hxxps://stofeiras[.]lt[.]acemlnc[.]com/Prod/link-tracker?redirectUrl=aHR0cHMlM0ElMkYlMkZ3d3cuZmFjZWJvb2suY29tJTJGcGF2aW5nZXhwbyUzRnV0bV9zb3VyY2UlM0RBY3RpdmVDYW1wYWlnbiUyNnV0bV9tZWRpdW0lM0RlbWFpbCUyNnV0bV9jb250ZW50JTNET3Bwb3J0dW5pdHklMkJpbiUyQkJyYXppbCUyNnV0bV9jYW1wYWlnbiUzRCUyNUMzJTI1QkFsdGltb3MlMkJlc3BhJTI1QzMlMjVBN29zJTJCUGF2aW5nJTJCMjAyNCUyQiUyNTI4Q29waWFyJTI1MjklMkIlMjUyOENvcGlhciUyNTI5JTJCJTI1MjhDb3BpYXIlMjUyOSUyQiUyNTI4Q29waWFyJTI1MjklMkIlMjUyOENvcGlhciUyNTI5&sig=4bLkqKEexn15tFU3tCKG7QcaxxqEtWWJswXR51zA8JT6&iat=1709908186&a=%7C%7C252366659%7C%7C&account=stofeiras%2Eactivehosted%2Ecom&email=gzfg055iiNZQtklHYa1sgK23UfxXcMg6rZqo9xot4r83%2B5HEKDwibvow%2F4puUxXv5A%3D%3D%3AzOqVXRc2rbIkN93eQS6d%2BzFkaaKEKOqG&s=7feb2dd9c9243074cfd70fca64d3eb38&i=520A7453A49A6142

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11/03/2024, 06:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://stofeiras.lt.acemlnc.com/Prod/link-tracker?redirectUrl=aHR0cHMlM0ElMkYlMkZ3d3cuZmFjZWJvb2suY29tJTJGcGF2aW5nZXhwbyUzRnV0bV9zb3VyY2UlM0RBY3RpdmVDYW1wYWlnbiUyNnV0bV9tZWRpdW0lM0RlbWFpbCUyNnV0bV9jb250ZW50JTNET3Bwb3J0dW5pdHklMkJpbiUyQkJyYXppbCUyNnV0bV9jYW1wYWlnbiUzRCUyNUMzJTI1QkFsdGltb3MlMkJlc3BhJTI1QzMlMjVBN29zJTJCUGF2aW5nJTJCMjAyNCUyQiUyNTI4Q29waWFyJTI1MjklMkIlMjUyOENvcGlhciUyNTI5JTJCJTI1MjhDb3BpYXIlMjUyOSUyQiUyNTI4Q29waWFyJTI1MjklMkIlMjUyOENvcGlhciUyNTI5&sig=4bLkqKEexn15tFU3tCKG7QcaxxqEtWWJswXR51zA8JT6&iat=1709908186&a=%7C%7C252366659%7C%7C&account=stofeiras%2Eactivehosted%2Ecom&email=gzfg055iiNZQtklHYa1sgK23UfxXcMg6rZqo9xot4r83%2B5HEKDwibvow%2F4puUxXv5A%3D%3D%3AzOqVXRc2rbIkN93eQS6d%2BzFkaaKEKOqG&s=7feb2dd9c9243074cfd70fca64d3eb38&i=520A7453A49A6142

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133546114935729544"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1080	chrome.exe
1080	chrome.exe
3232	chrome.exe
3232	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe
Token: SeShutdownPrivilege	1080	chrome.exe
Token: SeCreatePagefilePrivilege	1080	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe
1080	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1080 wrote to memory of 1236	1080	chrome.exe	88
PID 1080 wrote to memory of 1236	1080	chrome.exe	88
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 2492	1080	chrome.exe	92
PID 1080 wrote to memory of 4444	1080	chrome.exe	93
PID 1080 wrote to memory of 4444	1080	chrome.exe	93
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94
PID 1080 wrote to memory of 4368	1080	chrome.exe	94

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://stofeiras.lt.acemlnc.com/Prod/link-tracker?redirectUrl=aHR0cHMlM0ElMkYlMkZ3d3cuZmFjZWJvb2suY29tJTJGcGF2aW5nZXhwbyUzRnV0bV9zb3VyY2UlM0RBY3RpdmVDYW1wYWlnbiUyNnV0bV9tZWRpdW0lM0RlbWFpbCUyNnV0bV9jb250ZW50JTNET3Bwb3J0dW5pdHklMkJpbiUyQkJyYXppbCUyNnV0bV9jYW1wYWlnbiUzRCUyNUMzJTI1QkFsdGltb3MlMkJlc3BhJTI1QzMlMjVBN29zJTJCUGF2aW5nJTJCMjAyNCUyQiUyNTI4Q29waWFyJTI1MjklMkIlMjUyOENvcGlhciUyNTI5JTJCJTI1MjhDb3BpYXIlMjUyOSUyQiUyNTI4Q29waWFyJTI1MjklMkIlMjUyOENvcGlhciUyNTI5&sig=4bLkqKEexn15tFU3tCKG7QcaxxqEtWWJswXR51zA8JT6&iat=1709908186&a=%7C%7C252366659%7C%7C&account=stofeiras%2Eactivehosted%2Ecom&email=gzfg055iiNZQtklHYa1sgK23UfxXcMg6rZqo9xot4r83%2B5HEKDwibvow%2F4puUxXv5A%3D%3D%3AzOqVXRc2rbIkN93eQS6d%2BzFkaaKEKOqG&s=7feb2dd9c9243074cfd70fca64d3eb38&i=520A7453A49A6142
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe93f39758,0x7ffe93f39768,0x7ffe93f39778
  2⤵
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=364 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:2
  2⤵
  PID:2492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1792 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2124 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3048 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3056 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4664 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4960 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:8
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4860 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5128 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3112 --field-trial-handle=1932,i,3095154113951791235,13698260718713933269,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3232

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2832

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4a0 0x248
1⤵
PID:228

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
7d5035e0884e4a80f91d271f51750af1

SHA1
9482be8afc9a67025744c4525e5506b7b0973949

SHA256
0d397939dee6600d1f770a7a2cc4fae8c9d611208ab81683a2441944fd1657cc

SHA512
2f171a28123fd2c06c0a79dd5d5db7ea63713aba76a4860f7a3307e639ccff4bc535c6c88e0634c198e0ebdad15b681347ab707124b5429b5a861c5b05667e3a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
d1d2666db637aaf13bcbf8bd661496d3

SHA1
9b21fa0caa03437cff29e77b77fe4c7993a25ada

SHA256
a4be535f7a5f4f69a2a0674c6ea64d2e07aa658b16aa26ed9ce95b2a889a7d27

SHA512
a8bd3e3a7100cd6c8580b280d17df42351b6314448e2f82d32b40d4a793029cb36d4d3ac126813f2af90fac1b45a5ab18f39c0a43e2819a8fac1894824594fd3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
702B

MD5
53be22fed98b7c4e9e7fb0c861204096

SHA1
27cf3b73fe4d0938fd43461a428d94787ff44b17

SHA256
c8f18a3785c20edf56493b4baa1ad7ad1311d774041a9fa6291734028a0b0a0f

SHA512
b3dbd8114f4d19212dd0a8512d84df9ec0d9bda9e98e05c8450368431b1a4f5240f2332f7e5b22b866f8a2242ae3147d70fefc6009ae27cee95e3259ef2df16d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
702B

MD5
c34e313757eddcde5c783f254d5bdcd2

SHA1
0615c248b3afc401222642e6eba5e8ca7c9e2e46

SHA256
cd1fa5e869399ed570d6338f63dc6dab60dcf4d42dbb0a01759795c7d303da57

SHA512
cf18807476d8fed9e09dd4db234854511b1afcd36b80c65330a3f10fec51cc642e6144dea31d0eb146eee66df0792648faab6093348072acbc206d4c92af77f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
704B

MD5
514191f76e256680c9c9eb941661c2b8

SHA1
a527688308114a89359bddcfa3f1609bb90d0fb7

SHA256
70e3569843e216f6ca81e68b9bc0d74c5ec35f2c246fe2d391aa18e5c9c2fe7b

SHA512
c2a2d64324506b58404588c310e77f46b2f63cfd741d912b82641a9b4ee541755d383a67aa3017c8a7216371c01182898370858841d7f80be810ed67b88a43e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
702B

MD5
409c7fe481751172aee0ed9948031ee3

SHA1
96a3f4ae84be42a8742fb2007ec334535505d4e1

SHA256
62c9bda1236ba2357e5c698e6c19d3dec9f42124bffa02787f486631de46259f

SHA512
eb652a8b919b40a70c567b2e1cf10123d397e17117829a831f038e9ffda9bac2c2b3029ba3f6201fd14534b20adc77f4f7b4c08587e981e2ac3d2445f7c2b51c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
704B

MD5
e0ff0afc1e7d0a4629a9dd23f32dce32

SHA1
27d0db9c56167950f7b1c90416d382ceabeebad3

SHA256
d795cd5cd944f9b7be42fb9e7c2519a84f13e8959ab6f9e6279c0bae46a1f4af

SHA512
79328b6fba899b48ff2d34e4e829406632ac90fb17859867f79493be2a1c3cd3879ef19880912e98c358f81f8026a0e16b48f41c038941778b0258081e56e2b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
704B

MD5
2b4a34d7283f55ed06dd01ecf92d1cda

SHA1
4b2b9ffe22072922b91238a739e1b2fca7c640f8

SHA256
5b46e5d9a24bc0dfbbb079785d4a6bf3ce5b534eaf16d6aef0e236328c0337e7

SHA512
59ea0b95afcc14b6073b2701861cf521ba99956da055ca1c182bf8cc1bb0fdddb70c9d9bc8813cf3d422aa1de59d7a1d5afe2436630f99ee3e8865ee1b87acce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
702B

MD5
770c4b891a71dae6f7591ef2fa04b8a8

SHA1
f9d196b4aa905a82649a819b7d87eadc094caf72

SHA256
fb3edc87371b54876f21a2ccbf3b97ec7837d663c1e2e1d22e0d3f83ed7b614e

SHA512
39f235c8f4f2413f06ece0f4e8f5a80d8425736c43841880818a719eb723e2ee5f4c374728e77b6fd791e36114621ead4a2df9d845856dc56ff0a92d7e33eed4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
406903ef4fd86d35ff94bca77ff86ff9

SHA1
871ff03d3bb14ea98cceea62384e375d0c85e9a1

SHA256
9739f3bf1f3668dda7637192dfd134650e71ca87b25a024455dad2d24521da6a

SHA512
0c58ea9814119a3838f11645023e946c44cfbb695b81a1213651406f2f6743be71f027f9317f8dbdf065236b1f098c9853244c10896bb9aac67672c2da6c8ba4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
44672a4bddc360bf192c49fc6e9e41ad

SHA1
6f62f83446f2e85987f10c003ce143acaf059800

SHA256
4cbba3677cd57fc4d49169e4e28d876360da4ebc08dd85f76cc8dc8943cf3908

SHA512
b3d3170cd87cb919ae8af5157b18c72a96fc32d83f2702abe07e4a4f7b970fb81ff2e2d15b752dfe901ca99dbf8ae6ca11a261fa364ac8f132d30a6cf1829313

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
cd67a03bb497e757fb78884335e67fbf

SHA1
962b1822d6672a0ff473f66e2eb26d51347498b5

SHA256
bf35f110d10553e013b245533bb72cf94660a82b9da666693b1cbfad48f2ebb6

SHA512
d5c17e4a949bd6014fd66f04813096d274b5fd34c79dffd856b36bf7982c5909502fd2b398cbc70d1b7d0fa94485eccc02534bbc1e788df97f67951d316f4c2f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit