hxxp://compunetwork[.]pe/s/red[.]php?email=christopher[.]moore@hpinc[.]com&base_url=*[.]compunetwork[.]pe&u=turismosorias[.]site/so/gciddh/Y2hyaXN0b3BoZXIubW9vcmVAaHBpbmMuY29t

Resubmissions

06/10/2023, 17:11

231006-vqkq6sgg35 8

06/10/2023, 17:05

231006-vlttaagf98 8

06/10/2023, 16:56

231006-vfmssagf77 8

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
06/10/2023, 16:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://compunetwork.pe/s/[email protected]&base_url=*.compunetwork.pe&u=turismosorias.site/so/gciddh/Y2hyaXN0b3BoZXIubW9vcmVAaHBpbmMuY29t

Score

5^/10

microsoft phishing

Malware Config

Signatures

Detected potential entity reuse from brand microsoft.
phishing microsoft

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133410849869137099"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2316	chrome.exe
2316	chrome.exe
2988	chrome.exe
2988	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe
Token: SeShutdownPrivilege	2316	chrome.exe
Token: SeCreatePagefilePrivilege	2316	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe
2316	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 3096	2316	chrome.exe	86
PID 2316 wrote to memory of 3096	2316	chrome.exe	86
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4880	2316	chrome.exe	88
PID 2316 wrote to memory of 4256	2316	chrome.exe	90
PID 2316 wrote to memory of 4256	2316	chrome.exe	90
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89
PID 2316 wrote to memory of 2888	2316	chrome.exe	89

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://compunetwork.pe/s/[email protected]&base_url=*.compunetwork.pe&u=turismosorias.site/so/gciddh/Y2hyaXN0b3BoZXIubW9vcmVAaHBpbmMuY29t
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb50099758,0x7ffb50099768,0x7ffb50099778
  2⤵
  PID:3096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1636 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:2
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2208 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:8
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3032 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3012 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4616 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3316 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3312 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:8
  2⤵
  PID:1596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3272 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3252 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5220 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=6100 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3776 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5372 --field-trial-handle=1816,i,2782637932554412478,3788251717837893492,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2988

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
a88681dd9a7e6d48080da7918cb2bb19

SHA1
1f259a70051457bc44b5ba7bd5455be124aeff6c

SHA256
42ef3b71075130c4ef3a90e7c74873b9f3d487a13b87533dbb2b044dfd3a57d0

SHA512
7bc01400bffd269e6ebf4a843cd10161c20ed62821cdf5a260322a55cf023aaa791049d951fa38f76398a0dfd0177f2ce396647923fbc7e7aa0ffe3b5e37c78e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
1dc1ac1593fb9dccb3d5dac22e7f290f

SHA1
3b49912e7c8edcd8fec84a69baf9a7e9a2285e51

SHA256
f474c0598b554df54a52df5e218c88e9984563369f161d0e69682611fba3ff73

SHA512
19a689d5842e486f37d352ba752fc5e1813380f72b7c4ddcd5e0a150a7e9fc4387691fc4153a5eb7fe327523b970c2854fb91ae3b12b27d50b20130f5de11306

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
63f04bfda596838460a875bdbb5bbe0d

SHA1
5357b1f91613f80c3a3674cb0b2dc8e88e658759

SHA256
d77fe53cd1cdb5cc9f2bf1ce9b507e8ad5ac43f223f83698220f30683c4b8c65

SHA512
768d7514c8a87221d6c25d85fdd1bfbfe7778281b0ddd34042202e0396570492627828e639ca82476e7a45a2875b538cc8108c9f882b24950777f64836607fb3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
928dc65f52ad5227bd0d136c41804322

SHA1
fa77beee952970496dc75611a8a45d7f48535366

SHA256
660d400ff1afdf0441d222d6063083f02c44c3eeca9fe78017ec0c494f274bf0

SHA512
01ee159225c38ece4e740c4cc8c7467386321dbfd145a651e0c7f16579243c479fd7f8d785f62d79c46ca77b152207fcd67f2910b6f553b088698715e7f3c7a9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
8a406b408ce487d6e18b6a44f19a9efd

SHA1
aa36210e5cb532cb57d6addc4c285055a06b62cc

SHA256
a67cc2ed079a40f6b05cfdb9017869c37121f184e2009c6b2a8965ba3be6bc22

SHA512
ac8c8c5d807a905c9533b3224b96ff8795f66a8e1d55eb3899dc38cd4971d6440985e09022e6a3b0ed2fdcdece863c82fd849a529c384c7dd2e0fac3fdd09e33

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
126a2cbe127ea759d5c2a0cf5df65e52

SHA1
c0b49a20668508aadcf6252d313a87d7e9fbc1c4

SHA256
9fca03e3ca2beab64067573407e25c8d6487790589678568a83107f0d00acb35

SHA512
fab9a6ecf8b3a20f967b7d8ea22d0abd7b4bc401c019127551d831f1916c8de097f7384a4c00b8321dbf14f547148d0f81d665a999914b35dbd0f028c4a5f824

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
8269719e75f4846747dea2e5d84002d8

SHA1
5f78e2cd224532a52a6465e1c098dd9bcc1d4ce5

SHA256
046ad5dd55b816dadca2de5efb0a54cde9a776ab6ed0ac29efa94b9772eb66b0

SHA512
11e720ca24f465d52ba2130c4fcf5af75568a2281b1cd13453bca38d4647212003733ac7db157ea894a8cb42ec429c42674fedd41832d60bf14c5d92897fe731

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
8b22623bc3101c818f457d838ab55c2d

SHA1
d887f95cf70e442c3630db82f872a6c348f738c4

SHA256
c066a90588e37ec1957db594a75b385e9cc70d2fd973c327de68a70af5fb3c54

SHA512
830e609d4407fcb871dfe715862a73c322e153a0a27c739b4cc8f3ab2d37f5c929fae05cbd7101acd519c6230271aa9850d853f1c118eb44ce9e3e8eeffd4453

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
101KB

MD5
86d1629f0e470b304390baac0a8395cc

SHA1
d051b1c04c713df59d8a55ae549915de7daf5fc4

SHA256
1f3a9e786d899e6d4d543507d31418023534292788a22c9acc76fdf07f6c4e8d

SHA512
d1ffbaef4a6af7ccfc0370ad290a0278f5b683d820dd41f94d24387650f8aee6e65680917cf29bcf7d5d5763517fdfe85fe80e2a4b2c36001e54e68181f771f2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
101KB

MD5
9064ff6c32abf91352b5d0471cf37b93

SHA1
6ffdac053688c0c366089e70ec8262c3c5f0aa6c

SHA256
03f077ead7c154458f17b5ccda65a180ab9aee079e610f73322326c8c70d8e44

SHA512
c3689307e153c847ba78af4c5860c03910c7b5d8480c2c2a8be7ddb8756040e0fbfe03b3f818a3d8a77afc44f1e6c2cfe289c3a121164a3561790648b270881c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe57df73.TMP

Filesize
97KB

MD5
375f626044ab238386411ad3afad1c06

SHA1
18b12cb8c83b2407c125b7e9237cd0bc78de01c6

SHA256
43a5d750b671756013f194e4c820a12e88689a3468ff4f0afc5eb52636c49d01

SHA512
b2799529f3ddc8beb2136924873d6ce1d608bc3c2c953ebcaed7846bab298cca8cc21305f65a99ec87d7ace5cb9974c045ab1529ecc87b4334e5acf41f6680c0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit