hxxp://plex[.]tv

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-03-2024 05:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://plex.tv

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133545231670918816"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4664	chrome.exe
4664	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4664 wrote to memory of 4692	4664	chrome.exe	89
PID 4664 wrote to memory of 4692	4664	chrome.exe	89
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 1776	4664	chrome.exe	91
PID 4664 wrote to memory of 3496	4664	chrome.exe	92
PID 4664 wrote to memory of 3496	4664	chrome.exe	92
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93
PID 4664 wrote to memory of 1032	4664	chrome.exe	93

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://plex.tv
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe778b9758,0x7ffe778b9768,0x7ffe778b9778
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1716 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:2
  2⤵
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2200 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2804 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2812 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4624 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5244 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5032 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5392 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5404 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5504 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1672 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=876 --field-trial-handle=1876,i,8027267017791061028,8455481517457642804,131072 /prefetch:8
  2⤵
  PID:4152

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:5040

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x500 0x514
1⤵
PID:5016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
9ea1dc02cd7d2670d61c45a703c49bc3

SHA1
e00a51040d87fc55b191a536a56ccab6136e6d7d

SHA256
8eae3d7f0fd98747b07f0e19c79a59f51eed763cb816eb1300e9b2f963f474f9

SHA512
2ce03c62eaf6ce4698829c8b37591d242436a247ad999ea879450125ca3f9bb2ff95fc67dbfa84f09c5b71c6e5f0a3d7b4db26c71e09884efc1aca2b44aeab79

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
e481548fbb3ef5983e8d439bc6065a0f

SHA1
595328a3a7f8edec0c5030a48a2ce54b3f496bde

SHA256
78d7dfee0bb0f2a2e777c863e36a0e1a9fb56d8f72539e5038770a5e964ba089

SHA512
2f625957f56a16d9c4dbb7d037bc9bd6309645014895500376027db0a31d46fa45371826745a325ba9c2988aeab28947da3d089f0fa1401860aee866598deea8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
09da8d48fbd6167321cbd34e91e6c7fb

SHA1
4fc15d8d1005e1f050c7e8b25ddd8fa1142f5cb7

SHA256
708632a07ac93d4133a07ee39d7781685a6bdad3da97694dce7c756e364c8a90

SHA512
db831d651d6beac5dabc4917377e10fefb0da38417d4a9b411dae552ba3124f244d10a1db9c9c4462889d2c170228d9959c192940dadc20fe7f0e9e7e4877ae9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
d10860435cfddd46d73e67a73b577df3

SHA1
971556b94adb9267566be77a57480cb660f1f1c1

SHA256
dd9995b96c47201b7eb5ed9a5d0fce2eb364e9b12eb2a3fd96ce65b3694e3f86

SHA512
ed73d368c9de8c1464ff8c10c2db56d2129c674a42b28efb432871d9d55fa537e5aee2f2afcfcf9abfbce57f794eb7c8b5143d296db967a42c95611f176893f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
29c13c553eb12de44c8cefcf6e0d0469

SHA1
0054b7f14aeb77e732a23423eca6d469298d684f

SHA256
37e1236809fe2713527b9bda4ca7a9d3ba7720bc3749ce9a001923fafdadb6cd

SHA512
b88697f9224f3be407f2fa36a245727855b6a6b2961eff2fb384508d75daf64edefb58e39c263a79c9c8aa83d4d40ec26ac08e351c286c9614cbf359de51ba38

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
f664688d8aa4931a5b94dd3b97d14b6b

SHA1
6c394d4255020a02e035572362b924b23038b4ea

SHA256
d9ebdb97f7de8f6c3e52eae319525b2e805ca41958914ba79f81a03e48773019

SHA512
013f467057873a852d2edbbb9f53fca170023bc7060620cd4979852e3eaf9cc28184544c91bd57e48355aeee34a8ee7319d20bf3452fb070ec007c278a4bad53

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
ebc82a9371e84a41c9aa13a5a44ce04c

SHA1
b7b644a60d88874657d41ecc4fd3d812a5f6d143

SHA256
95e00bc2db12ced8c0e80f1a7fd69a80c3d18dd459e84b7a30ab107b1a6503ec

SHA512
763ca725d470aee35654f986e3664aeab2967341c058ec3d54e10fab4faf13f3388fc19a84f1cb8772c46d15eb50278e0c3fbfb9585e83e3b7a122e80b2d1e55

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
2bfab812b8b1e59871093667d9a30e88

SHA1
5842866fdc5ba85bed3ec49a968ca2090b2d8024

SHA256
e3864094ac91967a4f0133bfd7ebc85bf6b3eef31ffb48b1eddb21d41be4c604

SHA512
95900818a2bc6dcf2407bd75355fd56c9a9d5c0059effce13a847cb931c21e5470b46bb4ead71a56bfd03aeec860532977cc1ea0236d8e1ecdf2160988e6edc2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
b8cca27b449663aaea8646e4c99ac201

SHA1
732e4654d191e6b064f7ed7ac1c67c2c0726f075

SHA256
03975bf928aa8c77ade51c963e6b69544776ec699358971e0627f19c5a931779

SHA512
6f50779f55b4ca57de1003eef41c02ec90eb2315333b5bdc5e809af7e84aaad9a07612e68aaec4e91f50312b7d890d4f21a1ea3658664404bbfd3b3b21a3db4b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
b7e8a1d454affc50f0ff4a92ebcb9d1f

SHA1
ebb35fdfc77fb4c69bc7a3f44421d18461d04d2c

SHA256
02f6493e1afdd0a5830f2ba97053257498e7fe889d78fae118ca490c3d04075b

SHA512
80a791fcbecd428553e93898dc99652ca838e91b85d459f3ab145648a55635cdbaaa825d24f2a967940a2843a3962188e69eae3eaf994560df3dd593f0825d18

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
0d78ef0fc898a30955a46dca0a31c8ba

SHA1
a8da57b0b9a22773ff263f665168482501b61b7c

SHA256
1779753913b9b5a18b44320a06a0c7c51b4088f0614317960d6cdb7817d04f13

SHA512
209984a04824575d8bcd0cbdf8b61f88485a14788de930d10e44eab5880417d0d2c370b4489be07d716cc1ca8f244356143c84c97d4de9b6494a1293540c3f5a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
a68503c05af29349992b884361fa5a21

SHA1
df390f2dcc6e050098f4fdeb3107ee961007ecbf

SHA256
e403975bf08bf23346600ba83b500d3f77f13c3f09650c1a2f3f88274c890b6c

SHA512
405895d050b06e6abb56331f936c958b6f350e6ee7de06a409cdf550733b103fbcc74954baa8ab0435b5cc22a4e28867bbcdd389688441882226ae49401052e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
3e84e1ed16101c6998d8d2bf6f89ab7c

SHA1
e173b4a02089fac582e3bbe0a7d48f2cf2dbe26e

SHA256
6c3c383509cb818c807b3564189ccac0d01de61a03147630253d32fb64544587

SHA512
ecb0c66de38abdaab115168659b541cbbde99886d5595f417c1c70d981e787bcdf5f5c5ba7fe7eddcd0aa75ef9c9441cd9ba1d4de5f95faea1daa869bd686112

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
5a5b890b2df42e7ef9f257940cbc3a4c

SHA1
5c0c3c59c70df892325962203aaf1418c08fff7d

SHA256
008a0ad607eae317db4c935667c3d4b2fbb992db42bc3731f14769b1b5669b37

SHA512
ef55f82d6e39b8f80f68337d49879590d9b47cc742cd6067933710f53ecbc17fa7b1c720460297a72eec6c79c5f3b9dabdd378ccd71f81bb50d58ff18121043c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
bf44f9af87e3b3143683a6991511a951

SHA1
266c811d5abf8a3fb5abeecc0e084ae2b49f9358

SHA256
c2b052dcb567ce8a434a0e4655220f87be940228869744acaf4eff972c452e31

SHA512
13502e3186c9d77c7e33e153323ab5ab76cb140425c235ffa31693f0998514f7a78598a62e5efb60b1ce64c50dad00b8fe4bef9782266bfbaeaf1063e2b4ebad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
224246b88ed24cb28412c965d8aae6e6

SHA1
93d389aae82003ef0c20309548c0f8d8be7445e8

SHA256
27a81ff2227e1d26c4f077c4f76f21d7bad44cc15d4fcc37e04695fd7b8d4b69

SHA512
d00808bd077280a19a06eca8f466c7b7309b7f5ff107f449d500237d4ce8d21de68534c46bd6d651c690e3ce2128bb67e494d1276f8a8982fb432517b26d4fbc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
37e957360e3e9842c8e4c5265750925a

SHA1
bb638d0c820a3abc98fa3ab31c8340e41f0a7747

SHA256
6ac9592150a61ed8963e40b7661b3ec860ef26c10800984d9d42c32f0238c3d4

SHA512
58d4e7e508ca55e49918e3fecf2ee4fd60dc31b4581ff30b2695244dcec9285b34f9268972e75cf2b64c211e11c92e7c73ad6ed86ec975d2faa7c25957e44e2a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
105KB

MD5
d35827c39e25d2a5f4029ae18a30cd16

SHA1
1cdb76b33a2ea0ff8d09ed77db9fc4fbd83b3769

SHA256
3446a9b07951275f2a4558b450e0b9060b39b9550a612fd284cbd12c5b105fec

SHA512
aaa89699bb63937668814319e34af07db2114b94a960b37b31fb0a3133c38e22fceb1d7aa6c17802d91a2e74bbc7a1f743dd257c2dd2fd708480e4fef5f86db2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe587e14.TMP

Filesize
104KB

MD5
faf0699bc00778a5cacd5e752797316e

SHA1
13d0e99aca90e9a87ba5adeec130fffa32dc92f2

SHA256
dfe4e77a7d4fda2339ae7a3acea5036230dd46e6e8960048b41da707a1fbd4f0

SHA512
634792327d14a73e8046bf1e330fea75b187fec19fd3ddb13d26fcfb0e7b49faba46323d287c30d65551c80d76feb96e819b570dd1bb3ccb06e5ac83a91df147

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
d93af1d4a8d2a869d41a06f34bdbd993

SHA1
6ea59ba5d7b186654b52e81bac893377c8008b59

SHA256
a1890c4ce43129af9cf7c1a35e85234a5a41fca659549840638ac7bad52bf0b3

SHA512
0e54a4cb53af7d86476af9ee2245101fbec6e7fb7a72638ea0478173b486d3643979cac41dce8e586274370041afaf655709d11dbf8718ba733740bff910a9b1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit