hxxps://www[.]google[.]com/amp/s/cafeteo[.]com%2Fsantip%2Ftkpqwer%2Fnqsymmbz%2FaGFucy5ncnViZXJAY2xzLWJlcmhyaW5nLmNvbQ

Analysis

max time kernel
66s
max time network
69s
platform
windows10-2004_x64
resource
win10v2004-20230220-de
resource tags

arch:x64arch:x86image:win10v2004-20230220-delocale:de-deos:windows10-2004-x64systemwindows
submitted
01/06/2023, 06:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.google.com/amp/s/cafeteo.com%2Fsantip%2Ftkpqwer%2Fnqsymmbz%2FaGFucy5ncnViZXJAY2xzLWJlcmhyaW5nLmNvbQ

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133300828521123147"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
60	chrome.exe
60	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 60 wrote to memory of 1200	60	chrome.exe	76
PID 60 wrote to memory of 1200	60	chrome.exe	76
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 2132	60	chrome.exe	78
PID 60 wrote to memory of 4828	60	chrome.exe	79
PID 60 wrote to memory of 4828	60	chrome.exe	79
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80
PID 60 wrote to memory of 4880	60	chrome.exe	80

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://www.google.com/amp/s/cafeteo.com%2Fsantip%2Ftkpqwer%2Fnqsymmbz%2FaGFucy5ncnViZXJAY2xzLWJlcmhyaW5nLmNvbQ
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:60
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7ffb497f9758,0x7ffb497f9768,0x7ffb497f9778
  2⤵
  PID:1200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1772 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:2
  2⤵
  PID:2132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2216 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3136 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3148 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4848 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3644 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4948 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3648 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3328 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=1684 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5272 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4920 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5252 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4624 --field-trial-handle=1812,i,17003662135656086144,13391084954669080671,131072 /prefetch:1
  2⤵
  PID:3968

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:5076

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
62KB

MD5
b5fcc55cffd66f38d548e8b63206c5e6

SHA1
79db08ababfa33a4f644fa8fe337195b5aba44c7

SHA256
7730df1165195dd5bb6b40d6e519b4ce07aceb03601a77bca6535d31698d4ca1

SHA512
aaa17175e90dbca04f0fa753084731313e70119fef7d408b41ff4170116ab24eaee0bd05dca2cc43464b1ee920819e5ce6f6e750d97e3c4fc605f01e7ff9c649

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
94714f10a7f3b99ca1b7038b59289bc1

SHA1
aa49d700de834aa965bd915c07a281c30173ee28

SHA256
6d075bccf34aa1c1f5ff9ea7b826a36cb2643afe9f83e165415e859957cc7bc9

SHA512
3b02bddd63405cd5c0618491ed98512a25b907432c9256a29dea873d363940378765d354d13102cc5b5c73822046b5b2b7e6a79a69eab7f443528c0580ea759a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.office.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
ef751b0d86be2d2cc0bff0d9d7ef4b2b

SHA1
51822c494cfefa09798af76a8bbb36d0aa33591f

SHA256
d60ad88d1a404abefd70d3f33288a118a7c6bc5c332f97521ee72c0e6686948b

SHA512
82d22a243a6a65073d32347899a1b93d2fc3a8d5e3954dbce8c6d000a13feb8327a4c198cf05c7136fe466a82393e1c31d2d6386d3f7f5f8a0c9cc9edb7cf82e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
0770af5b073cc6ebbde9b511853f20c3

SHA1
fd72de5c068cbed990af8cbe3d93fb72f435c208

SHA256
1ee0b7bbb224ee1b1c453d7eea7f6cb49b8dfb953622b109b409c21ea4a37d5c

SHA512
259dadc4361e536a59336a96acf7477d800b6388667e1ce96e17913fad095a79506e821aba72dcba945699858397af81063b237fe739917a5c7ada2236d5fff5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
538B

MD5
7a5ccaecd2ecdd775af258be46f17b36

SHA1
2b8b37f8840e8a9942856f8f843ba0657cfb0cca

SHA256
fa35e8defa91a3bc027e5142b22883316ae236c2edec55b888fce6ffedf1346e

SHA512
0521f17c5d048c7c08301c6b350e5abcacb7ec0d27f786c7b704513732d6af0988ae9f947eee8c14df22861e8c289c1afb449b54d24b81976004db6396742f8c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
49a79fca2141635ae6813e02d3fa17ca

SHA1
d84700b0c896870372530e4cf1eaf92777d4c19c

SHA256
ba35c0fb783cc3831c73bc6c89f50ec8a9622f1ee26b6db640bec58754d3f308

SHA512
ce2e84b0a1d3616a4f8ec0950d8963ec74854d1bd690493007c2aa9dd5ed4c23653f64990cad479501f8dcae3e96caa1d6c4a2ad1e5dd44d3ea131c40b02b1b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
9b9ba2d8b2e0d849d7b1f7bbc7269d44

SHA1
4e4ba788e97005f636f05c53cd6a08bba52aca1d

SHA256
37271ce331fc0f32df95ff72bdbac5ad91f50c9549168efc034480c78c873404

SHA512
b4580392c92be8b807f20fa5e6939c642f9ec7050f0f76416e5488882eabc4404e0389dd1467fed9c09090601254ad2a512eae373c70a93857ffc0817c9f274f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
19ca284ac819f26f50ec9274d35ae5c0

SHA1
be7376e866e96bb2379a0da9c90aa48b7978b2d0

SHA256
0e736748198ef4cc14917f2b565f7521699ecdaa58a4ef95cef4b49a29a31c94

SHA512
8ebc585b4e5116555c5641a4f4b3e0a29c490582a4b514ab3c926ab89fb6896df9b606f3b915d63a75d22368e9727ad371773d07c5a047dae878ae8f0cc5a986

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
157KB

MD5
336266b1ff04320d714676fec1207a6b

SHA1
b8ccb98b68ed390431c49ff5793e1b2cce12b697

SHA256
005275757b1287a01d465fec99a657540e58eb33a8c94442e8d7c356fd1eb052

SHA512
ca6a57234b82fcba1ddb09cc8f0ff59acb1721b382a5f4e263b428cb868ef46dd849ad5cdfc4eefa6b2394d358d215c7fde3209d52d128753943ac21c9aee997

Download Submit