70e2816adf9a2b2ebed12e9a4898a98d8de14fb747b58f6004a99af96d10bc58

Analysis

max time kernel
149s
max time network
145s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
21/11/2024, 06:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

FluxTeam.exe
Size

312KB
MD5

0a091a4bf71a4a29addc1fd1d8fdc8da
SHA1

24dc61f515e5a2bf2dc3a2556aafb9cb95dcc109
SHA256

70e2816adf9a2b2ebed12e9a4898a98d8de14fb747b58f6004a99af96d10bc58
SHA512

061abe6791472f35e70919dd39b881666eb3b03b2c7f33eae3a83eaf17de4e42cef8ee6fbdb75986cc426f056564867c19d371948525e8fb1d611558e409403d
SSDEEP

3072:4hK4Uay3XrQ8habqgp9pC9Z6p5uf3C6k0xuZ04ntfxrhBu4Rpw9kQ/KpppRPtx:4hK4XycqgpfCup5sVxuZ04ThA8Pv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe
Token: SeShutdownPrivilege	2876	chrome.exe

Suspicious use of FindShellTrayWindow 50 IoCs

pid	Process
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe
2876	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2876 wrote to memory of 2892	2876	chrome.exe	31
PID 2876 wrote to memory of 2892	2876	chrome.exe	31
PID 2876 wrote to memory of 2892	2876	chrome.exe	31
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2700	2876	chrome.exe	33
PID 2876 wrote to memory of 2744	2876	chrome.exe	34
PID 2876 wrote to memory of 2744	2876	chrome.exe	34
PID 2876 wrote to memory of 2744	2876	chrome.exe	34
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35
PID 2876 wrote to memory of 2096	2876	chrome.exe	35

C:\Users\Admin\AppData\Local\Temp\FluxTeam.exe
"C:\Users\Admin\AppData\Local\Temp\FluxTeam.exe"
1⤵
PID:2776

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fefb8e9758,0x7fefb8e9768,0x7fefb8e9778
  2⤵
  PID:2892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1096 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:2
  2⤵
  PID:2700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1488 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1628 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2328 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:1
  2⤵
  PID:1652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2336 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1592 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:2
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3352 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4012 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=2804 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=2328 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:1
  2⤵
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2652 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:8
  2⤵
  PID:1560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=284 --field-trial-handle=1312,i,1660897600839006735,5336127071730642802,131072 /prefetch:1
  2⤵
  PID:2968

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2928

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

Filesize
215KB

MD5
e579aca9a74ae76669750d8879e16bf3

SHA1
0b8f462b46ec2b2dbaa728bea79d611411bae752

SHA256
6e51c7866705bf0098febfaf05cf4652f96e69ac806c837bfb1199b6e21e6aaf

SHA512
df22f1dff74631bc14433499d1f61609de71e425410067fd08ec193d100b70d98672228906081c309a06bcba03c097ace885240a3ce71e0da4fdb8a022fc9640

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

Filesize
41KB

MD5
503766d5e5838b4fcadf8c3f72e43605

SHA1
6c8b2fa17150d77929b7dc183d8363f12ff81f59

SHA256
c53b8a39416067f4d70c21be02ca9c84724b1c525d34e7910482b64d8e301cf9

SHA512
5ead599ae1410a5c0e09ee73d0fdf8e8a75864ab6ce12f0777b2938fd54df62993767249f5121af97aa629d8f7c5eae182214b6f67117476e1e2b9a72f34e0b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
166ce0e96072558af26d5a41bf931469

SHA1
6bb0b75ee6138bad584052e44c7f0af0017a97b7

SHA256
59062b558dbe4a9181cdeb20e2c39bccb51388d09edfb5b8fa3d9ea48c59acdf

SHA512
e7e9ecb859a13347dd37bc271ab606ef0120d93c7344aa2beed37c90a8b9be5467cc181f82e84ae7a2a126fdd4e96b467b155611869f8cffede0e73d0cd5c458

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
363B

MD5
5f147079aa1f3321f554c348dd4bbd30

SHA1
a02c598269de83a999bdae62fd6e8e108176ebb6

SHA256
dba956c1f15f246536f6d837a2326f9e5d5e7bea6aa3fa9c59345212c6678277

SHA512
90e7ff95ef26d9806b44f7cd65bf56188a8f817d1ff829d76debc6d68379fac61cd957a951bab8c906d2593435389119ff303ffd25f6046c6d6cf6a549c884f4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
363B

MD5
39d248a106e4e5c2a07f9510a4a22d66

SHA1
ddd691cf9303d82d9cb06c64b42e6739ab7f1527

SHA256
f9451f999ef91afb440f83b4fac3076953744de8035831b3b91256a05494eef1

SHA512
7781c796bde37b457ba8181bc1c7b6f9c9ed70f4b6a1260544558aa4dfef2d85cc493c91aae84d8da927327ff866f3f1dd8288702b7d41971e1b4e1a4101d89c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
25334762387b27f4e454f92f6e2f28cd

SHA1
6391fccdcdee738aa5e7d3c7c01faf6b70a32b41

SHA256
654150e98fc4b6c6514b0b4ad4c60f92813c1e34649046cc5a0b50e1acfa006b

SHA512
7188a6355856d06bbb6ec9d0a156b44c986a58c07bbc785c67660655c485de1dc6bb521e4fe7075878488795eb3a52f9cdc84bee299a27e8406f781a17e4fdf6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
3f58bf8de37cb5f60f559c403eb2441c

SHA1
87fc6ed1568ef2deb7d0f4133a297caabeac367b

SHA256
711e6977432d0d5ab0e5059e0a72da4cb52c1d8d2216267828eef99281d1c756

SHA512
2a3f934aef07e9d4e8736629cabc0b60fe6ea2e71e2be0f88f528694139445160267eebd14ce963d322b811104a05ba79c3990d8c7fe12131252bbe0d89c6621

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
beb93798d08a5cdd3d6eda38aa5c735e

SHA1
eb7fac9409354b685d66af827ee5563a258d0f80

SHA256
8cfcbc6a4532d0cc0436c0966c58dabff6ac2edecc4b856e387afe326d2b9eb5

SHA512
9d6e38c0090a31819f3aa23c3787fb06c2b0f3b5fb486d0a96ff6fa14ddecd9baffac8f2b5ec422471b93c126f7b8e4414ea00fa0ad3a0337f3a0630ae06e438

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
7a5935142c3cace0a42ceaa23c1dcf1d

SHA1
9ba33e187c6c75fdca84306bddc3504a27e3294d

SHA256
75ac7fa430a7bbf5c05e23f8ac307c5c8668cc423c9bad2d43db6e7fc1d7f6ae

SHA512
4be0a0c51eccdd2e2b3b1f40e587982ebcbc447c83d6201845f714926186a7fc631eb435f6cc00416b29c874b147deab37b1bda49321157868e6a6d74aeadbd3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
354KB

MD5
ee68bcc9d1e6e3f99469b67805d6170e

SHA1
990f69ff59edbe067ffa9dbc624205f35d812272

SHA256
342ea07ba6ada5cba50b22e464a7edada8f5bf019114e6d1bfe3a7fe19e103e0

SHA512
0684b01a080875df3496f634e3ff9ec8ff2d7a683d8d4d52c456cc5ee8e15090adee76de11bc918e8f9273cc1d4573e55d0f7c00cfa94cd179df459907bdf02b

Download Submit