db532a5b479b84916202a7fcfa715f15c07f047cfe83c109e664bc74b14c25d5

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240730-en
resource tags

arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
submitted
01-08-2024 20:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Aune AR 5000 2.txt
Size

1KB
MD5

fa14c151bed0840c1406f8b21af0b390
SHA1

b88a40ffb645c240e75dccb4ad77e1502999fcaa
SHA256

db532a5b479b84916202a7fcfa715f15c07f047cfe83c109e664bc74b14c25d5
SHA512

2e42d329018611ec050a0390099625bc8411956c4050ddd48c30326d8e9656652fb7d59b62da04d81cff1cb154754bec01d2c2627198294c875f89a0cfc6c80a

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133670194472319828"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4904	chrome.exe
4904	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4904 wrote to memory of 3240	4904	chrome.exe	92
PID 4904 wrote to memory of 3240	4904	chrome.exe	92
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 2844	4904	chrome.exe	93
PID 4904 wrote to memory of 448	4904	chrome.exe	94
PID 4904 wrote to memory of 448	4904	chrome.exe	94
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95
PID 4904 wrote to memory of 1988	4904	chrome.exe	95

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\Aune AR 5000 2.txt"
1⤵
PID:4412

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffabe9ccc40,0x7ffabe9ccc4c,0x7ffabe9ccc58
  2⤵
  PID:3240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1928,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:2844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2112,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2292,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=2268 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3204,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3304,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3768,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:2528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4876,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4912,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4812,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3464,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3396,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3312,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4740,i,12547481270724576581,15579136773051725761,262144 --variations-seed-version=20240729-180130.470000 --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:5012

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
1⤵
PID:1200

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2792

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
fe560c43a3c80d2ebd124ee572363649

SHA1
25f9b92198b52b5cd44ff70da2afeea619e9f18a

SHA256
5d5344d72e7feecf5d7c7764d5c9d0336a44065bc0dc6577869393493f48bb45

SHA512
87cbe86886497548860f9281e3166d9c96e50655e51061459ca3edb9630945f918a8747a94f58e9a73513a46b1bc0462e5854f28adc1d357e04365217290269a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
37588ac0ca840209f6933c857d301f16

SHA1
39b30af53ec17573dcf91ed615d93f0371e77dc8

SHA256
8138865ba0278be85b874c78728184e5fca226ab58f515c9b6f11a51a13d2be4

SHA512
70cdbe351018ea7859b1e7895dbbeb393aefa0e2189b879143f3fa57df3c7a66c1a0a7eff714eaa06a36adfca94cf4565e20008c9560e2402adbab7d34cb6eee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
858B

MD5
2c9da4fa4a9bbf70856f2f55e0c51bfa

SHA1
7ccac49be7881863aaeb6879979205a105791a90

SHA256
b0a7063212597dbec3a174a58281b6ae848e32f6624f1509a156434f23f0ca59

SHA512
7654aa28c5c3c1d1fdf49888fe40fcbc2a74b4e35a24aa7adb514b6fb2bbfed8d5aab0911b3ff95390c7a24c6740e99594cfe6fa1b2a672e88504587f6e9aca7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
fecd674f5bc2aaf1b545bb544eee43cf

SHA1
6b647c01cd925581bea5a314fc0f5a7c6644b000

SHA256
0bd0309f5a28cce452b6841c6cb0218eb3c1baae3376f240c82adb579ed3ca0a

SHA512
9b2cad271b43de0d7f5e5832455fcaa0796c8577bfe431cf04f98e5c8b4123ae81e96d8bbaf28dcec9ab186d3c6d26332c3f3d8f08cff9571149f6646ae2852e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
858B

MD5
94e835d18d6bac0c63334ee7983c8d01

SHA1
14afcf63c4355481939d0c491c9aa7ec77777a07

SHA256
e528e6599da4ea496dc52090137d00c631b11170ba20f5bdbf7016c8976b4c65

SHA512
f9d7cbeb2e283af80f61220b60b48546636945d6081d9f7350a089815663f6ebed69dcec767bde0723ccf5c414d292f790f62f8e49f9c51a32531c72177668b0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
7c3b15e15cfd41561d87dacdb3ef3540

SHA1
b1a6fa0eeac08c4e8e8324874b46f74ccd83b4b9

SHA256
6703e8e55755b11faa21eb720a726d1f685a82de934d3797f135be8195f9b78e

SHA512
24f957915ffb75d3609ed9c9c0934117d52f075d1d00d8383e8c9d1bd6c03550e9da0a86f42cce09e3b0068319902a2610bfa0b99f49d76419b09a1f2f9c8b3a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
81c93da123c40c7f49c4c8cbf25bda28

SHA1
cc18f3cc0f8df84c495ecc520eb2d59bdb7e2d3f

SHA256
2a406739508a12fe43a42ef632356bf8dd10d6c78d590570f994adcb03e3ed74

SHA512
a551e12d901e93e61eeaec5ac130cde0bada2d276729d210cbfdb1141104dbe61a0db448e20beaf5273156cf1ff4dfb77562001b680f92400f808838e133798a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
4045ec17e0731d7582e2522c6608447f

SHA1
dd6cc4acdf752ce603fff66212206438a3378300

SHA256
3a6123c534a12550222cd7bfc033e9c9c05e68fbc8d291516b67a51d7e713719

SHA512
f7408c31d370ddeec3989e2ed01dffb6fea2f4e360c784cbc92b13c12ac5a7ae53df3d0d51759b1c3aa1f49746589df161b545f12d112bd78cfcf801527d36e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
6af376475eb310661ec25ab6c75f0383

SHA1
0cc909f5e05219bb24ee534bbaf5f74f313b463e

SHA256
41dc4cb04140507b32eace6314c78394acba48f20c05b8109238fc62a7791403

SHA512
83a1786f1e625e70f06149c20ae2bf92bc2c9f3b8be7405b0ee3e177ffef486c1fbc771fbddb4871d61d0d699d3450141e89af9e83e136bd0f150e58c4debec5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b7416218263feea4245f2069d5e78199

SHA1
3a7c0761dfbc2693646554498cca39563d9ecd38

SHA256
93c430c2e3452bd657a0a6e52aac00f96de678574612fa0857a838f6a81ce66d

SHA512
3ff8c47af7176935f274a1b454ef81d431d2d112299cb9a4d5db0ef1257ba9c077c8c28c2b1d06b850ab71366b6e34da6f8ddbe0aa231c456eb7182c5a9984fd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
4974cca027b2c5c5e0097170e3405a9c

SHA1
49186c06e69245ac2966cbcac47afbe3b65e3574

SHA256
5d0bec578b6911e9a91e79803d97e40393c9c6cb99c1f825798304560d23a348

SHA512
74e9dd9074e2c73abb825ae43fbe42eed2f4381654d1ded425f755ea705e65a831c88d48a6a69730097e14bb007fb6a2d55de3e38895de64b17040449e7d5b81

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
a1d6e461e3dd762ce7adca76ac5354b1

SHA1
87f1662fcf96bb71b0c07833f2ef3697381092d8

SHA256
cba980d64165d9c457eddaaa6865137efb91ff27832e01fdd8f84f205316db92

SHA512
62fc2e439b488b71adbcc125bf50d69fc666badda7f9ce88227cc0e03665ff9cd243d1338ddf93f35394b84bb2d13c74d84fe7b1e991b2bf5f85121e6c17a37a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
9913bcc407eaa2f2e37bbccba1ddab6c

SHA1
f88739d511844c0252ece9b1586c312f5a0e7b97

SHA256
864e53b277f460f0b825bcd012a40ba19e2d138cf15a40e2c25b75b84ec2a921

SHA512
2f16fa9afa73ad00d631285b5a582cc4d023fb6378ac2ba3f4b82727aa4dec6785d165740063f2941726aab9089a08893610612ae307600645f746cccd979d30

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
195KB

MD5
e9e1ef7dd40b259b5b07246f6ad0854e

SHA1
244c023937c58dad2a6287ca6e797b2efb76a81f

SHA256
ff1b6d213e1e0461cd61fccdbc159eff2ecb669f1b074e987f7f0dbdfcb4c927

SHA512
924979b9d76ef46fa3f3d3db2d805fa3840106dd2539f61775df8ecb3b0ec6407c4d4110f2d117da2967f0bfcc082390e471a73f72a3a4633ce73c15137a21fc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
ae457356c233b5b75ad2b71cab3c7bde

SHA1
511200653c612ab64b8df13bf8a92b7a1f4867d0

SHA256
befdbe49d3f1f149c622f7a98286ef7300c2ef75c637b71d724a3c3e5438dece

SHA512
149f1a2f8f7ab5bd13fa5cbd046b94965eae9526bc8ab88332038e45428134b90deadfc7db35371579860c5d65f597f720e4e955028647e3b87677f53161e1a9

Download Submit