hxxps://shop[.]awesomatix[.]com/auth

max time kernel
53s
max time network
57s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
03/08/2023, 22:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://shop.awesomatix.com/auth

Score

1^/10

Malware Config

Signatures

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133355740650018091"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2604	chrome.exe
2604	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2604 wrote to memory of 2744	2604	chrome.exe	83
PID 2604 wrote to memory of 2744	2604	chrome.exe	83
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 2948	2604	chrome.exe	86
PID 2604 wrote to memory of 3808	2604	chrome.exe	87
PID 2604 wrote to memory of 3808	2604	chrome.exe	87
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88
PID 2604 wrote to memory of 2536	2604	chrome.exe	88

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://shop.awesomatix.com/auth
1⤵
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe72979758,0x7ffe72979768,0x7ffe72979778
  2⤵
  PID:2744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1632 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:2
  2⤵
  PID:2948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2200 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:2536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2888 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2880 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5084 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5168 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5348 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5252 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5540 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5668 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5684 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3036 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5280 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4860 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5840 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5984 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=3008 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5364 --field-trial-handle=1868,i,17465959432323130979,2028519210684479700,131072 /prefetch:8
  2⤵
  PID:1368

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
360B

MD5
6c7ee44629a85457f56a4d6a363a365d

SHA1
1d8ab2c2ef2aee8bc9470de0d81091c38c651295

SHA256
387100b93ef4e2e79b3671062614d86c11cb524c62130576f4a473d61f6500e1

SHA512
c9913001181a5ea1b1dc179a354e1d9bdc6af11f6b65464e7703c1852d8a94452b3c5f4eaae41733b0d7fb18e77d6384e0cd45eb24f11faea42f928c97b21be8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
539B

MD5
9c9886f53c2233fb85b0c00e16def5ba

SHA1
4267f0e4d938fe3fff68e15c5ef21cefef6825da

SHA256
ba01fbc388fa48a906a4582c944569a771b049da40701660f6b112fa09053841

SHA512
a05cfea5baadaad174059660caef87ddc16a98ffe7690b0b0194a48f15f3861c4a87037417dcd464c0c82c12aedb411532c76ef79b49a8152be9c1dc84595baf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
707B

MD5
74a4d2ae26394ee2c1aea40cdc8daebe

SHA1
941dfcb949273e7eee911d3aee4c5db5fba3b295

SHA256
d7ff141fcbbabf7a6f1faaef4964031bd3bd1f3a4439ef3ad592cffe1490cde2

SHA512
102330af9f093c6984a5ac5a8a4b47ac503da2341959b75295909a915852c8fa5786d4d410e926fcada1ea62021ee6bb9c7a8dfef0ac74d7cc54948a45f3988e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
3a0a912f7e0c4b36a81cf5fcb06d0c67

SHA1
d8e49355b6d00be3b6e0387500097f79ae18da38

SHA256
7fb18924fefaa57b3004460a9c964140e27a0b16654538febe94a3ec86b4ae27

SHA512
99387f7489d10fb4314e53e3e3461eff64b075c0c4e7ce6c866272bda03b18326af06fcf712d5914742811ad4445a55bc62df1056a6f7f9dc2b9b48fa0edca2e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
8be17d5cfe47bda1ecb4b6bb1ae8b8b6

SHA1
b5966cc87e8c582cbab31b570689d022c1e7dd18

SHA256
1325fbd9fdcc33ce6de9458e774070eb003ce04b433a9aebdf8fad5716eb4d2c

SHA512
048573cafe5d7452bba89581117969a611abb47c0dceaaa47b0ab3cb62ace48225a97170893badcb113841ff9cec1686f03c9d213bee99a60afcb57b6c18de42

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
fe778147025d18cbb8d270ff463657c5

SHA1
3a6fa7cfc0cf4083992739808de5977bac93ec3f

SHA256
6d223d113a4071f68a6cc492480866e06cf9785a02cd3043265f4c8fec4ff971

SHA512
25df761a12c9e5c27ebe5c88c7e213e29ec113b101b75977e4801d314126a256ac3e90d1f51d3919670e28b15eaa35a7d8a520034c36eaf9effeff1b5b2aec00

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
c841917ce8754dddc888615da6deb67c

SHA1
f29c28c70614e367fa607d4542fe37dcbfa470b2

SHA256
bb81465d021b2046f257a4dd7304db44f84c030a474246b1e61fa1d0b8334a96

SHA512
067f31a002694fdc3a099b8706434fdc8384a65edf13c4d6a6035d25b7ada29efa79911e74f865ddeeba85a8f1247480317a66db59b9059bec8b072809ac2112

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
290cb486d957d515006ee8aeeaaae68b

SHA1
f11d0e1b04139eac4d5114378f5993ac3e2d0a1a

SHA256
6647c83692cf37c3069e992e6d89bb835a2a514b3223d78889f21c77fec80c0d

SHA512
8f19de213e49275bbf5cad170f8879f61bba599a070a3757ef3397b68e40628961ae68af216a10dc8618227f8174fc208c43470c49650c81a0b384847ff494c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
87KB

MD5
0276f0e2eef9d2d2506f8f449fd4197e

SHA1
1a150c7846fe856e18a26d4f483af36237bf3998

SHA256
ca72aff2c6953a257a1a4e69533e1d911966ac96514038472e21a9868e4bf931

SHA512
4045ebf556752b865e87f643bfac82674beb7c8c3d85c515ee94a89ca0d7897f416e9f397b08cbfd77ea8e9f2de54a216b19c40374f40b5be8b44c143effff45

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
87KB

MD5
77b6d328bae8fd18035de20c6dfee325

SHA1
7a642f830503ea7a80f365caa2b543b254ec7573

SHA256
52a533eaf8db1d09ee8c2846c57f25e09095ed975dde075f9f50091b49165b15

SHA512
3d51ce0937f511dfdd12a7b84555de4a187a1756956f2f91f4e796829266113ec59908712c2dc43343b559598c13dafb9d0820c7f6eea39843994223e456d27e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
87KB

MD5
b99fb4d50a95c1a8539ba0c6df2eaff9

SHA1
0096866c64976abcc6845379e5d15968bc991a65

SHA256
9c500e746cc882c2508043735269954336d8633bc51f3aa83910a06bf0012f6c

SHA512
bbd46962546bc2643637494c2140c1b1fe9581f68af767cfe63660ff06491a38e1106359c4f35e8381571a1e5d313ca485ceeef1d8f309c7adda023fbc119bce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
103KB

MD5
24d2413349853bc91cc1c67ef27fa92f

SHA1
74a7330c8a77b8fd7af3438225f4f525a6b1f827

SHA256
d922574a061b4c116a22ae256478578d30f63c9cf3980bbd2cf5c0efbe3b5137

SHA512
5fa4ab6df9a6be1aefb4f03fed501d090dc628b10f050eb27e4364fcd18551feb0defc9c63093cacde80750491d7c4c36c94c7c2a22d27e0e5938315ee69feab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
105KB

MD5
785f0c73d0603587684ad4caeb9c1739

SHA1
bda34a86d0a42c10c8511903bd6bc45bcb9b4d31

SHA256
4469b17d9124fa86e1fa6e4ffe00aee7cf25ea74b1be875c1d085e370b9f26a6

SHA512
44acaf3308894aac8fd89888a0134b732ba68c50df9a7fdeae26656e8aee9bacdfd90a0e454f8675e36c0d0b7fb57fbf67508112b3162ee08576ae64058427d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe57e85c.TMP

Filesize
101KB

MD5
c0ec03fec97fda31bf620595b46ff6ce

SHA1
8305f88a96d9b22f711bd9c63b3e6b85538456db

SHA256
6b44aace6b907001854869baf015a1fc945c874fe64a7f636611cea8a0f44caf

SHA512
cc4d61dc9a4721a5f4fc0bd0ddf174b494ae9fdb4e509044d0532e834969021e90f73e1ffb73d144fe45a132a155510fb473e277b7fc568b338df8f51449d76a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit