hxxps://getwave[.]gg/

Analysis

max time kernel
539s
max time network
540s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/04/2024, 21:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://getwave.gg/

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
97	mediafire.com
98	mediafire.com
99	mediafire.com

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133571711134950855"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1192	chrome.exe
1192	chrome.exe
5052	chrome.exe
5052	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe
Token: SeShutdownPrivilege	1192	chrome.exe
Token: SeCreatePagefilePrivilege	1192	chrome.exe

Suspicious use of FindShellTrayWindow 28 IoCs

pid	Process
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe

Suspicious use of SendNotifyMessage 26 IoCs

pid	Process
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe
1192	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1192 wrote to memory of 4636	1192	chrome.exe	86
PID 1192 wrote to memory of 4636	1192	chrome.exe	86
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 32	1192	chrome.exe	89
PID 1192 wrote to memory of 1580	1192	chrome.exe	90
PID 1192 wrote to memory of 1580	1192	chrome.exe	90
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91
PID 1192 wrote to memory of 2244	1192	chrome.exe	91

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://getwave.gg/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffad3cf9758,0x7ffad3cf9768,0x7ffad3cf9778
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1720 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:2
  2⤵
  PID:32
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1928 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2240 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2912 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2920 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4488 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3144 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:1
  2⤵
  PID:980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4896 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:1
  2⤵
  PID:924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5364 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:8
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5472 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3792 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1532 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5620 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=6004 --field-trial-handle=1964,i,18263404599270219865,16851094528831286333,131072 /prefetch:1
  2⤵
  PID:768

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3604

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
c726ffa1e047151977402f2bf7758a8a

SHA1
6eb6b0ae0c10c2705eced53b3baa646246ad1a63

SHA256
8ae05ac523572c8ed55df18e6048bb5dacc2498a0d41200037c1d2af2d598491

SHA512
70efe58bf55472454a88c9ed2d971b3bb4a1f533f29b3c18cf6b08e7473acce15fd5f0d17588cc1f3a74c085c736d6d4a32f6d1910deb58b547088c932fbdaf0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
dacd5ee4c9246fc4fbc13fcabb6948f8

SHA1
1ff1d63fc72b6f4cd9cd6c5866d9402a5be3a4fb

SHA256
7f3be7d412ecdb3a65c46515dc652e6687c0e3f98b568325fe1dbef12b43c080

SHA512
6b40bcec7e46d80eea2236ab0a2fe09338ae689e467931d4577bda2385916dfd9856f85d4fe6b2bb983dd98fcda2af10f6d6f07d2f23dd35fba61b70675721bd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
23410fb3f40c9e1ed88d93a18267d6c1

SHA1
6c2a145b7badac2a509261d083c85c0f7fcfc990

SHA256
c0d3330b70a4aaa9d860522379a44b5f530fa654787f08398aee677b33705fa1

SHA512
c4b264fa461a42b127bd60bed8584bd8e9eecf4a96824bad2f50e8eba2a6c429a567002d2b7f71c95a771e8f3c862373b3ced4e7d0015fe985bddc368fb4718f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
74e26f1d635d459c28f6c63b2d684f72

SHA1
6a35fcad488250112cb658c2cb0f89f1123fb35f

SHA256
7c290a2da930858b2e23f53165c3b622e2fd2aaca6d82a86232be2dab7134b62

SHA512
5947013856da0b14350adaca575ac94126e5e6c5970ae25dc1afd124c7467a647b407c71a5cb162d9dd8da11ec8ae40153e94bd4b309c8713a45fd4ee8e2433c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
41382fa4d2fd52d006a843a50ac74482

SHA1
d71ad9c6e2970af99fcf1bf80cfe9c41e100aa3d

SHA256
ca4b527c2109abc95e901bef93724907c322f696e2e14798304b89c67148df86

SHA512
fb7d240a4916d8a3e6b16681ce1c8cf9d3fe9af34d8481398637f80a4f6537f0461d8752a386bf4b0b1fa5dfdbaae054c87dbb74823869aa683461302f60847b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
abd1989f56225e37dd3e14f6d16fd0a7

SHA1
476e3e158e25780f035bb77fc0bc9ef3cb7de337

SHA256
906b8c3e20c6f83d8bb0041fe80f422c08eea3705112ecc890cd10b23f0fdea0

SHA512
65b50138076fddd300a2f912df952fb4ed36803ee71f5d2e43e8082c57c1f9d7d2ff846a81f3d7be26ef5b952185a5db3e06ba62c0f6c90ed77523e05055607f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
abc862139810ed8e159222ed33720255

SHA1
a0f94ed3e1caad356b452140472a49afa1c29a15

SHA256
357e100472eb5e725712904e23229af5585cb8c568bfd454be070c6e7ee87e90

SHA512
be2c6e2cdaf1e1ccaf9808176e80cdd45920af00882266592a9bfe3bc2b886acc233d75b771a6cf471aafe91175be339d4daf9ddd6ee88e9910d7945d19b8ddf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
32f51f49aa78d436ccb0dbf1aae4a198

SHA1
076ab8b0333da0e29829d63d6332b025f7d29834

SHA256
f2d999e8d9c09190c709618a735837b1e6e5721a9ebdeb93561927c27fb71661

SHA512
09e77c23efe1be4384b090ac7178178b0f00288e424626bfe118554eb0c7ccaed9cce3f4f79d54411983b6b077ceeb623bf7489a2cea9ed9f8d2b6a6460b4797

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
6e6f4b016077b4c818e8c0005246ca86

SHA1
a9cabcc954bbe0ecfebae1a38a96271de867591b

SHA256
9c57ae1825d900d308672c24473a22af2928d342d631fe6493658389be23e6e6

SHA512
1cc34ac7729bc436d10cfed66713d8d4ce495e10af378bf229f5e305e7c643178bc0067c793abc53f9d0b3214d00a945861d7986fa83062e4de26f8198d25af7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
539B

MD5
1929aec32d486e3bd001e68224f76443

SHA1
f618a2700bf0a30abf9ad4f2d85ba10f2d409605

SHA256
c8fd477acc1bdbaa7e55c0e329c0895d2272455e388659b69fd48b38d3528034

SHA512
2fb5eedb008f93703c1494d12268e3b8e673dd0074a06405038a129d445a355ac4555f0e0aabe8df83babdcdcd6959e39cc05b331f7131fd5cf6de53c919b569

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
3be8ef3320cbc20ba2c4b4cc9cf7044d

SHA1
8d477d5397b1a6c164f10b57f96190132fe42bbf

SHA256
586c717826be49824e00c41ae4080a3c1ef8b3c36425642439ddc2ce019b45fb

SHA512
eef6d3392f3d9c07187c175242849ff2cb8afb3976fc3d10aa51fcde607917be398075e09e648e4c6e3ef7a6a837862fd8226bd175a790e291f1168ceb4e8646

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
7b465a97773ca5a87c2bbe03c20ae14b

SHA1
96a30da31b2ca297b31f668de50e548e27f686a5

SHA256
706eb1fdab3c346ed0f1fda3af6c8599eb00396bcb3b9213abb57c822261c989

SHA512
8b85fa38f056a295e95b06dd0c503aa2735a3018385b27577dabded365715552b96b8d225138207828f2ec8ca2c5c760becd6e2e2747fad992a5e9c402b93c52

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
50fa2f0f55dc04dfba744ad2676d798a

SHA1
af64e2f01ef0567dc315de673ac2e90d1698ee73

SHA256
1a10c84a022b5cbfe6e250554f122b05880f66a669609dd93fc3d9c1a4b0b130

SHA512
091d4bb5401c221fd07df2dfe32d52c9f92a0df388def41814845fb2a26a979a3062d5467737078cc1afcd5377199713f166e7b4d8d49c4018859bbe0006772a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
6e8ea7ac8e3225b6e566b3c2cb940987

SHA1
c51d4344b7fb0c68e7ae59d08f831b8943ea91e8

SHA256
bf7e41bbe9e2abed3373ec23a8c406187ae49662d1ade03f98e6d9c09aa58fad

SHA512
d6a7d86359d955c5706f2e8fa31bad41fc6a4b003135b382accc18d330d69f4af07dab204d4404b331363f77f7431bb0c0661ce5002b6823d86ced59b8a20dc3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
4f1877ef326f1dbfa90fc1964c4887da

SHA1
10c886dd1550652c8f8ee7610e12a8b68438c453

SHA256
50b7b55e77097066bfcba7cdf4e6772eff11ae5a2601bd498102d7b22c08e60b

SHA512
f745552ee49813f18b16a45fef4fe56bee9e598db8231f81d6306a205e57e8e3c028e7a9eb90932a8da6e3bcac3db9b3b6e6ac76d851d9df07d7f975b2888f5f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
a1ae44ea1df381d4f644f0f23dec4f95

SHA1
5399f8e64f4481fb8741f385df279ae9d4799dea

SHA256
ec5411dd9e02d319a775074a2d591527f36bd3b93e1016c39a03ade31884619e

SHA512
4cf7ff6f68427c81c7b93b51b2ee795785267d9e3a0c83ce1cb869fb5157108f00abd61bab1665cef6afbf5009cb3fc5d3f63414734b4b4010d601044bd39798

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
9de681c40b39a217867d3dc64dbd90fb

SHA1
3be0b45ca023d6702ff50ef00aa8a28616356c28

SHA256
b5ba666c11ea19958e8af09065ebb987e42a40f5b4cf5263e4b1db2fb82bb0c8

SHA512
487ed672442ee9ed82efb0febbb1fc71d33609ff221f97c24d2d8c489a477ca243e932aec2663077050a50c4d6b1ace1fefd54ff6425a31b2ec6e93479a853e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
105KB

MD5
16edab14bfc8e2c963154af62a1a3c75

SHA1
0896d2b48fdc309e15b626f1bd90d1e1009a3d61

SHA256
c1a5b54aeadd96f179a8b4e1c68776751c7e0c55cd25cc393a7ce4a86afd30b0

SHA512
5f799158d22bcaa14af32af44550accd8c581c16e0aa9b5436afcaf3dec80e033423b25845f091f776f3fd2920adcc9bf381c4f892a08287f47ed05a114c55ca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5cb2ae.TMP

Filesize
104KB

MD5
8a9237f7d1a47afd152c4a9a3fcd0eb1

SHA1
7d74dd9943aa7c09ca0d80712c656e685c0955d6

SHA256
82240f0912b47c8c1e2d27680b1bd7e89b7bfb215cee1c2a595ffabe01fc4b90

SHA512
3c634986c0dd37fc196690383e1752dde8165128c2db43d03506e42464dab2f37d0f89786d0a114b17fbc93e55bf99c9b31dcc4fcf968c566147e3a814baa2bb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit