e5bf7f61414a1ec3d2016da4bf65b3507171ec708bc3545096314055bcb80d3d8ca36b60

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
64ed36a157ffc2eb7564f265028c35b3

SHA1
abcdbff1a2ed8b2768efff473452493e72cb1439

SHA256
56a8d74f2cc687b121fce6314b93c5cb38d5fd684b7622e5a05e815b970a3032

SHA512
0e79ab2eb0ce9c41eaaffaef671f8d9211b01cde0f03ce54248a4f5728e0b3665c72d02af02e2e83dd96ec11115843de1ee53856860e77c076faa4fd8e7247dd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
709ddc8b08457eef6413470900a53f0a

SHA1
dbeeb75e4b5e882981d2694814148ae2ada58b0f

SHA256
7b47c0c0b90e1dcb12105284addf10e76f12035b4112fee2987850ad068865d9

SHA512
2242f36a8ac5a2b8ba78f22073f74a806abc45d9d0896a626106995be1c70fde80f3c0912523ebf78530a76c079683f99d5c181b7a7068d4297497af8eea5d50

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
5f614d2c75b2368860ba1d5382c5c258

SHA1
55f9a657af710488be85f633dd67ef319a8c9b6e

SHA256
398f75f94300eeb613730e9ca1d55d22b5b6fe96fc872da0d20b602f4fdd020d

SHA512
ae140f9ad757ae1c036307e0a4d1e58717d98346642e14e2228275dddb8d7e7b96b957aba5b5ca6392e4b39e6082b0005015a4b3105a1bbfdb68dfe812b356de

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
5f0cf45cb74c2f85b51401019ac71d81

SHA1
bc53336df3ee7cf7f26972b84c810ebe176eeeb6

SHA256
13ecaaa7bf91aa7d0ef2e27e7a5c3e7fff4d28ad7099d4d1e529cde2eeb57d71

SHA512
05bf1cfce76d4bc2c96b10486d58e70addf3743c7df2a1f68da6e9dc7b46aba6366adf7107463369304d814aa0141048c6bf747314839209ba2498a861e7baf6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
6e0f0aedec0b8d2665dedaa6b52d9859

SHA1
8538e53040b173407338fcd2f1e4d3e32218772a

SHA256
5f0bdcb8543cdfaed99e1e663cba79252465b32888282714a1eea98d97dc6596

SHA512
e9526ef3509d39725c4da04406422257e8cbd051be3b66db04544abd3e9dfd8a25990b07efff6f14753b77c4176ebfe73943abe991eb83f988359f1f7a374d40

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
f9b13860bcca270ff996f77954f2df6d

SHA1
3366adcbbec84f85f8d893485b49c9e649c6f3ab

SHA256
307dcb5b2f2960e8805ac25df8af3d18e1bc2861835099d791d7e52d75d84252

SHA512
79767ac78875c1f5f313970edbd823d0e6aa43ee04e3d281f2522b987afda1d13b9539ce8585bd1547bbe699a1576725bff9a9ff988bdb8f6f6e7934920100da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
fde32107c59ad8dad6231ceb4194521d

SHA1
3ef193f7cdfc31ad57a6edfa6913cc270f8a7656

SHA256
d3008ee78c45f200326617d862e4a5182aaa4004683f21640b7933e45273e5a8

SHA512
e86b2c029d0265f550e644f2934e6ca947f8bcc9643cb0a32623d4cf141a73c65022fb9054a20fca5e8f14aa38c4146da8a96eb02b1a1b1746b49fe879714fd4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\aaf704fd-8ea3-4b0f-b26a-d5cb5a2ad072\index-dir\the-real-index

Filesize
72B

MD5
3de4692a7a6a82726d95c064646e7a8b

SHA1
370ac50b6e10674c56aac03accd2745248b49cdd

SHA256
b71df3ce1433c2fc013c9c0c3391043c3fc1b74d548ba992cccb0a9ddbaa6e62

SHA512
ccd48707374768b69cedf6d6a3162fbff8de34d2d6616b39bc600554d7e026f329bb0daec2a2de5c3e2d730db41935e4406fd8ce9e43d20b6f9ab0524281080a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\aaf704fd-8ea3-4b0f-b26a-d5cb5a2ad072\index-dir\the-real-index

Filesize
72B

MD5
a43707c51c53929a588fff30669ad959

SHA1
9be2b39b1a5d36b7a6df064dc97e9c2797f0b28c

SHA256
4414dc597789cbb477fe4eed83e04bb2395ea97ba114121e4919ee80d301419f

SHA512
b1354e115ca5f03b38f29afe52bd41d4437f5a93417aa814f3d4a69ac06caebbd0c6f55d241fcc89402efaaf10760a097130b325e40194705ee2c9ac665025ce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\aaf704fd-8ea3-4b0f-b26a-d5cb5a2ad072\index-dir\the-real-index~RFe57fdc9.TMP

Filesize
48B

MD5
ceb158b2b3d25cfb8ed592d8513d62b1

SHA1
48e7cdc6c68e283c4637b9393fc898143548770c

SHA256
5983b38194f3c9e59b60d4d542b303ecc7b7d25d2c13a2d0a18ca0271ab43a50

SHA512
bb901fdfd974d0fbfbac722e9cff24879f3d3d72658d11194362ba5f15307a357e8e588f5bd5fed9a25d1c029feb624e7f54bd39c28d03e22a3336f55a3e9cb0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt

Filesize
121B

MD5
e10993a0c9f6c97d9c7d55bf769b6a65

SHA1
85c07043b1fba15c8678f5d7a094d528b8e46c19

SHA256
b78c059590589fb5a766c9f99cfd71858e06a21ec516c0968d291a1a47a78f7f

SHA512
f0092160c23fa293190a9735dd45e7240ad19cbd11b7efd674ab24c2936b508cf99da1e7e660518b92308180f29c80620dfb2fff9adde0367c10864a48723cf6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt~RFe57fdf7.TMP

Filesize
127B

MD5
817bd98e372f962563aff286f50d6273

SHA1
4dee36446449b3ab19586c63e958e590953c6038

SHA256
dd96d204304aac3463e59e7163c7f13f40104488e22469e5150f48f266386ead

SHA512
0594b3ce63102edbccc39d7b93387fd932b1828239e799498b960ceb7e7546df68917fdc0c7e1611b9cc5c5ca93c468313e3c9581775bb342fb810e716a3e2cb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
144B

MD5
5383bddfb7b930bf4350430db85f6ce5

SHA1
62dfaec3ea849aaa275137c8e12b3cf8b4bf3b2b

SHA256
6ccf76da7e8823477319c2a1328947b3f11dbb4e49738594248529c600c194ab

SHA512
ae3859e4af3e674d9753fbd8a47a49522f3615fd6ab8ce473734e6d8cb99a70acd483770c81582507ef9bd6aed886048d0096842b5774acb3725921989526fcc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57fda9.TMP

Filesize
48B

MD5
39ea6b85734a3bc8969f93720786e461

SHA1
63c482ce20ca8ed2704ca508dc88a10251b74e8d

SHA256
c5ff6071c31103a368b87b3c1161d2165e3591e84f15ca68c4d77b254710b450

SHA512
1f1c2f0e8d9ae8908ff35f7972dacc15db09c1c7fb4718b29a4ea8c8e13945db1f6fa72d701dbec5a5f7ab339b4e613ee7f613557ea889313631aef25f42d87f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
109KB

MD5
8f378183ae96e3885eb4c3c179be9b32

SHA1
126132985383ec52942466e37cb59291da5bfb2c

SHA256
a1dcc4a537b88ba3987ec24c40890d4c671074dfbe6e5d4cc48fe8ba061535bb

SHA512
ff126ae6f50e3febfdf7c2b52483ce386f1277a35f5c5237f970f11ebd96e5d11fc0a1cfeb58d83d1daa571f2847234300288e34a60d64a2914ffb9b87424736

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
104KB

MD5
61c9ab423725500dd818fe06afd9a462

SHA1
f7e87a15a6e2490521ac9c02bbbcb34a8603de32

SHA256
585860cbaeb16518e5dfec176368ff6b292e02db28f0e02a829b819e89777800

SHA512
13aca0141dbed5f98e1faaee8f80c2b3334d620e77a06193536dd79d80f7ba74465414d48483cc08d0db8f9d8f59958ba5ed784b2cd70eca426f71144b487d4b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58e8f4.TMP

Filesize
103KB

MD5
40ace6aa30f25d4d0a0a34bc2e004218

SHA1
cbf50d3fc6c20859dd703b43397b78cd77ddada0

SHA256
10001f946f414156ee5e8a777b65a7b239fe3d94aa8512202c0a809da03f6613

SHA512
b272afc0e13f02f0a08d09ac52f1b76bb0bbe1e3342d52e48e79342558d20f01dabfc464720c6392f281d0cea7d832623ec46f35ceee54173c719a8d137e5e17

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit