hxxps://unikie[.]mxficus[.]com/api/track/v2/41QkDbI021k2jGPJy/i02bj5SZptWauVHQhxWYwFWYo5ych12b1RnI/ISbvNmLlJXZlRmbo9maAFWbph2chFWYpRXYoJmI/?sc=false

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19/03/2024, 10:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://unikie.mxficus.com/api/track/v2/41QkDbI021k2jGPJy/i02bj5SZptWauVHQhxWYwFWYo5ych12b1RnI/ISbvNmLlJXZlRmbo9maAFWbph2chFWYpRXYoJmI/?sc=false

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133553168013730997"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3688	chrome.exe
3688	chrome.exe
5836	chrome.exe
5836	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe
Token: SeShutdownPrivilege	3688	chrome.exe
Token: SeCreatePagefilePrivilege	3688	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe
3688	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3688 wrote to memory of 388	3688	chrome.exe	89
PID 3688 wrote to memory of 388	3688	chrome.exe	89
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4084	3688	chrome.exe	91
PID 3688 wrote to memory of 4200	3688	chrome.exe	92
PID 3688 wrote to memory of 4200	3688	chrome.exe	92
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93
PID 3688 wrote to memory of 4796	3688	chrome.exe	93

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://unikie.mxficus.com/api/track/v2/41QkDbI021k2jGPJy/i02bj5SZptWauVHQhxWYwFWYo5ych12b1RnI/ISbvNmLlJXZlRmbo9maAFWbph2chFWYpRXYoJmI/?sc=false
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb6c3e9758,0x7ffb6c3e9768,0x7ffb6c3e9778
  2⤵
  PID:388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1716 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:2
  2⤵
  PID:4084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2160 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3032 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3040 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5048 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5152 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:8
  2⤵
  PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5460 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5752 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6000 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:8
  2⤵
  PID:5908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5904 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:8
  2⤵
  PID:1488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3240 --field-trial-handle=1868,i,17795404186589242384,5503683452708309622,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5836

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1976

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x33c 0x3a8
1⤵
PID:5948

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\974c10f2-733b-4971-9f1a-c1f83c76ec3c.tmp

Filesize
253KB

MD5
e22d50aadc3beea347ed16b4cd78d131

SHA1
c0f1b729cc0ccd25db8d217eb16c71225f8f5e23

SHA256
de8ed6ee366ee188207131c73553bbe0e369ede20c0dca78abb5648529ff388f

SHA512
ac260177b8c6d0712e0df833f1d7db03edfea1ea39c34530764c48f8769733a877badcf0a548b8032e1d700f3b7296548479bb376400132b40ee10a063d1a54d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

Filesize
197KB

MD5
0b74fe7ba2947d818eeb2a494d03bdf1

SHA1
fba2fc515153c05dd7bc36e517e1cadb3ee5d10c

SHA256
e8f16f8a10738c11060ad887b8668d6bfb282220251a63f7e89da64142d114c4

SHA512
251909ed1f0b796ecc87e3de474e0618c6d28e1c359f03bff1e1b38561f925a4b1bba412d61d3336597e3e74c228c10f9b3aa92e8efd3d6451cbaf279ef6e3ce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
2686c8cb5a2a02ab9cf4a6be239ce881

SHA1
839f255975db72db446ed2c3b4b708643275ba63

SHA256
c370da7399299934c7695324ecc8569f0365437cbb07353e08e2eb3fc8ecdcec

SHA512
a9968abf8c4c8a776b445f6778935893cbc61d88aed8d478be9e933e26d8e6c50995e0c16e3e98bfa075b6b7803a473a97118a2370aae3fd36c5d0a0c57d00a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
6d995aa54c55ac99a773ba345e944fe1

SHA1
18ef62ab8fa92038f0b2f87b2226b03e01ce2416

SHA256
1118f597e876dd359321a109f7e83e2eabe1033154d8a16f120217ef94f89d71

SHA512
dbfe997009e834a8ea1948ac670e59c7e2d6935db6f25e6001040f7a96344386a6523e9c7bf314f428565567edd9ccd7fa7337b151dec7586117923f779536e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
5565d18ad877ce6328d20dba0c171097

SHA1
2255c73aaa7d92da61d548d6f80696cb97698d67

SHA256
846099a5d4f9f6ab8735ac03d1fd52a5f4f91cb02350cc4e8de653a37afadb90

SHA512
ca24f3b3db29a19c698028a11ec600e8e95b22361a05b7b09383ca9f5508cd3ff309f302160b5041e7e9abc7fb80556cef873987c37deda7883ab96055d50899

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
1919a9981ab2f313595a46a0651b7476

SHA1
b714620c1014c4a2668b0b30862e2865a6c1f76d

SHA256
598b92fe06bf074d1ecc39dd655d2a24c419024a6c0b81f4377c40df5b3ffece

SHA512
36a97bd4e4922f7fe33abbb7dff65586aad90eb4085f583fd7eb09ecfa3bf17f3419b4c4374e9ac01e58037f4b2e97153a2c7511ef30f5684f08955fb1a0fb4c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
3772c3f705fced32e31d4c5b2b14d6e0

SHA1
80d1fb11188281415bf2513dbaa4e5ab9ef142a6

SHA256
5d375b81287fab45117bc039fb60691dd53562c1a3e375f84668baebb17bb70e

SHA512
9a7f2808235797a51540b8b4dd9c34c2a57b4be7f764d5c7477ad00a8d45ead3d3c69f9f6e4d1c54cd6366fa6e055529d2b69c0d3cd3a070ff28b886a1256a5d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
13e1999ea2ca91532edd7c4e026575a3

SHA1
2a1fe4eadeae23a7240846ab8f2ae7301329c4d4

SHA256
e54580fe33f106d5dcbdc70bde232806532d3e97b952e36de150b17a51daf9e2

SHA512
48301b26ed23e0c41e653d7ff5cf9a368af6e71eebd1169181dc7179878db5ee6ee81ce962f1260aaf5a51fb5597c139f124b48486fa9c1ed2d1957ff09086e1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
539B

MD5
42fc001b617a1e9612cfbd25aa50cd91

SHA1
d1151d009e938b4ea9ec98c3b3428e34ac85ca16

SHA256
e5fdf2fa7f92cdfa1351139a5edd04fa0521ccc795997b91fa9ca70b63e875b6

SHA512
1642cc065bc007fbc5b38fa9941cba3731bfeff16523d651ca8cab88632484e41222942d08a6653d840d843126772a54899f77d4df3105ecaa280ce43c25efd7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
7256b8f97f70f9e34a7f2583e8bed04d

SHA1
b180e86c5024640403dd2252447501f82a64d551

SHA256
737e5615b319e1131cd643ddf1c5e71c2f995ba072de507e86a5ede948246214

SHA512
53ba3e5dda4a789d265e6130b96f2e9ad3dfa185aa42a5a625fddced4c91c22dd7bd5c0a7d270c9d8cb10d5670ecd025f02f10ad05f3169b3761dd8dbf8b1348

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
f3644328f7947462722077b89c6c2852

SHA1
4adf0c0c24fd69516ebd2060b0e3963972337381

SHA256
da05a994cc59e9c5797aab89309b2c7e94ee09d247bdeda0fc55cf71ee18dba0

SHA512
7a933cf872aee98685a0cccf2e4dd357ae59e880237f3f20a802b8519b4585e3b2249803c0cd78185c7d9dd8f327cf080e08d74198123dca0b8c121fff0eabbc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
df6865bfb2c3b93190478a8ff5e1b557

SHA1
7425ac80dd85bf8263e7d90a9615eeb0a0fa4369

SHA256
3d8cc943d78550b1c5fdb0f1e6a41720ce5d029d68847f868e696c2c6e966845

SHA512
2003df52ff2366b4dbf63e3645c949b4641b8fa5b7eaab36bf51ce75fbb1ce4c8235529b06d6bfdeab1cfd6c4e31276cbeb4167bdae6b9d4db813260b4d68be2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
c06e6d090bf24a32aa1ba6e8d26363d4

SHA1
d3db65ed09e72dbf1df77c7226915bf8f0c5a5d4

SHA256
24643051106f1a5a41cf4ab188f160d24d66598a9a01396bda84a1b6c8277925

SHA512
05ed0eaca0f517866f38c26692c2ea214e5bf2b38715d48c04f09ffab0a525911db2987780c659292fdf7643206e9b21716f0c53f843bf5096558fe558999eef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
102KB

MD5
e8baa7d078fe726d03bda08ad584979a

SHA1
a629ca34d1737307fa4137345fc021549fc34156

SHA256
433d965621802116d7de868310f041eb2930f2455ad7da079350057f00568c37

SHA512
337d0facae03409b32bca0a837bc95622c52e2cb7037d74e9dc4f8278b115082f3b462545ed3744688f545e301011d7484b6feb9310bd5951fe9d59e389dd780

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5940d8.TMP

Filesize
101KB

MD5
bddcdc06079579ee6464dc7c83b73e90

SHA1
d4eee0b468988784b3e26df1ffeb0143293d54ba

SHA256
3db5ceb8cc4d7ddd94d69ac178e69e5e5ea5ab0fad8caa23a230ee72cb8d3a3d

SHA512
20df83b3407cce8abbe3e835f2820d45a8b97b3cc31a593dafbca26ee4064cb0c2421f28acdba996a189a7f7ef25a8464f36ff3f32f0dd52c81024439d39f5d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit