hxxp://vpnnl[.]novamedia[.]com

Analysis

max time kernel
101s
max time network
107s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
29-08-2023 14:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://vpnnl.novamedia.com

Score

5^/10

microsoft phishing

Malware Config

Signatures

Detected potential entity reuse from brand microsoft.
phishing microsoft

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133377928688838505"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1544	chrome.exe
1544	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe
Token: SeShutdownPrivilege	1544	chrome.exe
Token: SeCreatePagefilePrivilege	1544	chrome.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe
1544	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1544 wrote to memory of 4072	1544	chrome.exe	82
PID 1544 wrote to memory of 4072	1544	chrome.exe	82
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 3040	1544	chrome.exe	84
PID 1544 wrote to memory of 644	1544	chrome.exe	85
PID 1544 wrote to memory of 644	1544	chrome.exe	85
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86
PID 1544 wrote to memory of 1772	1544	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://vpnnl.novamedia.com
1⤵
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff867169758,0x7ff867169768,0x7ff867169778
  2⤵
  PID:4072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1656 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:2
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:8
  2⤵
  PID:644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2212 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2964 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2956 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4032 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:1852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3456 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4476 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4576 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4028 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3368 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4592 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4696 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:8
  2⤵
  PID:1264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3132 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4072 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=1608 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3240 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5572 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3140 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=4476 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5248 --field-trial-handle=1868,i,16305125106230159454,2679472424012763390,131072 /prefetch:8
  2⤵
  PID:2148

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030

Filesize
16KB

MD5
12e3dac858061d088023b2bd48e2fa96

SHA1
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5

SHA256
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

SHA512
c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
86143b2dc476a6eaec52bf70395dce53

SHA1
7b12da866f88b05bf6561d23d7966a6e8c1def64

SHA256
0a1ad760696e429295a0db6e4f2aefc4bff77fa514b1011182d04f2ca3b39bcb

SHA512
2f8ecdc75ba16d5bbcba2e8ad98bfc268f2b839829529182543be0dc83f6764916d06713ce42ccf9c24a463103a2443a6895ecfd46002c1714a9b2e2a0bd85cf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
a347a924f72a92c97c831e6cf1d7d876

SHA1
e9c3479205185c597b2100522e1f60e786d4c415

SHA256
b381315a7c59bc976ce3c1fa9920d9b0c9bd67d01b7877cc3ff3e37d3de345a8

SHA512
4778cbd403237b24b1aa03c021eeebb9db34a101389ed8c340e7445a204e667f7ca42d112f09a18bcff4d1b2633c5e583b2de898d503c9adabffef8db8c019b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
65e7fda139838a669484a23c8221bd2c

SHA1
59bab82476be1fcb382a2285e2425b5945c26c3c

SHA256
e2437ece8ac6dbb967f5a9ae012f7824357fbd9d8007964fda8e02b37f2fffc0

SHA512
4adae1e5e9b03e590f49d1142cc4e07a2edfde6ec7747a24eb7dc6c14248b6bdd2bf8dc31537115671e9bdbf3753d2263d286558eb227c6b5ab26de5ef9bf7ab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
ddb6e95b84cec2c2fb80f1e6b02e75f6

SHA1
31c958e7e24a9d4c712b5d269bdfdc972a01bc81

SHA256
bc4d923c674add91e329cfee7a3cb94d2db9c6b35800e74d616306952cdd88c1

SHA512
8c23d4988675328e2c2f56aa1498fc184559e025ec5bdfc0dc6c823aa3d07daeac1c236b906f78603dd504cdf574632b860eb7c23e86a0b32b8816ebfccd63c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
e3c7faf3482da4fd5d89b1f2fca700fc

SHA1
883b6e35a85d25d2574624edfb2c97e1c6317695

SHA256
220c7b4b5116f35d10e3435932b8afa309321ad6f66b636ac1c92632331b7ed9

SHA512
c6c23b3aa1cf727cd37d45989d6948c34bb77fbc5ffc61c97c446b2199b6ed2f8a909453a6f0ff3f997372469bb02694ef142facc3604cc947b3f1643eeff7a7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
f84d912687d1ff28e97d908af49e08bd

SHA1
61e83e358d28b1f6dcbe151bf9061f7dc4bf7a4e

SHA256
1cbbaf19191efd286dffb907963ae3a144d96c32b646f9bcec9c6220c9182f68

SHA512
10ea070bc18a6e5841406f94ae065526108098609a091a815bdaf2d5efb80ef548f70e063d070774fbe9aa1e9ae60f43cde62d35a6837a1ccdc3554111352393

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
85c1c83aa563c8a1e43227a12c8fb9f2

SHA1
dc2d7c3880425bedc732790d1482b4e39530f3a1

SHA256
2b41057cdb8a34cb683b59dc21fd16de7af115bc9fc439a9d1452a1f64f08ff4

SHA512
97148219292eebf1742ef27ea798f59474e4dea8552506482856b590def3a10c2004bb21464266ab6650110a82dc74b88e73beb7586cfe347b6d437b32a1d72a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
90b2cd81d51e3aa2b18cbf4732202aeb

SHA1
d28f21f53baec43c919d395496ed71355e3f0f8a

SHA256
4a8957167ee5cae37f9e761e0deeb982060fd6a56b5ce320abdcecfb6dbcac93

SHA512
5dd14617b84f85e3183db3f6a38f246a7d4820cbff15faf61149207551cfe568fda33bc11970d70ba53870b68b6ded2c3959e4c4bbb0bd28242490a6e53ed84a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
184a074cf958413c74432c2e30f2fa12

SHA1
6245365ee351d6dcd99f1ee12fd071f37ace1c3c

SHA256
a2a0e614da24906f7cb1d6411dbb0b932bfdb72a3d2c3f0de7bffea17f4b92a8

SHA512
66aeed53024445818dffea66a3a61df25da4216c45c4e3064ea318a0d2e13b6e8e494876f8421b4596f3a9e29c35122af6d881099dc4a1212a23a9d6b0f85ebf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
6b31690a67a1e2b0c4121ef39c2d4043

SHA1
b81e51625c8aeec61f104d60bf0e0d85b8ef22ef

SHA256
65c785414ac704de176fa8ca133fb6526343a044a11c53e3852bf67ff0292cff

SHA512
d5c3f0eac57ea849918fcd28805fddabc0c2c9d55b9611b8eed4338630a169c287539752c6019c06384f3f3b5929e47b846fb5f6ceb1231dbe4837d104fb590f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
025341610eb4a25683503b69a8ede364

SHA1
48e563d69a52b4cfdc887be8da4c4ae9d7054900

SHA256
f32e1e9cdea8b3bb03d23676876dce609b4b4c2727d195a5331bc5711590e48d

SHA512
5bf3d15bf64872290d7a4718e20ad3da3e023e9a87f643660cd30e6c74507982146680f4bcecc3d90f204f940091fb5b4173e2b7a71b77bffa17b2aa480ab24f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
cced0a77686a91f205fab11fd6bbc8e9

SHA1
ba0c881e56de7657a95715209751e71270c9de60

SHA256
52e6d27f232411eb85a317971aaec71ed9f4cda5c362e677b9e06c71b428cc3c

SHA512
028887e01c2a6fce319734a62b4020f987f938086a0fab87d04622dd4e1ca0658bfe6f7a5da1068d938313a7cd21760e971fb3c2bfb8d4dd738a9dd0eb61ef03

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
e7716dd6361f47729ab6f698dfd4c7b0

SHA1
e832d3aad485fa0875ae676698f7057bc1098584

SHA256
3c884c5b01b550c5c55e4a9e9f8e31a8affd753b8d89c0048d35cabcdc536048

SHA512
895b9e8b20d5601f5f3724e62161db7ae78d826d4d8a0aef457ba703da89f64b0321ca73604901492028978d3d34bcbba6e740164492aa8abf4478b94ed48b1d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
bdc41159b00b304928d4b35e777784b7

SHA1
ac978506f11f077231f63346c13113278f48f3ba

SHA256
03fc992601d6829c23129032a0d33b1e51fdecd6049b00c40c34d98613cfe5a1

SHA512
6fb16f2865b8b4af5550e29a60999024066c48026eeebd99b60cd173a43547b9e50cfe5ea6808b67afbc5f06e98509690b2d0886ce1b44c05be17ee07e5537b0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
5d6d0ba85a0fba0bcd377db7789d900d

SHA1
5d0f88b59cf01b912395136e3800e13934df2ff9

SHA256
5d1824ad44d60598e4f8fdabfa60fb6bd03bc24dfa4b96b54c904541a56d6008

SHA512
ea945b24df7a9ba4b245849a12d0933af311d65c559646505fb634d25cc8f9a216446a808df63041e1a5f492110f1cdea3d2edb4ed8fcd18a4826b6f612e3385

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
87KB

MD5
e8f9d636360f314f582a60fde857fc38

SHA1
025a0778c73bbeff8d31330f1e6d4d954abeca02

SHA256
de8b96c552dc2b689a9ef3c108ebe9f47fa8b15affce0e29db89c7aeb46e6e40

SHA512
61f4124969ea5d8dcf70993ef6d5391412d214ce977a451aa6ba686f63e8c15621af6358850bf128da1494acb88beed285cdfc9a7081ea5ee151cb8f145d508f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
87KB

MD5
0eed31b166ab6b5fd8a517148591d8a9

SHA1
8625196ce1dd6926f6fbff88fd2dc0af13a855ca

SHA256
157d790a8568e5a9e1d7bb8348707aee3acff96509932f4729101974d32917a6

SHA512
e79c6b5a117954ec44a499fa68214fbc47619e2b22b4e9efa2c16ef5503f60995d6ecef597b707e28ee4964f5f26742a3c78d546244038f0edebd6bdec248c75

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
104KB

MD5
8d71e2d70ca5268537c6c24a87f7419a

SHA1
c5c4bbb427c67bed09c63203e25fffd217130a0d

SHA256
13fb89176bee0ae9b06be11bd218d61f84e7285027afc2b8b6b7487747efbf2a

SHA512
b9193b2189806d7a6cae9c3e2e78eb7aa2ae0b4378b55997743dc2a28bbd6cc8be83a59cfc2cde75c7a2417aa9dc7e9062a652176c5369ce46bd93e1c28b4cea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
103KB

MD5
36c2ecb1d935d6c03357a52e4a02b1f7

SHA1
54814428361ff38ddfe21e6da8bf58ac870f1677

SHA256
05b5c7fd4c14bb069eb012abe09af41a2dbdcc0f2fdbc967f29d8ecf5a604cf4

SHA512
dd509b4efd032c32af1df21d6e0c3dbd4cd4af61aa83ffb27316d0f3b5d2878dc8538d5935b3e0c5c3e11a4f4ece391eb219dcf8476536fc30fcfb97ceb5279e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
101KB

MD5
d79a934b7d9301a7bd347d790642d5b1

SHA1
0152e5565f34cdcd782b16aa1cb1e5a93f56dccb

SHA256
ad39d35df25dec430c8c7cd976d5417ba3fd48f29bd25f2a227fa7b29b138c23

SHA512
8f35dce689b0b99a008a5a46f5c0c17e127a6ab97dd93b86e9bd98e22f17b20e2cf200816f0982837fdd1fb362a8959d01903fde9edbd0a74f788a72491d540f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe582c89.TMP

Filesize
95KB

MD5
ba756257289438c62bf979f2b75e1b40

SHA1
f7c9f22ce14d8828cf37673ec127d79c22be3ea7

SHA256
d3d5332b8682e5b679587c14069ed5f8af1f6f93d5125496ab9a45e9b8e652f1

SHA512
e971213da1018c980475bab16c71a0293ab99528d0c80e2dde3a1dd5e04e5832cb900c0d9a4b20d88d074f09f539757fb97a01ce71157a1cbecd08297864c3c3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
183e85533e2c32dd940222a94bc6a8c1

SHA1
23d7d929b447813550086fe68d1eddf92a78e82b

SHA256
732b5f300f37f6671f43e6372206205ff55eee73793cf7c9e4210af3344af933

SHA512
7f17e17e4c60536047f42e87d953d4e5adb2f112f1d2fcf7ffd6bf5306e1da77251bc32e873072f19d61b14e350ffbcfff21b5a20a4ff85587d7ed9313dc3f9b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit