hxxps://checkya[.]com/copperstatecu[.]org

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2024, 17:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://checkya.com/copperstatecu.org

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133658847194485323"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4808	chrome.exe
4808	chrome.exe
3772	chrome.exe
3772	chrome.exe
3772	chrome.exe
3772	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe
Token: SeShutdownPrivilege	4808	chrome.exe
Token: SeCreatePagefilePrivilege	4808	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe
4808	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4808 wrote to memory of 1540	4808	chrome.exe	84
PID 4808 wrote to memory of 1540	4808	chrome.exe	84
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 5088	4808	chrome.exe	85
PID 4808 wrote to memory of 1392	4808	chrome.exe	86
PID 4808 wrote to memory of 1392	4808	chrome.exe	86
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87
PID 4808 wrote to memory of 3672	4808	chrome.exe	87

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://checkya.com/copperstatecu.org
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc82e4cc40,0x7ffc82e4cc4c,0x7ffc82e4cc58
  2⤵
  PID:1540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1884,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=1880 /prefetch:2
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2140,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  PID:1392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2224,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=2412 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3132,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3140,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4840,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4388,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4964,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:1560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4884,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4992,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5252,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=724,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5228,i,10127437323099772263,1750000649625628383,262144 --variations-seed-version=20240708-180128.343000 --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  - Drops file in System32 directory
  - Suspicious behavior: EnumeratesProcesses
  PID:3772

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
1⤵
PID:3992

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2736

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x514 0x3f4
1⤵
PID:3948

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
4019457f3f4b85370c7eb6ca5e450eed

SHA1
c27632e79c6ccd9c9b2c88cc45df2d51e42253cd

SHA256
59732d2ab7c2e66c8b95f24f18d086c84d315df80b068c3f1ea5c3026f920204

SHA512
5aa9d4c571c3196b421ba48a032691ebe6a63d5e2dad8fc13a3976d9f9ce7b3088c05ff8252bf687c4d03b4914ee7e3845555d4d68f437e9bd7dd654b9eac0da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015

Filesize
20KB

MD5
4a2961dddc7ca6732df1c0646aad5129

SHA1
ff0b7265d2bef3824709ee3000621aca2d2c8724

SHA256
58a974546a65196f726ac5dbc25f1048991e8347bd53e7449102048a5a0dd597

SHA512
82c889adccb748ea06ced5db14b7f3f94b980215d350d7cf5463ad05de53b0421e0bc7fe6d0d3897480b2cbd6f34e0126814f166adb59b7f0a1c9cf960e8a2d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
d984aaa50755918b3d9015f35f6cfbeb

SHA1
4422674af390ada313c240f093dc031ba6e95667

SHA256
96062ff88bea9191315822261b116fa0aa2d0c1ba695dcf235de4cd3af030763

SHA512
04c20029e9696902847c6221d1bc0513053ef67c0086aed21744714d2c1cf65bd741cfa15fbc400e16335f22aedb82b176118e8f3c2c3ec9cd57b228b8dbf3e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
0c32172b918e1fc4b7ac4e1bb8849bff

SHA1
2e7b4d9ce80bda312bb5ce0231b157793eaba2f5

SHA256
b76b146758aad68c651593714bdbd27a52d4a37055e715f060ba694d1d708f12

SHA512
650a37ef50531b89ac12221e8045d4135aac24c6dd94f526fa4b1980605d12a6b351e6d00bd9ae678bd0c4a5f7b7036dea30be2d670820502aa50853a45815d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
7d6701cbe78c618d9fd65f5144e34e9c

SHA1
12456269b9f2d568ffdb999286733562ad56130e

SHA256
010e9bdc98aa9bd6bc8de17d44bac77ae1790c1b0fb01d3bc0ee14b88c7f7166

SHA512
5c2381f567baeba6ca456f9cadb2c4f99ca6b5ef881a96fd3eb39d920cd0e066a8083f47a2742e97aaf5777deb4de286a5bd542c33d25598f2704ec8eeaa2bc5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
8KB

MD5
8d3deba8816cf94fb2695d973f842650

SHA1
910d27f9aa1afb90bf7c5e0c960c22f0f9e76035

SHA256
121b0573226d3257c5d4722fd1ab9a43982de41d5d0aafdaa2857308d254a604

SHA512
262b93a11d68484222bb6bdf0dceec61742bc8f43ada7ea4eca77e89acbdc34f4fd7be2ff412ade38bd43c0033094b7af0b96c0c1780db511df4556461daf830

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
860B

MD5
19ea46fe78d10381edd69df72b0610d7

SHA1
d63868c6c8890a5bdb637acfbd748e1b66345bb5

SHA256
7ac428b0fc5931318d79d10cb5c4bcf415706353128e6cd2189314b97f51891c

SHA512
1564eff5005fd9a414942f2e870a095263818da270481a884875f2a72135e9ec2bbd4808798fcd8cba09ad92943c27e74a744183ae6e5512945c42b228a71926

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
524B

MD5
d9a19b53fdb109f699cdedaf38910285

SHA1
cd242054189c9a76da405d3c9ad3507f27fa79b7

SHA256
a80af60c0383ca3cb1f192e8117b94d59ab2e54dc062f056f146c42d6929a28b

SHA512
9b866cf7d480d2d13ef1e3b95d04d2e46dcbf9e83fb22e7ecb8228aaaded183b32940363123fead4ede8ba042a5439cbc80fbc83a89fed633c0bfb0f7fa8b2e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
860B

MD5
cf1502e58bcd27dc3c41632022c49afe

SHA1
4aacb9d8f8f3d382000382788e2b41c29c18fd65

SHA256
671b0b547e4a56b46057592c1b44d9e5625f7302032a740426ddf522e520f839

SHA512
d6f4203040182aac1f490ab5ca85881d09fdab0d7bfe71a3c1a844a34057d290788d5b512dc171606c2a3f6fa512683a1a2f576b22db0d4638eb2f093e28d046

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
03a5837d7551d59a52f26a4d90b6f0bb

SHA1
a12c292452a57f1c12ae7498134e19bda8f5323b

SHA256
743fe698d2e24fefe263b1c2f22fa314c57799219d4debdf1cd97f90b55b5bf4

SHA512
802af741d13fa2a22ad49df8cfdcad58223f07ccbbee1e8abcc0b9e7ecb59cc922db0d5d799ddd622d3b7dea3bc53c9d901a75969c06c6673af3491824cd3266

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
dce4b80f36d1484ac4171176da16ad3a

SHA1
7a50b5703d566d0a36b1354eaa972c119110b28e

SHA256
e8b1a2829feb2f870e8aed3f9685da7e44e58fbf56245e133cda2f2fdcc33819

SHA512
cb3ce019bde77d57106c20f42e87630455116d53fddab30eda0140d126f7c05053e261df8f8a045a77b418111fe5e0a40e6dbba5c26125fe06778096b3097301

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
9ed203f6d205ed04dde88d2341cf3ae5

SHA1
bc4b693bd274d1d8d8a72ce9010e8226f945c692

SHA256
707afabeebcbdc0233fa86e2063d8e98245a0805ba7fe406418a7f91143db3ce

SHA512
8c2c72c516d76fda8b5852d21a8a5e03b7ffea066ebe13e44fb6e23127fcf3b73927331bf06c350965eadfc663fe211bff24c9846cae40e2c59d9c9444f224ca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
73e752fecb7020cfd6c579cc47f88f86

SHA1
6db16fefe205e8d7c5591b93c5f6d3e89b4c883a

SHA256
91fd69be5d3ec77f8e801c14912574ede91c11e2e9b68e36c7c6f849be4eb0c2

SHA512
bbde09c682f9b1a1d9f9a0d9cafe7c33931a01f2fc6b78dd364829e6f1d63f221b677318d852e6511be845260293aff6bd4497722eeb5e63e8583624c0d4d286

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fa41f1923a602ec72e5e70682732665d

SHA1
aa0e2b2360435564a203d7ac31906858e6fcc192

SHA256
6250907aaa00c99f603654f8a5ff5e3e43f21d6799d041b5fe1dbd1062c23969

SHA512
c712dc0d88a118adbde1d82e3bb33718e6a2a48b7029aee4101995706ebcb7835613faa6aee9a394a94fdd48b3c4a8e73aa6415b2a67c31e6911dd0be34e56b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
010b5f8c1ca7652c617938a646f2c01f

SHA1
27fabda89f35fff14c0a32dd713448b3c2db15c2

SHA256
98954fdf7fc2b8db09ec2c41c757ba074628ccf4c90152f8f6309f09f0f9d040

SHA512
64951891d08642f1ccfaeb357993d41e4e4d2f3f6eb878f3072a7fcc82d7366ddf9ea7ee6b88e337490d1fdeb7981e06de3850dbf4342b5e4f5e1def4153ed0c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
db610a2e381bca6b1bc3d4046472668f

SHA1
05393b52797725fae402d4f0dd12d7346ed604d9

SHA256
544abf22d4803c6353b1ddb946d1e5c7a54fd893d98344770c2da5946a0d8410

SHA512
1888a759b894de8eed08139165600d1488abeb8b790ab2df97454fdbeafd03d956702032541dcdf53062b0cecf6239656999c663d1f6ba89245d560a9bf9aa63

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
69c13c428d656ac795b307b86789e9f9

SHA1
a52d67576c4624df7105af06ec3b7a17cc29a889

SHA256
e64099791ffc6e02f18abbba13b04e160a5bd07da4db10c81bc82a9459def8de

SHA512
ba324e970e246a20482e68628f00f15e4527b6dd691fcd1595077b83bc3dbf3a91698caec7dc68b8866094f85b21bd3142c8f8cd4a8d776ff87380962443b50c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2a3bfb87baef39e77892173147df986e

SHA1
b8f589ddf66642119b37744cfc3b38df804c6071

SHA256
1cec992f2b2400f2336be773dd99824143964956958e4ab373be30c014bddba4

SHA512
55d7a9e76f5353080fd1a9456a4e4760b3b5a6b1b44ed06876ca4e7fd9e040c7d1c4d6aa9483bc22f3676a0f47156ae38943aec5a5110954bae19ed4d9220015

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
92KB

MD5
3a89f0ec44d529f6488503f1d582a50a

SHA1
726120fa2a76eb0e46a8675b154a35500fddd3ff

SHA256
9ba2a072bc00cd666ef7742a44f84103a6ae8a85a6f711415108cb3feab0390d

SHA512
6788c5d944e3f97f7d8f7ab0d4efe48ddcd37d67159000b9db419f26c3deec93e828dd1e26db96ba8a07cdd7d476fb4d66e098504b893eea7b2ab582d99c0bbf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
92KB

MD5
3d59b1e6227b01d75b6d76d965c690a7

SHA1
67ee25b3f8ff6dbdb61c2c38b5c87afaeea5b386

SHA256
4a373764af9d242b8a35290b9c0b371ee3861889358997168c0d9221e1cc9cf9

SHA512
40d9c6842a2a3c1da132e020aaba6bcd94495113b540fa733a76467b8837980f546186e83beed26a0f7d4821a4e70ecb4340f3254aeded00d639dbabd88bc3c1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
92KB

MD5
e80166fd3b775d2730113de3046b4e98

SHA1
98c9b879e73b9c79c19af8175e744bd52d660de5

SHA256
4490f4d473eddca5b82acfbca4132cfe30264059c865ec1a858302f582efbf7b

SHA512
13cb3e999cf6e0e644a39aa843fbbf12711710c396a992a52178e28b5481b0deb266a50f5b7131eb9d442dc1eb9a5858a7eac36e1dfc565c1d47c6fa273801be

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit