hxxp://Blocky[.]games

Analysis

max time kernel
1799s
max time network
1685s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2024 11:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://Blocky.games

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

Processes:

chrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133640476596291937"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

chrome.exechrome.exe

pid process

4100 chrome.exe
4100 chrome.exe
1444 chrome.exe
1444 chrome.exe
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

Processes:

chrome.exe

pid process

4100 chrome.exe
4100 chrome.exe
4100 chrome.exe
4100 chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe
Token: SeShutdownPrivilege	4100	chrome.exe
Token: SeCreatePagefilePrivilege	4100	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

Processes:

chrome.exe

pid	process
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

chrome.exe

pid	process
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe
4100	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 4100 wrote to memory of 4004	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4004	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 1484	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4364	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4364	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe
PID 4100 wrote to memory of 4696	4100	chrome.exe	chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Blocky.games
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4100

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa9499ab58,0x7ffa9499ab68,0x7ffa9499ab78
2⤵
PID:4004

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1628 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:2
2⤵
PID:1484

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:8
2⤵
PID:4364

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2088 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:8
2⤵
PID:4696

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2980 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:1
2⤵
PID:2704

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2988 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:1
2⤵
PID:2296

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4600 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:8
2⤵
PID:4024

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4468 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:8
2⤵
PID:4652

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4792 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:1
2⤵
PID:1608

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4228 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:1
2⤵
PID:5112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3908 --field-trial-handle=1900,i,14623072832291568802,12899851270455487621,131072 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1444

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:4960

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
192B

MD5
93889cd0d836616e413d4a951e4d40a7

SHA1
f50fe741f610c4c2953baffdf2c1b77a84e257b1

SHA256
adbccb7408ecd904daa6892cfc8b5062c8155d53cb18fe3dd1460a64a23362c2

SHA512
15e307d75108cfa400516aec0b8a3e5dcd68af87c5b99267cdfbb2534f97e6c8c5a07dd8be39b8516068a0ca31d4b997326136cc0dc3ce33eb0ea0caa6c571e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
2KB

MD5
024fb78342c7990605620750e91e680a

SHA1
7b3e2286e1140973f3fe05a4cc22bb2b434ca672

SHA256
cb459892fec0406183a2de8448a0c94fe31d4210f85074e92be9e7b9396b0dd7

SHA512
6531e0c1063fef4878c6ac9e0303850ae72a1f3d3899ae50edc456182b3d4dfdcb1109b82cc1dbbabf08bf0765f10999ebc2947796f255ef96e5f2996fd9275e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
2KB

MD5
29e66a87877c3f99abcf77b6049512a3

SHA1
c7db0c9d56b9120c807e0a9036c3404ae54dd089

SHA256
59c09ce26d5058cd9b90a25421d7efaa7ff643d3440f75543471d53f58f6890b

SHA512
16cf78ec99a2f421117c9049ebf05a54045788e035596114182616fe1a8290ce9b9cc393016b76f69534b77c8a73be9fa6cb27124eeb113706ae32548c3f4dc5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
2KB

MD5
bc210b4a4bcd0d8b6cf1d0281ddad58e

SHA1
d3c8f059a17e6f3b80b8cbc9d42e8b651d663013

SHA256
ec9b9b82180ebd6e427c0be66de99a04ea3f0abb223ceed62bd7801a9615f388

SHA512
327ee86b745f69bddb2dc54ed68ba8e03da13781371da5bd6a7ebd9a3d70eb7e89181131655062eccdd64e38b2f791cb8e5e8e0a4e9db40f752894d84ebc8583

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
1KB

MD5
defeed76857dbab920448d7feef2a115

SHA1
3b46d0c58dc266b174bab32c489159aa9ae397e0

SHA256
bb06c95be63783eb95758f53231c598e00c519e6960c2a2e3202ed1b30c52a9b

SHA512
dea2ddeffea0e06b6f07f93476ec4ff476b250809bee328664ab1a95fa87478fad20d71455ed150b25ba6c6204c3dcb0ffd9dc4c29e6ca3cd13cc0a2f97aef5c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
2KB

MD5
b18336e61ce0ca839b11de6fe9264112

SHA1
7d3e886414b6508847ddb2608306d793f93ae5a1

SHA256
3627849d6a1b6426409ff78c77fec782ff3b1a3e440cfe296afe4476087f3f74

SHA512
892947be810226a2087424b957ea02c9d479712e870d3ac79a406801c35bdcbfc250f5b90260c3565e09fc3f29ae96fb3c88d75bf4ca0557045911a456f3710c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
7KB

MD5
11dc67d67b4652b89f83177de615f81b

SHA1
73fcf19c365584c27a5502cab2de908ccf9699fb

SHA256
db2f4a2c1f7b0e0198ae42a43738fbad0e60910bbf5c42f097395413aa649f2f

SHA512
90a4f4953592bafca6aed25379d9e2127a353f2ee5bcdad59648e751ed9a08a38dfdc2fee89e33515518d3e184f36c502df8314483c21390b9b93bc91c3f41e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
129KB

MD5
33b3ab7c12b1394a9ec86cd86591a542

SHA1
a1c96a4afc0717efe983784a0a6a7c9109c32c7b

SHA256
72379aa8fb97ce5058e154b8f323887617021bd25af2e5231d994084e4bfbc43

SHA512
3b5d20bb1d0e0c78d44cd9d7e241c43805cc4beee7a8e4864ce8dcf14f47fe29adec39d1c2fef46364c4fb4ade0f0418993b102a64baaa8e1046571a5638af02

Download Submit
\??\pipe\crashpad_4100_VSNVJMGEFLGNRJWU
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit