hxxp://www[.]avg[.]com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient

Analysis

max time kernel
41s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03-01-2024 10:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2128	chrome.exe
2128	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe
Token: SeShutdownPrivilege	2128	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe
2128	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 2356	2128	chrome.exe	28
PID 2128 wrote to memory of 2356	2128	chrome.exe	28
PID 2128 wrote to memory of 2356	2128	chrome.exe	28
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2704	2128	chrome.exe	30
PID 2128 wrote to memory of 2788	2128	chrome.exe	31
PID 2128 wrote to memory of 2788	2128	chrome.exe	31
PID 2128 wrote to memory of 2788	2128	chrome.exe	31
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32
PID 2128 wrote to memory of 2736	2128	chrome.exe	32

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7139758,0x7fef7139768,0x7fef7139778
  2⤵
  PID:2356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1144 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:2
  2⤵
  PID:2704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1508 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:8
  2⤵
  PID:2788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1620 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2284 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2296 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1380 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:2
  2⤵
  PID:3028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3200 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:1
  2⤵
  PID:360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2608 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:8
  2⤵
  PID:1848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=2736 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:1
  2⤵
  PID:920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=2216 --field-trial-handle=1184,i,7913541000928566960,13052820233657737946,131072 /prefetch:1
  2⤵
  PID:2520

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2760

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7f2e6aeb3ec8a653e73b034569a5f5e4

SHA1
22bb935a0f79989c54d85ebfa06c15ef039a29fc

SHA256
ce7c2540de9089a45a1af3225609b3b51cd20fba526ff2157c94566501056b2a

SHA512
fcb6ff94b3677761916a6ce0edf9c4e147f9705457495e22cda8ec305efcd9f35f13b912108ff8135ffe084b04475b93594303b0a973e1cf852c87bb2284c678

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
24c9845980b17afb7ab29713c5c297d9

SHA1
3ae60f865f23aab7ff151e888dcd921345e98096

SHA256
0ff13bda6ce6595b546c828941d01ba5e75b70e608eb1860dba07682c64aff04

SHA512
83a59be2fd33f07597aacd4cef4f25d61fc1d273aed8105962e4e188ffecb94c5172ce8cf396c0d343e0c77d0d1164a6dec64a8b270ae5a1f6de78462a3edf74

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d69bf21f0579af02aad7fa3c2ceb3a08

SHA1
fb93775534820b84d705bb72a867c078e70573fd

SHA256
ee35aac73411bae666d1ce300532b1c2ffd1f7fbf85e80acb0dfe562c87d2efb

SHA512
da4506bfaf449638579370b09e2d232f996467416d6a6c5c688580703cc1663d35dcc19a874cfbd73442a55aa30b9132df991be94b19a3d0b3fdd62a499bb304

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0f3c83b523a63ed1f3675d442f3499f1

SHA1
173fc53aa189dcbcfa394f17300588eaddf23ee8

SHA256
9d4e3c8df3d5d6850186a0aa7b693e9baef795b8c981b8d3672bcbb767ef9923

SHA512
c38202794d48592eb3a74c845f59b88d46a6a9ec3310ac39c43cd779610e1fcd9174c27b798d85f896207401e64d4adac73b4ec709a0241ca4832392266e3b70

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0a431154a393069d6293b8e2ce133eac

SHA1
cfa1bc9552ed7759ab7c61501e2ef29cf5b6df0c

SHA256
438957806cabf9e5230d1d41a8e67a74d200cc606e88776f41fa8823c92a22d4

SHA512
afb2af4e5ac477015a767d6739c5339d93ddc5b303984ebcae950b29047b4894ebba146f3d4f698e31004910ebab3e46eae3d7a25fa126fe1a569909ea20c5cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
18bc8d33b6e915ea91c104ea6b01c3d3

SHA1
4c1dba10693a26bf2d84bcd7dd2cdc12f1aca311

SHA256
e5cc3dee14979337b7039e25af703a5be32f594b8378e65849902e5688f71404

SHA512
26ebe581adc26df8a217a56175b3ba7c586288519eca9472c7270eef0850f9e4287c76b4d2e3044929967d226ed4e47fa4da0309e681082e3ba4d4f5a8dfeb2a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
25988afd60d4a4e8904bf3d069d0e115

SHA1
5b21e304d419666d23c7b27610e297d51777ce3f

SHA256
5a2144c06c0f208e8838bb95902d412ff53d1c0f0330fc337cb95f994557f08a

SHA512
676d5fcb44f8cab6b196b798c4327180d711b3325833edf2a641e88b133cc62c8f902c408efc9b356342b9010ccb895901e20cef2e47e6b7905c2b1e71c6ba65

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

Filesize
79KB

MD5
b27a88f5ada1ed7d9b6d28a89f2d20bb

SHA1
e6889172ee2924344477ea9dcc212b14c6e4c25f

SHA256
8a2ed1cbc013e844516859c603d60232f499f55deb8ea5e303203422d1ba01ff

SHA512
c4dbff05f219ee5a1ec215f356309af57837e6c2a516e6329386e826623ed11c5452f2108ff56090de7d48c5defe58f49184daeb06d05913d6b24e3eeca3b44b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

Filesize
23KB

MD5
6ee3a7a959f32b1188aa4ab0635b852b

SHA1
4f2aea29eddd6b33849ae01723f93b199b14579b

SHA256
ec257ba9f2b6c5bc131cf370b767a806183d994b567304f785dd771ad0ce780a

SHA512
5f523d42ac9e1bffcea2e3541f9c0032652596c2d73223535f5c95b57f8bc910caa84f1468f914fa126fa129c4cec46a26f1a57bd5189770315ea1796c6c16e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

Filesize
74KB

MD5
3a6c7d0e4505f42b1153c216d653f113

SHA1
3f554adf50b95d612741856be1f19d8650321722

SHA256
45e2928b771f9af392ae37606d5de24b56f9746d5314d860a64d5ebe113f5bf2

SHA512
ed7e10396eecc92f23b063593942b85d1a04dd237b713d1cb768bc4de689c7f76d911123e91744c041427db650da7311df1ba47c3d06c4e747951f0ed9ef3650

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

Filesize
109KB

MD5
68a43714805de49b53b1939d2d8e82d7

SHA1
d50989828e0ebf399bc155317cf66cf856e8ca8e

SHA256
218703cf43effccd32c0b018d0774205628dd9066596a614c6b4b808fb54cc5f

SHA512
08e1709047d18da1cf9d5657053f98a666744df71bcb2a792b9c66c6ae24335c3b72fdcb9a9fa69a1bfdcbab85e310514e4c1f65cae8bf85305cc4245c4e506d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

Filesize
67KB

MD5
4827b9423480e70090beef1e8e88a9eb

SHA1
4b7114b9f1e24527a6a78b9b3ce6a28df3ce94e8

SHA256
e41220b10c97e8f36cc49dd71959995c77f366c80bd509e238fdc5cf9374abd1

SHA512
f666ee8ba94a26621df7520064b2a5696b59e290ebf40b7a40fffaa59d46e3849c85549373a8fd41a00d29cf8f59298b6e7c54e79e36b9af7b004a2a8080aaab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

Filesize
50KB

MD5
371af0b2c61a59a2b6be16d3b0e436b4

SHA1
7c79625f085a2504c6d996f6fb319a6db5ae18af

SHA256
1f9fa0352358ec3960d0ff966fdcef80fc2242221cdd24a4d7121100e5fed3ad

SHA512
0938d931ee1a8faaa306bb3274b84e52da1f9a9438f857d5e93e1204478c4b8f655ccfac2fb28cae5947bcd10e9aeec6c04bfb43458c044d8a3c573bcd21b9c7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d

Filesize
54KB

MD5
6ed2c6300d63320c76677ced187741fc

SHA1
197a8857767b0f7c2c5587ee3e6b3a42065150f6

SHA256
b5a7238f18d4c06911575a728499017640303c8d85a39bf214ec589600438ce3

SHA512
d0a5b7ff1ec337b674e37e9ad62e86646e689162f49da4b40a291b2873c0d3ba8f5e1e602b37eab96f490f139445e07ff5ba24fe6e03ac58cf6a3864224a03d4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

Filesize
16B

MD5
aefd77f47fb84fae5ea194496b44c67a

SHA1
dcfbb6a5b8d05662c4858664f81693bb7f803b82

SHA256
4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

SHA512
b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
687B

MD5
9811117ccaca8910e06ea915e3b59cd7

SHA1
98e2653dc853dd9fb38305f40191cd1246f01ddc

SHA256
bf8a1957ac8c513293f6d6eb9fe843647a35698375ed43339159c544edd05490

SHA512
84efea2933961849a5922abec54e24de0b63933d38af0580a31888a529faf9a56c70434dd802a3f95f49a49b3aa00a08c2645fa99e14fcca2ef5f770a3d97d34

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
b6af2a7aa9ac762d7463e829f1bc5b69

SHA1
92396e8bde5571fd94c410f4da68523ca59ee88c

SHA256
b51b16f57d73ae2d8df8b94f749bf0680387fea4b99991affaa51c88d6e72475

SHA512
e189549264c4035fd4d8d5cc6fde63e18fe7344f10cf3e89f27f8f1961856a3c9122d0357c2c21a1134f3ca8879562b1d85ecae14d8d1b18eee545c29c777012

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
6c46ddbcb23f9249a0b53ed19d27bb81

SHA1
6748a4299d0bea42b3b1655d418db2347ab7ddfa

SHA256
1ccaaa82006a405c5b21e0a9d27387a8b946f548747529fc995224959cfc215a

SHA512
93113385b33185c67829c80d30e82ac25369ae1ceb969bd77d480ac1de44cdd94289080c40991c2da81572a6f1f18f689e18ed460ad2980d65fb4e540691c313

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
da54fa8542db4ec297928c47b26f07e1

SHA1
dbb986bbfd2024a253fcc11aebc610150ea961e9

SHA256
ced11c0536d25e748163c5b8bb128758f8e7cc0ead8d059ac7d032b247182aca

SHA512
fa749cb5c17783e695e488d1352d73871c33085e9fa0d57ff7203f8d57f4da4aa1b5c8ea957eeca6b19ca7f757cf5eaa8b3a2e47b64ef1feef6b4c5793372283

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
ce2764a113644ec47b62b12167252cbf

SHA1
252844d8006620593b19919fc053bb229f13285c

SHA256
ac8310ebdc063c684bd51bb2b336e9291c3d983b324d586c253c561214caea45

SHA512
daf9437f5cde03317cdc6f6bf21f18f52af9858571b3281e4207fdcec1cd3f3b40dabde8c225da03bef24ddd576554bb74b4a17074672146ed1257787a7d8453

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab20CC.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar20DE.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit