hxxps://is[.]gd/HDwxOD

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
02-01-2025 18:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://is.gd/HDwxOD

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133803163769913651"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4588	chrome.exe
4588	chrome.exe
2092	chrome.exe
2092	chrome.exe
2092	chrome.exe
2092	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe

Suspicious use of FindShellTrayWindow 48 IoCs

pid	Process
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4588 wrote to memory of 1500	4588	chrome.exe	77
PID 4588 wrote to memory of 1500	4588	chrome.exe	77
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 4152	4588	chrome.exe	78
PID 4588 wrote to memory of 3964	4588	chrome.exe	79
PID 4588 wrote to memory of 3964	4588	chrome.exe	79
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80
PID 4588 wrote to memory of 2516	4588	chrome.exe	80

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://is.gd/HDwxOD
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8feaacc40,0x7ff8feaacc4c,0x7ff8feaacc58
  2⤵
  PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1744,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1740 /prefetch:2
  2⤵
  PID:4152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2064,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2088 /prefetch:3
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2128,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2364 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3064,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3112 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3080,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3804,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3272,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4900,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4280,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=5100,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3668,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4440,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4792,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5272,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4952,i,11553084420624795923,17023627745027109763,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:4968

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:4544

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2464

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Filesize
64KB

MD5
b5ad5caaaee00cb8cf445427975ae66c

SHA1
dcde6527290a326e048f9c3a85280d3fa71e1e22

SHA256
b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

SHA512
92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Filesize
4B

MD5
f49655f856acb8884cc0ace29216f511

SHA1
cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

SHA256
7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

SHA512
599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Filesize
1008B

MD5
d222b77a61527f2c177b0869e7babc24

SHA1
3f23acb984307a4aeba41ebbb70439c97ad1f268

SHA256
80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

SHA512
d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
be10a3ccb1079ce2e5a8f346113909e7

SHA1
ee0cde22ac7a3ae2cd6f1eedaf000dceac85817a

SHA256
a78ac60471b03a06822437b7fc48d04f7eb9269fe6ca3e3d79c2e1551e168317

SHA512
13cab4ab2eb2ff3c838cf5a30d541990fc4ce6eb7ef4ecaac1f0369f19353baf026c1f8062070b3a3c6b74b66e517a144cf89eb2c996443572f92fa7da7fd5a1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
12eea8a0f02f446b9501f7dfe62abf74

SHA1
f4b4d854158244839e512b1b4232476aecf423f8

SHA256
6a299f424a4b133313e39b555142aa1be83b085e5aa873bb05aeb0a8104b72fe

SHA512
17504b43c5439bf22bbdbaff94c2612f60217e462b10ae89952e52008a1ea324aa86026f1598da2fc6da969998cbb488ed424a41a62ba70630399fb2654407ca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
30c5feac1553de909ac4bc6507e84125

SHA1
6c706e7a88d0e82d3e2b97a3bb5af2582e249d04

SHA256
037506cbd20da69638929e5e53db0b7cc4291f93657e03b901a01cc52535696f

SHA512
08f80b6582a9ae9bc3cdad0b9e297789ccfb37b3bdcb3ae70880fb163d2068ea136d3236984823eb074a2c22a91b2183be1d7cf1790a6479c6dea14bf6e78880

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
0182ea63ac6d5840d20480817df3ac7d

SHA1
d52b0750780905068af37be8ddb3309beac2c47e

SHA256
eba01caa666e25eded40a9a843a7b67d5f3777f0f8ddd7141271294133cc1fed

SHA512
05720baeacd6fc92dd3559dc9c9627f178418c28476021839b9988085836b651dae7a37e0024b43d8c39a3957f9a07d971657851b4ad1166d997a74c45b2bd2a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
aba516af9a5273c21db1d3c8e912289d

SHA1
81c564cf8cd8320a6c17524be76919e53703f72e

SHA256
1b223d1f80918b927fbe58f12a169d63bc4633d8e55b2e7c7fc430715f437f81

SHA512
6ce897f2e3f1ff5d54e08e45a3929df3ff3d0af36a1deafee5bbd437b583c9c7032f970f9dbace8fe721e815b3555b79ff4abb25ea3b3850613dc0b3f7bfcbc5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
ffa1d5dcbff0698cc086ee801929aa76

SHA1
ca8d796cccccccd10edb8984da67b0009aa2d5fd

SHA256
b1cf687523669f26d90ac187b8bf9bf56f49020d09532aef3c1b1b73a93aaeec

SHA512
06ed2aefd190b6877dda824c5046778dc3aa6fb0761ab92c3a0fb91e79611771d73a24e694eec516138653f09c52ddaca6ab2d2e001dc15b796c54312f9e9878

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
2ab758d86122c31b0bb32df1b4244c4b

SHA1
d42b51ac23cbcf3ee5e6e240fb0bb2da408ada70

SHA256
107bdfa8f493e7e13b786cf204bcbc581f8645fcf5405ed819dfb0c4a9971381

SHA512
98f46d3decb994278da023c481643ee220d8000549a69c5a6f4b829f4e2de31412d65bb9c1ad7790fc42f1f84ab053072a4afe0a836b137b2c6eeee3a413964a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
d621797bcdb4c99dad69d1d6260407fa

SHA1
053408d23e46e9f460c87250b43214dbd339fda9

SHA256
8ca49b47fd27a00467c010c3048cf46f1a7b8dbf126a2b403ddf6c9bded34926

SHA512
13a6abb325f4091b2062aeb0960d32857a223b42bedd3f8651166f3dd295c6dc67efe8ffb06872f13d313f197bb5739db3ebe54aa28cd5f390a6018100e344cf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
2006cc3a0d8bb911a32289cfd3f64fe3

SHA1
3185eaf6f13107d5916cdf5fd51187e89974721f

SHA256
a20e88f57f773b993ad34c37d9135d4035704f33afff6a4dc0914cd02a1579de

SHA512
99d9022f81ce2b875c6379ed97d53dfae3f742854dddcba9dc40abeba52fbd3ecac4c672b2317a45747421d6274321d425176f1168c7b7f37d5be611f2f3be83

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
69d0cfbae2336b3a1e47ff4d064df300

SHA1
1dedc1618f4b0e4069329599a0da45186cf3ad92

SHA256
164cd2e6668ec9fd56cde2d09a052d607c87faf70a18a57203e0aa543575ebfd

SHA512
7680cc129b966867a77e1fe162bfb57fa6f9a69674d516ab98deb4e49edfac551a2951ed9f8e469202058ac8a9df3da5ca754eb1af03445ba280410ccf59aedf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
96e204f41eb4550e577974c5d47a4323

SHA1
b2f2b358bc822f11cac4a6e17eeb6ea55216be3f

SHA256
228512ee1ebf96ae3d4ec688635f6482683cec99f3673f869988f09ffc366f05

SHA512
6ec26fed07cdea1c644720f8e749881317bef52b35d7d8c3d269e78e56566e9f57c05ed268013aba3e604e6d7a79542c60be7534b1105cbef8504be7a17aa0dc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
48b0e06dd6104f6c3c0a3d953284102e

SHA1
fc0a8d0ecbcf4628ad61a358cb8c925f16b91dd7

SHA256
da7e58975d9863d1f516c9dc144a43cd69fcdb89c2792e4d0ac82f525fa947df

SHA512
c987e755c67ffa64908c4a351dba3bac33c6f0f86a95267b6f63509158c60ae3ca82539f72973e00b3476d24ac34d906eaffe7bf89e0d13a9de7180bac9ecb9d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
377c8aca126f942660e1bb5eb652f6a2

SHA1
a44380f538b2c40ee38a6de68bbed8f7f295d513

SHA256
ae9c4433fe9e5b611b060282e7db3890e05535a2bc668433201dcd8517c2f500

SHA512
d60ab4c92f58503093a881f3ad2b9ac225861f5ff9b8a6e63adffe70097ae3bf67645d0ddf69b529232301146505722b068a894fa21ceec9f60794e9f9c9b91a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
465b12cb04ab1e5081a0423e2f65435c

SHA1
5797972920cd119e51ecebfb1fc0578589beb2eb

SHA256
733581c4c60279f77bcfcf4612f94dd79dd6332aa93a69e077e97cf4700f0106

SHA512
7ae549096c61727363a2e073279d98308d9d1a77a66e3f0b83de6caaa64d15ba8204491adf2c06206aba09e835828e957fae2493db1aa733219f02a092c3ed12

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
af97139a11e9a43fa08a80089c1a33e5

SHA1
476ba0afa6cda3b8acc589c1cc158ba31cc7ea05

SHA256
db7b70745b4b3be06d9118ad4da8f1d85ebc6b8d689a1231ef8935142bd05b21

SHA512
96ac8b2fe93f408b56946964be6f29353bfa71d1f388e1514bf72e587e661891e4befc18c6f062baccbcf086c389f70b712f992330618114439baa3c09373ce4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
53805988c7696ac2c5ea884aac118089

SHA1
e2cebb85a4715a85d0dfb09dcbc36d4cbe22ae4d

SHA256
25bed68e221ce62a84db3436b954d6fcdc0cdfe5015a9306c14f75b9fe34a727

SHA512
d4b7b42879311f0b24e771dd35e8abdc61d95c88a7b8428c29658df6305ef15190e8cb1a1e9dcc41bb2c2092517639be5680f9e037321a9e0b3bf73d065872fe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fe49c12d4e67d5616d73a598b4525330

SHA1
097f4c227a2ecead3f34876224f0362bf1568ead

SHA256
973bfcc6cde66fe50b9788280f8792d3a2453fe074d54e49d1eea6971724df79

SHA512
d19fcced11da47108f7116a7dc277d76c8a5684d00cfc70f9053f116bfb9c5ba4988ddf2bd6cc26268738bcb3a34bebfadfd778625fc6b682b51687ec7bbc247

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ed14143762df2aa0b145e34492c7c9e9

SHA1
7cdb242981b4c591b6eef2fe55f02380efa72ba6

SHA256
786bf88362262cca2c73019ede50099109f9e01c80bbf6cff0f2657e79bd5ce0

SHA512
10f6a0f76aafd1c097b1fadd220f92680b9c037571d42d628a7c655256da8e9a68cf67b7c2d45afad93b0519e29398915fa663293db2541ce0428e9ebafe0ab5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
732a4cae00eb05df86c90c0c47a9d1f1

SHA1
c064c77276e900ffadcfbb962e4caaafb28a05b1

SHA256
5f292aef5f16564efc4e762bdb18adec674ec65c3251f9e478d9293a0a0636aa

SHA512
c1091913c636d07dfedd74462ce2f41d626e66ea419fc8a16faa03fee8d8c0cf310a6947f405aae4666c5817ee1507282d5ee7680c178b251e5ffb4cdce1cfbb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
228KB

MD5
3c694c5c17556e96b4706b03821a3a96

SHA1
e11ea18abb26df9d3e5ca24b73fefba2398bc1ee

SHA256
7092edcc75ed3788cebdf65c35e416da17b07d265815b3bb8d0a8f9c914dcfb6

SHA512
3acbce47f560100e439bd57098eb17049653912872de87e7e0da93d765da27e47f119a73b85851ae0942a20745b23335512813cfcfc9b82f65e9fe6a54d8dbde

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
228KB

MD5
b98d9f63447ab4b2e6d139aa57f5fb9f

SHA1
3f2e35be97d7a8e47cbeb9d69d6ed7d0787b99e4

SHA256
31ce086a2b58d8f9e7f9c7ccf9ac22e02741d8d37c3ec22479cbd58b5ab4a368

SHA512
56736b387aa4cd5436e5ed6fb7d84514d94871b0a7c4d6cdabda7edcd71713d7b85c0758b99a1528b61780b9a7c2b2516d2960fb5e0b9fb7cf78e3edc2b3751f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
228KB

MD5
b3782c33f8f3c56515c0421cb32efed6

SHA1
a9524a3979c140dc0ca5119457a9c5f59b4a1ba5

SHA256
6ab1df63563ad16cd48a37549c9f3da0b98fe7ef64a7deeeb6cf1e01c34c3686

SHA512
fa8442874e1cc151b285f65245d9e7ecd7c138f661a0f8e52944fd4186ffcb5b92289d9ae597b1983021acf55b516963373ac25ffaad129beec25648dc4ffd24

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
228KB

MD5
e5b9935593acbe1a903cd680f900d030

SHA1
5d8ccf57a0d40f9118fb1dcec5c9e64c9d205d8d

SHA256
d3150f1e4b5cb6ead04859fd9a66a6154d14d161999251fa3f06bfc60b03a727

SHA512
463432dc7c001236e8d4def4ed821e523effd90ea0350be02faac293905f884fe20f40d226e0027b7a828e83ec8cd22a46eac9ac2490f804cada46d5a56014ea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
228KB

MD5
0b3cd3d1a9a1dfa504c573800c2c6edb

SHA1
eaf600d04f6bcd691d64699a4ee6100f08f4be57

SHA256
cbdbd56f7a9fdecec5cede8a094761f4d7a657f3201d1ce586ee0f9f3e4d9bfd

SHA512
12b8c658ccb909a696eb69a38c5ca8a040e4417250a9f42d39f238a513804d6daf850a4b3c0f5e52721a501fcef5e21f58e773fc2fea6209fa9e4701b8b4387f

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit