hxxps://ofs[.]com/products/category?&id%5b%5d=13&id%5b%5d=342&id%5b%5d=14&id%5b%5d=11&id%5b%5d=147

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
16/04/2024, 04:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://ofs.com/products/category?&id%5b%5d=13&id%5b%5d=342&id%5b%5d=14&id%5b%5d=11&id%5b%5d=147
Sample240416-ffrdmsbf9t

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133577165641709068"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2952	chrome.exe
2952	chrome.exe
4168	chrome.exe
4168	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
2952	chrome.exe
2952	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe
Token: SeShutdownPrivilege	2952	chrome.exe
Token: SeCreatePagefilePrivilege	2952	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe
2952	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2952 wrote to memory of 1220	2952	chrome.exe	87
PID 2952 wrote to memory of 1220	2952	chrome.exe	87
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 1100	2952	chrome.exe	88
PID 2952 wrote to memory of 888	2952	chrome.exe	89
PID 2952 wrote to memory of 888	2952	chrome.exe	89
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90
PID 2952 wrote to memory of 392	2952	chrome.exe	90

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://ofs.com/products/category?&id%5b%5d=13&id%5b%5d=342&id%5b%5d=14&id%5b%5d=11&id%5b%5d=147
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc0139ab58,0x7ffc0139ab68,0x7ffc0139ab78
  2⤵
  PID:1220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1748 --field-trial-handle=1916,i,7626593292872808015,2578347853695545704,131072 /prefetch:2
  2⤵
  PID:1100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1916,i,7626593292872808015,2578347853695545704,131072 /prefetch:8
  2⤵
  PID:888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2200 --field-trial-handle=1916,i,7626593292872808015,2578347853695545704,131072 /prefetch:8
  2⤵
  PID:392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3008 --field-trial-handle=1916,i,7626593292872808015,2578347853695545704,131072 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3024 --field-trial-handle=1916,i,7626593292872808015,2578347853695545704,131072 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4352 --field-trial-handle=1916,i,7626593292872808015,2578347853695545704,131072 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4608 --field-trial-handle=1916,i,7626593292872808015,2578347853695545704,131072 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4704 --field-trial-handle=1916,i,7626593292872808015,2578347853695545704,131072 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1072 --field-trial-handle=1916,i,7626593292872808015,2578347853695545704,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4168

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:5016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 32KB
SHA256 bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
MD5 057478083c1d55ea0c2182b24f6dd72f
SHA1 caf557cd276a76992084efc4c8857b66791a6b7f
SHA512 98ff4416db333e5a5a8f8f299c393dd1a50f574a2c1c601a0724a8ea7fb652f6ec0ba2267390327185ebea55f5c5049ab486d88b4c5fc1585a6a975238507a15
SSDEEP 768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 67KB
SHA256 da912cab2965071a5fce050c7ea043e5820a2904953c517dd9aac7715772dcae
MD5 2497b1cb64a0b3e3a578369824e12914
SHA1 f86cb1acf5b0f5ecac650bb88a6fb122eec2a838
SHA512 8542ff2b246c4ff3001ce44a73114d27ec1a54fd5c13678099ab7ba6320067636b581b88272a71b6fa222ae78b4a97df49d662aae718743e183b760d840f4cf7
SSDEEP 1536:KbNjTqKkS0TW2BjTJWvSYAhe8fx0UkBBmatRJ9v/:K9W9Mw3JW6YAhe60dd9/
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 95KB
SHA256 1b410ba5c63ad942882baa86c76a0381c06d7e3fbbcc2138f49415baf1758586
MD5 187be69a0b3ad57df77681447aff3608
SHA1 467ac01e4cd856c45fbaf23424daaf5cdb6482d9
SHA512 55f101ef5618a9e1dc33ff1ec30dff576233a3ac7b001c6fad7f0dcd56379014bdaf2a6d211f25ca940721bda9f997ad8669af0d52b6a15c83e66215ad0d2044
SSDEEP 1536:WsTSMpWVDmpSER9lZDAvKGDs/LX0Rw+Ja/hwJ/KQRa8spSuxoNHNc5Lj9QXzEpIy:WmppWBmpjbZDeKGDszfNw28scuEHgj6W
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073
Size 74KB
SHA256 159aad5fea16844b012a9bafa7579e26149fd7cae42219423388f7f1190a7031
MD5 61615e3bc35b10e06a363bc38eb8e51a
SHA1 d92a34565075ff9585e0ec8edc18221e70937a0b
SHA512 6396a548e078922a6b48bbcc3374041af14b38fc27a273c9830c8fa61ca1fe26a7967fe06996fb391b7510ad335c9b92878389795071715765d99b504152a8ba
SSDEEP 1536:MdNb7Wol9qQ3TFrH6ttYFEVgE5zXJBnwoLqy3zStdvdPutc33+/Ffiqr:U9l9qQDFL6tqu57JRTLT3mtdv8233IF/
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000080
Size 76KB
SHA256 4a796ab6b00c069962ea450f8c781b805edd8fe94f3627d383ad0e244da1fc60
MD5 686b196d54a393f67fe95301dd78bb83
SHA1 e78a879e82f329095767bdff00492735cd8ff0b5
SHA512 a5b7d83ce5bbc5ea0d126a3819c481f653d4ec7ce2f5d453d503b004bab7afb7960ee63c50358b9753fd0129c2b92177dd118288876c50e6bcc90a522f30cd5e
SSDEEP 1536:JXQiDoFFFFFFYKVVVVVVNfi8u3gzGAMx90wweethn1DdtDsZf9O/TRCqc66660l:BbD1KVVVVVVFi8ggzfm0veetB1DdtDsw
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 912B
SHA256 505748f32cdcce5d07402bc21539504c06e9cb20eb8a3ba324387a236242aa2f
MD5 baffeaaf2051e405f4ba578ab6be1528
SHA1 d5c3ae941ee6a126ef52353e3e2912122e9e6e99
SHA512 9a5f4cde02962e340a44494eb3217d294aaadd26cd6714f79bad3f5ca270db920174ef63a46c2123d84dd75a818dcf4cce72f1e546adc024e4b806960b32c988
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 f701a63266690e51493008ddca83ccba2af78e777483c27e31976a6bcc9b9389
MD5 648ec70a268895ee400d32d52836ef49
SHA1 6846bb90d894c932f1019f6b238cc5914e611f2c
SHA512 11e0304088767551b8037c52db1d1cd8172ea0694ef9cd0af75521fe4ae958e4a86a9dc46f9b3a4380634eedd324ca4db8aaa95792ae80c6aa1354a9530bd324
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 e2a3f7690b86c381b0563b7be264e235a9152eb4481774132756e6a3bec93b81
MD5 0808f5c3785f30ca73a7150d932f251f
SHA1 16080da15ca971419b8bf9a6bda5115424176ceb
SHA512 925da35bd831df09a26066225648b56199995477c906c3f2bd9af252d75dc858dd7acf07002739b1bd48d0e6b7883281d21a864f46dc82fb86a95776f58ce43c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1dbe259b0e3486b31454aa4d602c692205d366cdcbb2d279c75180f70867cb7f
MD5 c262289c7bede0dee20f83ab52986e5b
SHA1 e2842738efd1ed5bd360f09ccb4bd84043b45d45
SHA512 d1cec2143e9e73848514619aaa5bb916b0822153eee2d36de8cb17ff9a8ba467bf5b688aa73700537bed80be60c5ca5bdc01950221a62c7c79e0cfaf74263dd3
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 5e80393c77b4931dceceb6e3725cdaeb3df1b522caddc1abd54b755bcfca7526
MD5 683071de386696a08adae9ab5a2d3f41
SHA1 f6345b47ac983d1992f0bf94991ffccd9b16784a
SHA512 6d92a470ec123afca2bbc8e5434a380cd0b1ac19fc091b0a588da9ac6e7d204219e0a18f99f7ce5d24b68635135a136353daa399a39a558a0c8108a61073026b
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 7036664740e4d9c60b05293436ab02997d83a2b2a069057f73c56b34899a9431
MD5 9f00c8d00e4565ca9c7cacd311942cd7
SHA1 d1e763bb5b6a4c651c5b2c2c0c42af72a8edfc22
SHA512 f941d7d4c9dc79a33a7fea301e41adc6c9a4ddc326a6ccaadc730eaf8676e7a0c1c765e479e5db9388f5d46097a1ecf6d59c451cee4b5cf08fe8a7c3141ba75f
MD5 SHA1 SHA512

Submit Download

b3c3e467-2520-40a6-9d6d-cb323de9106a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\b3c3e467-2520-40a6-9d6d-cb323de9106a.tmp
Size 691B
SHA256 3596ace473603da131c3f4550bc72c6bcd22ea269794dd371282ef86cf1cc80f
MD5 456ab2f656e9b2735796dfa5710f5d44
SHA1 5470d15c58637466594c6c194cd865f0d62e9639
SHA512 cd00c427e59d72ba893d0fe93d32dee6695f35753a83f2649f2dbba126caec4840b3c2520298d3c3f1ccc1aec40728d0cd9870a093aeafe6c54a3e680f37901b
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 6902bd7e993d0aec089bc76d581b4f9ffbceca710d12188d405f4642d272b0dc
MD5 c7a29945f75687a89811c1df553cfa71
SHA1 33deb286021f3fca69c2e361fcdf0660b3f692e8
SHA512 1017b528625a8a443ac0bb796de7bafb0d6f42065fb86de87370742c2d59cd11897fdbb742cc306d2e951626834b8fbc74af3138e6ea376d23ddb2f99ab233ce
SSDEEP 192:vP3u+tislD5aJFZ8syh+Fn3TsfP5tjEsXtScR:vP3u+tiSkVyq3AJtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 c4f2069b129bc15c675e72e9190a441b484bd0572a0393865383b9adb6e53e43
MD5 e365e20fca375a64912ad93fee00c21f
SHA1 03208d2c0793799128f1b2d3de58412a37db1a96
SHA512 749e25810b2fb566f41867f9e2fe0300ccd6bcc72a72f33cfcc014c0a2174980a446b9a835a916fc830e1fe9339959cb201197830bdd388e7a9000412f55a9b2
SSDEEP 192:vP3u+tislD5aJFZ8syh+Fs2pifP5tjEsXtScR:vP3u+tiSkVyqDsJtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 f123d626831358a26cb3e3202c52a01e6b2f7d5f3a8f039a8800384903f6951f
MD5 51b1e99e4f71ccfbc5a3babb1932e385
SHA1 d68d73fe733eafff2a53711350629e4eee024052
SHA512 b82a46328d0572d7ea3f16104b787dd2febbaa4c052220c92ebc89a98d88e6bc98613405a79d864172170710ecc02500c3a9d532cce94ceb7a2b67b7e74a5919
SSDEEP 192:vP3u+tislD5aJFZ8syh+FvB2pifP5tjEsXtScR:vP3u+tiSkVyqEsJtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 250KB
SHA256 54bfeb7ca0a77102583023ce3b5abf36a7d87375cb70e8e43ccf2bc6e3ecfef1
MD5 e5ba6c2e958199af60ae36385e83777d
SHA1 4f402495ff8fe717dfcd69f0a525a0d6d1495220
SHA512 c7c108cd3f6162587cb3c7e2336e494047fc368a577d752d7816deb927909c03c4b086cf7cf749ff6497cdca5d7824a8613ef67576aa84653aebebdfeee5435e
SSDEEP 6144:vdZq5Mv/ga5rvwjuu8oeMdMqCFn5jq1987IGvRboV:vrnH1o7maU/BoV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 89KB
SHA256 e9ca4c6d2452cbfcf8e5bde8d0428013d7141783f7e383659613bd0cc96c3e5f
MD5 c5a0bb259b92f86b3a61397eae8272cd
SHA1 8b6a8aac0cf4ee504410d23a052378a9deea1974
SHA512 7425b60c1a5f0475cc287046e0716bf53ca7e011b5a89103fd8f675084cbf63cdff1a61d08f2b0f723dd36d5a9c79ea7ccbf36ed7477529bd967521f66ebcd72
SSDEEP 384:kuR+xEQb6COiUq5/vHOwJpYHYj6JzpuLKj1OEMZAu8rMISwNf7bTvqruM02FBmgN:4iQqzWX7K1k/HuZeKN+tT
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache~RFe57c42b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe57c42b.TMP
Size 88KB
SHA256 73f1293f505f0463bc24c979ccdd9ced48927175fcbca9f97438eeee70cb384a
MD5 cdc5594992afb0d08d5e575d0faeb26e
SHA1 a85e905b4e24ef68814f63a0e0662ae4e2aa8d56
SHA512 5e60e7663e77980648e18c72c72b6229d84f8aff7111bc4bfc0a576681951b7a636a44de36f7d8b7f808230469953dfd203e8652c96091fd82ecb378964fa892
SSDEEP 384:kuR+xEQb6COiUq5/vHOwJpYHYj6JzpuLKj1OEMZAu8rMISwNf7bTvqruM02FBmgZ:4iQqzWE7K1k/HuZeKN+t8
MD5 SHA1 SHA512 SSDEEP

Submit Download