Analysis Overview
Threat Level: Known bad
The file http://lg9wp.lg9wp.listquick.ai/#[email protected]&$ was found to be: Known bad.
Malicious Activity Summary
A potential corporate email address has been identified in the URL: [email protected]&$
Drops file in System32 directory
Drops file in Windows directory
Enumerates system info in registry
Modifies data under HKEY_USERS
Suspicious behavior: EnumeratesProcesses
Suspicious use of SendNotifyMessage
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of WriteProcessMemory
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-05-03 07:50
Signatures
A potential corporate email address has been identified in the URL: [email protected]&$
Analysis: behavioral1
Detonation Overview
Submitted
2024-05-03 07:50
Reported
2024-05-03 07:53
Platform
win11-20240419-en
Max time kernel
149s
Max time network
150s
Command Line
Signatures
Drops file in System32 directory
| Description | Indicator | Process | Target |
| File created | \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| File created | C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Drops file in Windows directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Windows\SystemTemp | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Modifies data under HKEY_USERS
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133591962411646926" | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Suspicious use of WriteProcessMemory
Processes
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://lg9wp.lg9wp.listquick.ai/#[email protected]&$
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff87719cc40,0x7ff87719cc4c,0x7ff87719cc58
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1836,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=1820 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1920,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=1200 /prefetch:3
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2168,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2328 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2992,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3016 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3004,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3044 /prefetch:1
C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4504,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4516 /prefetch:8
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=3480,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4532 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=2988,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4548 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=3204,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3200 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4784,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4596 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4536,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4940 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4900,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4800 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4740,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5248 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4296,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5244 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4524,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5404 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5284,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4512 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=6320,i,13621481556111772513,123493797814536204,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=7016 /prefetch:8
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | lg9wp.lg9wp.listquick.ai | udp |
| US | 66.206.39.114:80 | lg9wp.lg9wp.listquick.ai | tcp |
| US | 66.206.39.114:80 | lg9wp.lg9wp.listquick.ai | tcp |
| US | 66.206.39.114:443 | lg9wp.lg9wp.listquick.ai | tcp |
| US | 8.8.8.8:53 | 114.39.206.66.in-addr.arpa | udp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 104.21.42.92:443 | jconcapts.net | tcp |
| US | 104.21.42.92:443 | jconcapts.net | tcp |
| US | 35.190.80.1:443 | a.nel.cloudflare.com | tcp |
| US | 104.21.42.92:443 | jconcapts.net | udp |
| US | 104.17.2.184:443 | challenges.cloudflare.com | tcp |
| US | 35.190.80.1:443 | a.nel.cloudflare.com | udp |
| US | 104.17.2.184:443 | challenges.cloudflare.com | tcp |
| US | 104.17.2.184:443 | challenges.cloudflare.com | udp |
| US | 104.17.2.184:443 | challenges.cloudflare.com | udp |
| US | 151.101.194.137:443 | code.jquery.com | tcp |
| US | 104.17.247.203:443 | unpkg.com | tcp |
| GB | 216.58.201.106:443 | content-autofill.googleapis.com | tcp |
| US | 192.0.78.26:443 | href.li | tcp |
| US | 192.0.78.26:443 | href.li | tcp |
| US | 13.107.6.156:443 | www.office.com | tcp |
| US | 13.107.6.156:443 | www.office.com | tcp |
| US | 8.8.8.8:53 | outlook.office.com | udp |
| US | 8.8.8.8:53 | www.microsoft.com | udp |
| US | 8.8.8.8:53 | wcpstatic.microsoft.com | udp |
| US | 8.8.8.8:53 | mem.gfx.ms | udp |
| DE | 2.16.6.6:443 | res.cdn.office.net | tcp |
| DE | 2.16.6.6:443 | res.cdn.office.net | tcp |
| DE | 2.16.6.6:443 | res.cdn.office.net | tcp |
| DE | 2.16.6.6:443 | res.cdn.office.net | tcp |
| DE | 2.16.6.6:443 | res.cdn.office.net | tcp |
| DE | 2.16.6.6:443 | res.cdn.office.net | tcp |
| US | 13.107.246.64:443 | mem.gfx.ms | tcp |
| US | 13.107.246.64:443 | mem.gfx.ms | tcp |
| BE | 2.21.17.194:443 | www.microsoft.com | tcp |
| BE | 2.21.17.194:443 | www.microsoft.com | tcp |
| DE | 2.16.6.6:443 | res.cdn.office.net | tcp |
| BE | 2.21.17.194:443 | www.microsoft.com | tcp |
| US | 13.107.246.64:443 | mem.gfx.ms | tcp |
| US | 13.107.246.64:443 | mem.gfx.ms | tcp |
| IE | 13.69.239.77:443 | browser.events.data.microsoft.com | tcp |
| DE | 2.16.6.6:443 | res.cdn.office.net | udp |
| US | 13.107.246.64:443 | mem.gfx.ms | tcp |
| IE | 13.69.239.77:443 | browser.events.data.microsoft.com | tcp |
| DE | 2.16.6.6:443 | res.cdn.office.net | udp |
| US | 35.190.80.1:443 | a.nel.cloudflare.com | udp |
| US | 2.18.190.81:443 | m365cdn.nel.measure.office.net | tcp |
Files
\??\pipe\crashpad_2064_EWQJZESARSCSYLCE
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
| MD5 | d751713988987e9331980363e24189ce |
| SHA1 | 97d170e1550eee4afc0af065b78cda302a97674c |
| SHA256 | 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 |
| SHA512 | b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
| MD5 | 0ac3c79b9879368b834d5a63ea24b104 |
| SHA1 | 12c62747025547493ef9608089bf6fd2a55bfada |
| SHA256 | 102750ab849dd63a71450a8e0438fc1e69bf05bddffd59a3faa2a0ba3038b858 |
| SHA512 | 569de1e7c831ab78de904cd9079f6f1740282eba949578f04676ff48a04d48a8aaaeea460c3079760b8eb76a19158131d474c1b6b3c4f180dc5c3460013b5d71 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | efd6080aaba28072aa9146968ad104d9 |
| SHA1 | 80c82176ad4dac8bfa58e8a531adfff5ee048fd8 |
| SHA256 | 982e8f6eeee97e301a4324836cb22dde69365d052a2479e36fbf7d176e9d146e |
| SHA512 | c9ffa79c9eec8c6cf4eba4a427039c2b2cb464551c31acb8c5e61878359521d22bffd0e04239edda42f56faa4ef883df2388c6255def6264e6e9ecde08ca0bf1 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 146c46d48f1af2a0ee1c9d17d3669441 |
| SHA1 | 14ffaf98947899323b05486a91b6272b4ecc73b6 |
| SHA256 | 225da5574d9b0d5521c9d52a9ea34b400bcb7b51e43dc9350defe5ffdadf79e1 |
| SHA512 | 3572f31ba7aa35c6c3e270308e8d3274d632288a29e85b64baafd30185e6bd52af745c81d493cacc1e5e1cbfd5c5ea5663f222eef54e78a059a9f7ac31aabdae |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 708740fa963fc7eb1f3bc080e9693267 |
| SHA1 | 5c7875a75b4003d48dd8d4dcf89356bb7ad6a880 |
| SHA256 | 7d0b9b4f6fbe4de6626c754252fb21a37d356ccc081d4d4556091339b587996b |
| SHA512 | a412a337bb4382b1f727ceacb466f861905d2e7eebbd565aa2ad45b8789158af9acf9b19b53ba47e22150c14fd82a719bd6a6afbab797cc105c69e7f57cda757 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 144e7a1888dff65359953c81a297b70d |
| SHA1 | 95fe54880f19f542cbc4851f23836df62bd7bf18 |
| SHA256 | 9dd8dd13c948011534d38293ab95d079e20f98609957bdcaf710f0f542727edb |
| SHA512 | 21022ac06decb58267ddebea7bd73037591afa3bdf4cd44e65c1a937e89e59479f101ed13ec8abf1d2a2084bf16a5e281a922a0a95df134fadf891bfce1fecb7 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 572655c14252e6e1928c414bdb667aee |
| SHA1 | f1ce45aade58c7668ab233289c11341dc03ad046 |
| SHA256 | d6e022ea76c2cf2167e31ba19b152efeda060c7414ceaa291a6ee18d1d01bce9 |
| SHA512 | bd31c464232924e14c61d81e31d9204436b1a8e444f4786f39ebe4c1ef8091dbc56e3e5d6c3d52ee74fb79a05ddcc0ad88001092ad752114adb892b704561ddd |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 9869de79676302749fb6d749dea32205 |
| SHA1 | 86113903b78709eb1314808b39bf7ebeacdc54ef |
| SHA256 | 68d51ba28145cb1a0b11574d531e1a7357d7f972a72223109e491d7573fd2bb3 |
| SHA512 | 72fe2ea59c5b718da361d2aeb9af3f66f3cb82a449ff7986b5aa0ee4aee7f227474215481da5e199edf83900a959e25618eb19f91119630a6215d68a8571b544 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 224c6f7a0cd536b6c928ff47f56b2b5c |
| SHA1 | 9d0bf81a14c16440d6b3088598cb5813ddde9434 |
| SHA256 | 65508aebd8cabcf6b02fe7c8d9e9646376494573329a2a6617dfdd53e124172f |
| SHA512 | 3a15cf8e90c7b9ad816fa66908e78ec7d3ca27f1c8997ab6ae952a121b4a143b777afeafadbdd469302f5b7b777486f2fe9d05db7e17a7a88ad85bef466f5e7d |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 2b0fe26041cc923ea849c67e9da12c97 |
| SHA1 | 2ab0229b878479de9447c55ea6f9afa358983495 |
| SHA256 | a2c7acae231ac7ff1495a2b839c8cac06f8583bd70866efbd0e2cf0c5fd04868 |
| SHA512 | dfac99b4a9d77ea3153b725d382a541fd6d5b4577eb2ff242fa69230b062c786c3121e3d5336d6afa6114d46ad3d1bafed2470dafb7e32e13878dd45666abc6e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 8bff118db2567ef239bf2e64bbb8a619 |
| SHA1 | 8f90df02a924d9d46d93a58396e4368dc3066060 |
| SHA256 | f9fa1abadb4b6ef97818c8cdab95ed8d977f238ab43fc5afa1af7058bee51a04 |
| SHA512 | 7b2d89c7a0012d883ddaa1537fd5f7b5ca07a53e9715da8efdff32393587c4ade0de91113ab3c07f0d78c9d40de35cf161e7ffd97f070d35262b66ad458d6549 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | f7f89f83441fa1531affe2631698a807 |
| SHA1 | 3835cc7f295432b67d79687838f9d17c905fc7ca |
| SHA256 | 5fcb4cc516beddd8db5e77810c732f0539773a5cd32e2034d193cc8046e237cd |
| SHA512 | fb80610c396b00678ad84bc52986b09c36550ccfab6d69308eb02535943ad4f8156ad8c5f6759e86f661e4a02c5611d9d0b30b3d0ae1c82835712726e5a3febd |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
| MD5 | d18641bd15b87c57b16f1db6efe8ce66 |
| SHA1 | a254789c18b06aa0f16a68ef435442e2c1409d2a |
| SHA256 | a348bbb81f205a7bde775778fcf6be10b7a3c400ac2ae09642237bfc59adf048 |
| SHA512 | 907fe4532dea6ce2e0557c48d1f6adebd310e9fb2c3538e0dbb91edfcbbb177d8caad9cef54a1135c073f3f08c0e6e6723781886c6bcfc20a4b8f3ccee0b3680 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | be2086fc6d828293ffcda46dc2bddccd |
| SHA1 | 5cec07f46e6841e9d36baedc2ac01f6692d235ef |
| SHA256 | 67311e0ca56858befb395c7cfc7e34961c4c003f70125fd242356b4809bf10c9 |
| SHA512 | 7dcd9f8f62b980ece0614f275717682605651d577f3d511a9552111bf83c3308d1ea952136501cba76e1fd4a60afc2c5c29d2ba1abece2b215dca4e66294ffa2 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 5d6bdb7b347ee0f467a47f0d074412e4 |
| SHA1 | 56c55f049ed99f9c0ccfdd470f25964f8dbe69c7 |
| SHA256 | 927be2e95491b0ad40baf308e33760a3a8eebb69e727fa8e0ba18fea607f5883 |
| SHA512 | 44aa1a87ebd827ef251755cb59ace80da6810a224cf55b503112a7d8d636b08aadb6712c973eaeff0e20d868e49374e9c2276efce91c5ba8e2691a019a62fdf1 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 6547b7c612881688fbf508eb946e7246 |
| SHA1 | 3b371d93434a7ded0b99ad3013fad89430c3c4f4 |
| SHA256 | 190f80638b5d72b507d6b6bfa535ad5ed7717bfa709d571c7c152f9df1ec5a66 |
| SHA512 | 8dc910afb42a50c6fb87f10e90a20a8856bd889133deaadbe5f229c3ce5444f0f5a8f4bb4de9f65046d5c44137b2b45cf230f1ee0f89b4ac866274356e474893 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | 0a3b400e6d7325f5263cbe36856288c9 |
| SHA1 | c09a431e0c372d77d3eac7a0286b4d6274777f0e |
| SHA256 | 5ff0c65fd6b6f6a443df6db97911d6cf79832b67dd5e931b4542d3f4da686585 |
| SHA512 | 31141f1f28dcbf0020f8c8980979dff2f828ba24d230ccba4d6e3cde6ced49121434f64aeec17bd332fa0a405383640d7e3f81cf5b3666af4fd9340d65dfbd0a |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\2747d4b0-ad28-4484-90d3-1a2f8dac36cb\index-dir\the-real-index~RFe5878a6.TMP
| MD5 | cbcb3ae41805fb47e7ebfc7ddb35dc4b |
| SHA1 | 337323e41ea5a0d8e8b0e11f389249c27d6b826d |
| SHA256 | f1c4144653d18013e47e0d17058d227289351bbd1056c60bb43b71c755fb2575 |
| SHA512 | d5e1e4514130064154cfa13e028df28377c18d8e1f96978104d4efbe756da97c24effa4f54c537af7e88579b5c261e3035b35324634593885a7f13b04349e4e0 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\2747d4b0-ad28-4484-90d3-1a2f8dac36cb\index-dir\the-real-index
| MD5 | 1eaf2104f359c990f6fbc898501b7e86 |
| SHA1 | 09d7a14b5a0d892ace79152a65504755489dc7a4 |
| SHA256 | 10ee2827f2b9bf937dad1aa4f1c7d37e4658d94a5bcf4153861f2a84f30576ad |
| SHA512 | 80e74456df5395823801a7dce349e240d471d443b5907b4ce77730052a5530afc3f9ee3c2437d2c3d604ac1cef828ba80e7dc18e794644e89ccf8a113e6a4872 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\index.txt
| MD5 | 967924e0623a39f2eb0c70837e26676d |
| SHA1 | c74d9cea7cb86ae8519d2ea09f2d34fd5735a070 |
| SHA256 | 15fe25b786cab638469c74bebcfcd9b8179fd46d020c94c8b78069c851e36772 |
| SHA512 | 4f8a5db092800483e4ead8fa850b1726a0ca62ecf1703d09fcf02ca0e0a9b97bd7bf379b39f301d18bc52cbf7e3486d998e3293d8c3598bb812a984da178e5c8 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\29eb5eacb05363703a494bbad16a2cdd1da1fb81\index.txt~RFe5878c5.TMP
| MD5 | f2168c6baa549248d6d6544d84eddd53 |
| SHA1 | 22f393bba8acc808775157e8d08900ac487c5e92 |
| SHA256 | 50f16213d80674412641b3227f659635b8e3e8d9c268b8e9c49b81e998e9ef90 |
| SHA512 | 1d45dbf297759ac2c6f9eed877e79a82b38486a0f095816b934e520517cfebb81aa661720efbb906ed66e5609967e5ab58ce41b469150f518e41467ef92d16a0 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | a19f3a7c1abe7824f4442b27e031de69 |
| SHA1 | e796864582b978b197c7a002fa6a0182ae3566d3 |
| SHA256 | c4a8e22a292a2faf29de67de81680506505ee6b21fbe5048a605b19805ada1ae |
| SHA512 | 019d19f80f0181a622d56d98bfb333be68f518d8e55a35e98dbb12ddf2d418ffab55decc70a12bb9fb76599ce964d158f1ea3462b718f80c0ef8d9c41e0ee451 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | fd9bbd164e54bb712003a6b5bc372815 |
| SHA1 | 8ca7055e1f28130f222d5f222fb9d4a3ee2af0ac |
| SHA256 | 176ed141282a0f37e4771748b0b6e685cd4e15a5b008db969356cac31c94c46d |
| SHA512 | a4bd69fdfc1e7659b26ae71bdfc33312302646d1aaf0cd016363cfba25c85acb24a3248e500b6c4bb664d86a36b1635b598b8a97e363c64eb56b34a94fbbd549 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 6e91fcb7019696a7b970f895d946b916 |
| SHA1 | d9d484a90ba7870f80e87adc1640d741d5255e3c |
| SHA256 | 1e52c84b4c4a3267a24e4ca1ad276106c337a5d8620609ab2c91151443d2fe53 |
| SHA512 | 49834324d135cbf2e9bcdea64f9cf77f760e69b39c10e8b382ee76d1ea3ad81fc1e8baed6a1fd46a75751daee1faae4c9de85851eadeffa6be3e4a543ee64ec5 |
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
| MD5 | f49655f856acb8884cc0ace29216f511 |
| SHA1 | cb0f1f87ec0455ec349aaa950c600475ac7b7b6b |
| SHA256 | 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba |
| SHA512 | 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8 |
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
| MD5 | d222b77a61527f2c177b0869e7babc24 |
| SHA1 | 3f23acb984307a4aeba41ebbb70439c97ad1f268 |
| SHA256 | 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747 |
| SHA512 | d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff |
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
| MD5 | b5ad5caaaee00cb8cf445427975ae66c |
| SHA1 | dcde6527290a326e048f9c3a85280d3fa71e1e22 |
| SHA256 | b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8 |
| SHA512 | 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | b18f770b498e4ffedb31728caeafc2fb |
| SHA1 | ff0a9d191e41a82a65b639206168877d2d4761c7 |
| SHA256 | c4a4c5b63663dad94e2ab9fd36f8d2ca77d8ed8a44f884ab943b667811df9e37 |
| SHA512 | 6de8c247e37d993cfba2594710984c744cd5b7e78a49424c4a5aed2726e57507aa2216d3cf1d9cea6d1dc6d45bc2815cd1b89d9cda6990d745eba7de0f8f3f63 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | 809e00e5f5c156711ad3f52369aa4960 |
| SHA1 | 1c6ebf06d77bbe26e0d96c947cbbf49e76be1de6 |
| SHA256 | eed0d64490ca5551daa2b1f04e3559afb3a1db8901dedca70e3ea6a9aa887b06 |
| SHA512 | fc8f0260790de1949ba89b8734abf524fd25fcde7cbee9aa9775c63bb88cd729ea9c2b8900883306e92e2f7869e0b5009ab3c4346904d5e20074ed38573cbf2e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 795a73fa65f774b97868109ae8d9e8d8 |
| SHA1 | 81ff80cddbe09eab1f143d388c2d81d849d4db74 |
| SHA256 | 72d18191c3066ba6063f9187fef00d99ca117e1dabed5beab6cb4cd7f3da93f2 |
| SHA512 | 025b8291fc1af57f43496bf58e4e0837a48a1f34ee019debd6f012d196428d136cb79009a2589f87def20a9756163f99c7a88e3c942fe54eba0596ce85b39ab8 |