hxxps://gofile[.]io/d/ZBBWws

Resubmissions

02/06/2024, 18:52

240602-xjj76sbc7s 8

02/06/2024, 18:51

240602-xhzlgacd43 8

02/06/2024, 18:50

240602-xg1r5scc95 8

Analysis

max time kernel
101s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 18:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://gofile.io/d/ZBBWws

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133618279922758417"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2536	chrome.exe
2536	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe
Token: SeShutdownPrivilege	2536	chrome.exe
Token: SeCreatePagefilePrivilege	2536	chrome.exe

Suspicious use of FindShellTrayWindow 46 IoCs

pid	Process
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe
2536	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2536 wrote to memory of 2676	2536	chrome.exe	82
PID 2536 wrote to memory of 2676	2536	chrome.exe	82
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 3900	2536	chrome.exe	84
PID 2536 wrote to memory of 2480	2536	chrome.exe	85
PID 2536 wrote to memory of 2480	2536	chrome.exe	85
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86
PID 2536 wrote to memory of 1936	2536	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gofile.io/d/ZBBWws
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xd8,0x10c,0x7ffe7e45ab58,0x7ffe7e45ab68,0x7ffe7e45ab78
  2⤵
  PID:2676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1596 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:2
  2⤵
  PID:3900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2264 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2916 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2924 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3912 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:1
  2⤵
  PID:3760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4292 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4344 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:2336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4772 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4868 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5220 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5384 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4792 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4676 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4180 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1060 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:1376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2396 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3060 --field-trial-handle=1860,i,16319231136934167006,940538142362483645,131072 /prefetch:8
  2⤵
  PID:4084

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:1944

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\86bb4500-00b9-4dbd-b407-f0b819142d9f.tmp

Filesize
130KB

MD5
752d659f3cb68e8623e1e18fd6da1af7

SHA1
ba170e00616fadd446606c3b1fd6e4b614b67d45

SHA256
562a6ec322e04d5cbc5c87baca4deda50d8559d2cf6eb05379c0c5788b0625b8

SHA512
eb7de163314e88075e71e44267d5d1c1801847410134c2e8d946fb9f0c82618c7775c730302fc05219c476963f2cb020f3fa8afdddfaf243a62122739fd94258

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
4882684c5b6f6bf1cbd36b3b126abdc3

SHA1
19ff0bfc617e213361a016198127ebca043cda3f

SHA256
f1c8da2480ca650695c7e3817b307cd8a58bd024417d6539a9ed60286a18c7d7

SHA512
bc50d158333f22600e5eb34df3a46d64c6318fcc03231597c28842c0bf93c14f6482d855c625f225daf37148e5ef3dc500c19e953bada39bdf1428659fee9219

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
540e26d133b8f31fb0929f9ef72fde1d

SHA1
48208b7012bc19690c1133a3e75143d287b7e9fd

SHA256
f3e6c904e7137bc3ff95bf0e8df51545f4d634e624f3c0f0030a8dbec218ff95

SHA512
ceb5f2a31914895b6af25414670af9c3a2d54076bfc67eb8c2076bae5d67e2d27be7ce3c3dcbd7432741e86a89246d7c933a3affba99ddd6d34d378c706f6da8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
858B

MD5
3e9ae364f0327936ec98058d6c5b6218

SHA1
8b58c92d440f6ab5e1a1480d27028b062b0fb8be

SHA256
e97ed235318ff46e57defd7cd3d0cb9b79cc24b9caa57cff34496cc09fcd8d0b

SHA512
4994a469178287fe51e404c8b00a2bf015dbe5f50577ef0f009186df8ac9ecfb7c1e3ad03f6ace5f8646e651e91060e99e91c8c9017bf98324fc6ea53387be24

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
d2f97f17bf3dfcba087e249c8b88c0c1

SHA1
1ea5bae53f2c050f85bfd29c0601d1083dbaad01

SHA256
dd170391b664c09db506d0ccd7d151505b93858e7cbf71317b076d42d2ef3fa0

SHA512
8a315b159c5244f68b896b4c2df2a605cbd55f3ab65be5347701649e84ae8cd6c5aa90be8ca1cee10042be027f89dbf99eccf11b4e2221bffa9ba0f83d83e0be

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
54e640dda3b8391a57e4032b871be806

SHA1
3f1dccad85d3706c6a79f772b13200667d67b387

SHA256
b2e97c62f3c3613d06a97610465dd53b933cc1752a222988da0c5e20bd09a327

SHA512
e802301b90d329cb27b2db2818a5f44f59ed1d7481c6a57110112172900f8aedee5e9765a09d1a7040d6f8fb712a7f74c2893579ecb54b3eee5fb643cdab5790

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
c60b469eca61a28ab9560b41fa163afe

SHA1
1c7fcbd809cd09019646f55f335bc66cb68836be

SHA256
811486e1921c42959c8c54775a8528678e40e5d621fd767a7f6e42b09388555c

SHA512
bfddf0b10a484a12653556e64692ea693b197f384e81ee39ec8e42776464a6c6f84b6779a4b2aed9452c631d108523a8704f7891276fd17605fa1451a8e9ad6b

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 563878.crdownload

Filesize
18.7MB

MD5
059db8cca6e81ade9387948f401c47d4

SHA1
8a6dac7d6ed9ec77016e2466224d487b26b7646a

SHA256
e0996d20778ae5b098f17a8e9cf5b8c84df41a436adc4317631fad5c79a239d9

SHA512
2db076ab3ff51d18ab99c1fdc1cacf8d6f8e889c29e996292b33bb15f67b86c133c7195a50747baebe28f0d9313681b9dd5e1bc2ceeaea8eade863003c06d318

Download Submit