hxxp://compunetwork[.]pe/s/red[.]php?email=christopher[.]moore@hpinc[.]com&base_url=*[.]compunetwork[.]pe&u=turismosorias[.]site/so/gciddh/Y2hyaXN0b3BoZXIubW9vcmVAaHBpbmMuY29t

Resubmissions

06/10/2023, 17:11

231006-vqkq6sgg35 8

06/10/2023, 17:05

231006-vlttaagf98 8

06/10/2023, 16:56

231006-vfmssagf77 8

Analysis

max time kernel
150s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
06/10/2023, 17:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://compunetwork.pe/s/[email protected]&base_url=*.compunetwork.pe&u=turismosorias.site/so/gciddh/Y2hyaXN0b3BoZXIubW9vcmVAaHBpbmMuY29t

Score

5^/10

microsoft phishing

Malware Config

Signatures

Detected potential entity reuse from brand microsoft.
phishing microsoft

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133410855226576414"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2620	chrome.exe
2620	chrome.exe
4560	chrome.exe
4560	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe
Token: SeShutdownPrivilege	2620	chrome.exe
Token: SeCreatePagefilePrivilege	2620	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe
2620	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2620 wrote to memory of 4732	2620	chrome.exe	18
PID 2620 wrote to memory of 4732	2620	chrome.exe	18
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 2068	2620	chrome.exe	90
PID 2620 wrote to memory of 4088	2620	chrome.exe	91
PID 2620 wrote to memory of 4088	2620	chrome.exe	91
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92
PID 2620 wrote to memory of 4128	2620	chrome.exe	92

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://compunetwork.pe/s/[email protected]&base_url=*.compunetwork.pe&u=turismosorias.site/so/gciddh/Y2hyaXN0b3BoZXIubW9vcmVAaHBpbmMuY29t
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa90349758,0x7ffa90349768,0x7ffa90349778
  2⤵
  PID:4732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1712 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:2
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2200 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2792 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:1
  2⤵
  PID:1852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2800 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4464 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:1
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4732 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4836 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=1604 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:1
  2⤵
  PID:1076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5056 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:8
  2⤵
  PID:556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5316 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:1
  2⤵
  PID:804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5208 --field-trial-handle=1888,i,14862731153451261817,16771147820381726464,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4560

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4164

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
e3a3bbe81c7c2349f818d9a20e079f77

SHA1
b119c1042bb52a06b8084549fe296c6547411faa

SHA256
a8017a0555032a6c328d87e59844e6d00f286d3eaa676e38d2c868fc64663d98

SHA512
72f25c760aeb4c1c9d5638c56033562aa818e9c0b65969610d8747fc34b8097b94199bc5c942a24d99f6e7bf15d6dba5c959313718d377471b53aa60e0b4213f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
edaed60f981de1e1bf990b667fcd7ba9

SHA1
a037cca2422877b0e125030e5e5939ca3c5f74f1

SHA256
c9da942d5a983661ae97305138a41e0ed9eab7842d8bad33a8283d4463b14397

SHA512
47eba81fc8df4fc184ef2fe6a2fe4becd420f9f11a8d4896414a31f4afb7cf613c92256dec19b81c4401ddd786e59394bdb8521ecf527ae00a6b5d20c53a6db2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
019af92566f7f56e188b0f1aaf624ccd

SHA1
7e70c43eae0e994ff0c361ceaa57c39a2e118191

SHA256
ab7869a3dcc79d29cbe07d618ec9a33325570c5787dda81be25f44ecb3c086b5

SHA512
5a3c3aea28bcac890152edf5ea8a8152514c12d60608814ae01c675cc1e1c249420f09b3fbf4309bcd0315e09d4a52db8b2a7e50bf44f268ae3a07b60afcfeab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
a989964cd61cedf75dfa53a37c87fd3a

SHA1
d09f2bd2a5b0a464442ef65af50680f8f2b58e91

SHA256
a10e0e0b46fbe2125f5f4bfacdd8bd70929f1b38b036dbf4d553505d35661c49

SHA512
2a924fd8928db552dc14d5951bdc0e35300d2e614cc6b67f396fce00f0c81dfa4e68997acd19f0a37178d69683dca92516e5df1c8598cc19a31b5b27e45a2830

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
ee60c72a66db57866eed5a3d48aed6d4

SHA1
cb50cad18a4df548a1868f3fc5b4dca233e0ba36

SHA256
71dc1d58c0aac5d3f736030e3a573c0776a89dd8de233bbea174a15dc5395ca9

SHA512
cc9a9d291296d6e61db3376ea34292dad274c040430ab5b0c6ea5d2131fa4747992372ccc19ab168b9ef4fdd5055a69d4375f607e37c132ff064378ede73b6eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
9132dcfafbaef3b9d8318b6986741bad

SHA1
c1d4816290190a956fdcc1ca1a7a229789ec9972

SHA256
fdf4238bd08720c42ace5e24c157d9c0ed2278bc60815e82c175bd6e994ad52d

SHA512
4e47959e235deeb9d10e59feb75c1c50b3fb65053c64ddd82535f173c232902637349010d8ff161f2d5020175478237013672be6a23d85dec1ca32607d7c709b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
872B

MD5
3c8c308ee769a6dc23c9be9bd7bd7f15

SHA1
b202117b2e01f71aa79d8d3c0a55a4782b24361c

SHA256
3a26825ef42df0c2e9e43bea20858072557b1d5412cd1e2a0ce2c08803413a23

SHA512
bfa1d8ac93bbfcdd32b5f044ef2f8bc724016d8808c96467fff5ff642561341cbcf96433c559462be8ca30c415c539422a3c8207a188bd0d1b78ec65774b5004

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
10591eac1ad22d1cd9ffc6622d719e5b

SHA1
fa8927509c6594238b7f7bfbb21bdf8c698f296c

SHA256
3ac9c1313cb27f5d8dc580239ce52f8b8a0ae7d43cebeb0a0531c89bd4b11802

SHA512
f0095bad71c6e04f8a9befd662df04cbe483bed9eb446b9da173e35edf590209bb03208f1acdaa8997b86f617dc25735a6533db451b85d7003a1fe192dc492b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
6de958c1f50e2ee0f6014aa1eefd2f55

SHA1
f3e91d3164218355d40f97ef77754771ee94d4fb

SHA256
b7ec84d827d83eabcad5c0d668c1b4ab896647ac2feef7dedec4fc3874344779

SHA512
8d1f3c90c36e05e26907c74e2ad5e308be4db34fdbda91db60ab2c24b82138d7dd708a6d61749779be6e6f27c1e682cc9ad466c9804a6ccc76caa2edd89046c7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
a958bcb7fd52016a326165ed8a0615aa

SHA1
aa8f215fd673d3d1b099735a599e582fe3d490d3

SHA256
767749a51ebc07960212f7d41a9ce8daaed3a819b820b7f907f45174bd41da66

SHA512
17d314dd89e67f648092a28f7af8a3b1cfa2c5a8ecb58949ce4bfb57fdd2b0711ecd31e02e7b54cc9510f537d1b5bc064640bf7d35e43afdcfac38f2d5b071f8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
101KB

MD5
db7e67a0091c5d96cf91ed2530d23405

SHA1
f30ce08081064cc9924c9bedfec1a7cf7dc6293a

SHA256
acd9a09cd79694947f21def8af008bfe921f0db536d467c7bd398e6c80b6be2c

SHA512
85df8da5eb24818a3b1521edc13fc83292b7f13b1074762d637cb8815b45aacc1382001f26c00d8e6c5c9a2559ee7903d3e7d4ea2bf81be779f376245081af94

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
101KB

MD5
d21d9eb1f8a09e03cb4c2b0bfdc14666

SHA1
bc12d9294508baaf3b12e86b617c37467e22c4b9

SHA256
7e576c25b128d168d6ee129c09c7311a437e0d450c9f3e3db3e8d16cd75274d6

SHA512
de1bdeba123453c371f918997d3edc24e1632a075badd84bcc737ece687ff1612aa6c4f5b91003e7e6fbaed1b53a954f05e3807d613f1add8a5bb2517f735e78

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5875c7.TMP

Filesize
97KB

MD5
f7e603cf508700b0b268436acf94601d

SHA1
3e4fb5718bad11fcff3b67170872e7add57d9360

SHA256
049da75bf2c785ad8cc90be4df1a4627816b5fcfd70d7c413f8bcc2d2aa2fcb1

SHA512
3208b523d26dd07873aa370f6016e811ba1a49ddb7881dd4f6c71caf31a4d4112fc5c9fe9050ca74e013091070837f3459986ac66cae70401fe4c3fa5398b427

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit