c3fa59901d56ce8a95a303b22fd119cb94abf4f43c4f6d60a81fd78b7d00fa65

Resubmissions

09-08-2024 10:27

240809-mhf41stbph 4

09-08-2024 10:24

240809-mfmtsazaql 4

Analysis

max time kernel
126s
max time network
150s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
09-08-2024 10:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CosmicDriftLauncher.rar
Size

36B
MD5

a1ca4bebcd03fafbe2b06a46a694e29a
SHA1

ffc88125007c23ff6711147a12f9bba9c3d197ed
SHA256

c3fa59901d56ce8a95a303b22fd119cb94abf4f43c4f6d60a81fd78b7d00fa65
SHA512

6fe1730bf2a6bba058c5e1ef309a69079a6acca45c0dbca4e7d79c877257ac08e460af741459d1e335197cf4de209f2a2997816f2a2a3868b2c8d086ef789b0e

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000_Classes\Local Settings	rundll32.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2640	chrome.exe
2640	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1812	rundll32.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: 33	3068	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3068	AUDIODG.EXE
Token: 33	3068	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3068	AUDIODG.EXE
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe
Token: SeShutdownPrivilege	2640	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe
2640	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 828 wrote to memory of 1812	828	cmd.exe	30
PID 828 wrote to memory of 1812	828	cmd.exe	30
PID 828 wrote to memory of 1812	828	cmd.exe	30
PID 2640 wrote to memory of 2672	2640	chrome.exe	35
PID 2640 wrote to memory of 2672	2640	chrome.exe	35
PID 2640 wrote to memory of 2672	2640	chrome.exe	35
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 3016	2640	chrome.exe	37
PID 2640 wrote to memory of 2848	2640	chrome.exe	38
PID 2640 wrote to memory of 2848	2640	chrome.exe	38
PID 2640 wrote to memory of 2848	2640	chrome.exe	38
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39
PID 2640 wrote to memory of 2696	2640	chrome.exe	39

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\CosmicDriftLauncher.rar
1⤵
- Suspicious use of WriteProcessMemory
PID:828
- C:\Windows\system32\rundll32.exe
  "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\CosmicDriftLauncher.rar
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  PID:1812

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:2752

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4e8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3068

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6ee9758,0x7fef6ee9768,0x7fef6ee9778
  2⤵
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1148 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:2
  2⤵
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1544 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1568 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:8
  2⤵
  PID:2696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2116 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2124 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:1
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1144 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:2
  2⤵
  PID:1000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1500 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3696 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:8
  2⤵
  PID:996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3776 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:1
  2⤵
  PID:2164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=1624 --field-trial-handle=1332,i,8458167327185121407,6402113929809274475,131072 /prefetch:1
  2⤵
  PID:548

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1012

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

Filesize
210KB

MD5
48d2860dd3168b6f06a4f27c6791bcaa

SHA1
f5f803efed91cd45a36c3d6acdffaaf0e863bf8c

SHA256
04d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77

SHA512
172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002

Filesize
24KB

MD5
c594a826934b9505d591d0f7a7df80b7

SHA1
c04b8637e686f71f3fc46a29a86346ba9b04ae18

SHA256
e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610

SHA512
04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a0c43b31dfb24280_0

Filesize
280B

MD5
b4762bcb8ea0cb212bfe1ec39892d58d

SHA1
11335bc4aa468ff745a33a059fbdda820d607bfb

SHA256
a51a2366846b7f0b3d4a99d0b7afea1e4dad21f39b603fcfa014eb73d124b8ab

SHA512
e6d8daefdb64114476066c9e3b61e5fc315c8ee1b8aaccc89450a8a169752a84698f02edfd4b5e519c73defe0cadf2b1f9af769cc45219d995aad6a3ce092f4e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
5c51843eb5d7b1584a2287d91c4aa4c0

SHA1
809327478f74391bd6932aa7ce3a88ebdd1c0baf

SHA256
17778f1101aef5fcf86a1aed234fa1c44186708e8c9012a3527d776cf24d4dd5

SHA512
bbc3953731bd5badc529e63a037d0c93eb664859b0f11ea7f5258f1415bdf9207305110f67a115a5452ae6e022ec18f2d01b4b79162a801701dc46ebb54e8ee6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
049907d47d9d6159cde7992e7b40205c

SHA1
806c10cec51436d83e9dd33bc8483bb4f73cae4c

SHA256
a008fd4912f00cba6dc9454e16b80912a04256e219a65a98ef47b38af0c94ee8

SHA512
44189bc2f1cbc43ba5f33b9c6fb0bc1b38a803fd6ec8a1a383de036717f6f1300e706086b51d5734274602472bd19f5f0572dc0967e44a6bb4880211b750a7b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
363B

MD5
72ae62f2332757c2f51f52d95756ed7d

SHA1
bc55df21d6be68ea473c163f2b47f6c19d613ea1

SHA256
1460ebc8a5e0ce4289faad452d4ee3eaa33025c85c583e3fda70d50b9aff5224

SHA512
abcd42899fe6a8e10f280eadb3f73cbc9003feae33940b6d24990cc35dd1aed81363b027a09a6e11d46b25fbf7b40f7bd97b8821b9eaa2b727e7ff5e8efc9963

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
7799e189336a19ff72c7019cee1adff9

SHA1
a3052728a0722e4592781ce823eed81a6418df6b

SHA256
7a1af3dd33b707126e367c236da04b89fc3c0a7c23b894aaf070cfc052732f79

SHA512
981a9c2d935c47b1ecfe89e9c0307dc9d5a16972fcc9e696d89de836f91f41b35596c5c4410f8e268b6a00eb506157150dccc5af7ebaa9add8ad0f786f2988ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
39bc03016fc48b58bf7be861087c5812

SHA1
35d184b3c1af96c0d22a5904cfd476c82c232ca7

SHA256
cf9bf79743ccaf884047a335c14a33b0ba6b2987c9626a915f438a85bd5b9af9

SHA512
091559b2ec79abd1bda175023751dae9b431566d75f65ddc461ed21a3311af83b505b892b18bc2baa418c09b12478f76125f54d16e8eedc79ea1bb5664e16a48

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\CURRENT

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit