hxxps://m[.]exactag[.]com/ai[.]aspx?tc=d9498808bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Anewguy343rwetr3434[.]pages[.]dev/#?email=ZGF2aWQuaHluZXNAcHRhLndhLmdvdi5hdQ==

Analysis

max time kernel
150s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 02:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://m.exactag.com/ai.aspx?tc=d9498808bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Anewguy343rwetr3434.pages.dev/#?email=ZGF2aWQuaHluZXNAcHRhLndhLmdvdi5hdQ==

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133648812467580967"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4320	chrome.exe
4320	chrome.exe
556	chrome.exe
556	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe
Token: SeShutdownPrivilege	4320	chrome.exe
Token: SeCreatePagefilePrivilege	4320	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe
4320	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4320 wrote to memory of 1900	4320	chrome.exe	82
PID 4320 wrote to memory of 1900	4320	chrome.exe	82
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 532	4320	chrome.exe	84
PID 4320 wrote to memory of 1596	4320	chrome.exe	85
PID 4320 wrote to memory of 1596	4320	chrome.exe	85
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86
PID 4320 wrote to memory of 1884	4320	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://m.exactag.com/ai.aspx?tc=d9498808bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Anewguy343rwetr3434.pages.dev/#?email=ZGF2aWQuaHluZXNAcHRhLndhLmdvdi5hdQ==
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffce250ab58,0x7ffce250ab68,0x7ffce250ab78
  2⤵
  PID:1900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1640 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:2
  2⤵
  PID:532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:8
  2⤵
  PID:1596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2224 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:8
  2⤵
  PID:1884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3044 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3312 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3920 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3968 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=3976 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4696 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4440 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4292 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4976 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=1816 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=1628 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4252 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=212 --field-trial-handle=1824,i,14790751852239707529,6799693166613479045,131072 /prefetch:1
  2⤵
  PID:524

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:2064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
5c7f332f1f960fb534dd1bd3d77b3da4

SHA1
d9f58e6ca09250b9bce6d6fe1b97e0a232750f79

SHA256
bd411b0b2c2616ee1b15b3a162c1640847d7bbc8447a6db3a4a27672552d1d2c

SHA512
aef557e08cee575e037252b5c0e68d25da0f10fa97d372d8ecd2942a4b3f799badb763a9b4d5e648c90f9d2aaf7d13d2781d2e163658750864541691f61b806e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
dd3de66ff281347a78e86e6fface15d5

SHA1
71b9a1fc63e384b7a125507790481350c00cb896

SHA256
11a950516711fc34d0f923e8cb16e0adb3889c0921ea9ad8bbcafcb170beb45a

SHA512
4584cc94f7d5532a7081c882cb4aa6185d5de36ce94c53fe2d8fbdc14f85287f7655e4a74b67e538c738f4acb95247175e36901985a0adf7bc1f6855f5d02255

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
524B

MD5
e9b1e74655c03185c1bed31e7709fe90

SHA1
5253076d24e5e048ea97fd1161ebe6d24e8dc1c1

SHA256
565944b0adabf9e7032fe38fceb2f55b4a86f39c7fe68c38bad3d851dd5daefc

SHA512
55c6a0cec4b2845c8fa230fc70aeab7680805745a18a6e6f911dc60845d51ae7da069d595480b4ba72236e9ea5caac6ca0e240ad07a9cca679829ba3c94d06ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
e0f9905b0ba73e3b9d44a46ce9480921

SHA1
f697e420eae37dc8f15f82d53c41981e9afa1c96

SHA256
fcce2dc044f89f7fa1d76b02ddd58423c4dfcbc6c0d53cf106cbde7e0192ebf6

SHA512
41aa05ababf18c62448162701408429a3caa1e894f9968fbda26c522375270837c03bc931479c045801b2723245a94abcabf1b7a745ed18f881982f49a5b750f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
b9809d97ef3cb1e0fa979a0345094dd0

SHA1
7b1540534f26b520806efcbdeec280c6e2792832

SHA256
df9ac52f07a4dd2d6c409d3cdaf532f20fb1b750bdad0c745fea8956a02ad5d7

SHA512
1a9785cc5088e5acac8791b1d3d53f826783733bcba088c95d526c2df32b6d00fd37de0eeb72f08793227e61efced442bb4fe089f5b6619db9b0e5374e6d8fe1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\a47195df-6485-49d4-9286-62a3c943f571.tmp

Filesize
144KB

MD5
274f9a81269f7dccb1f1db84d9377ec3

SHA1
94d1afe8655a36c1cb8583780c56e86c9d265a9b

SHA256
3bee0a09fd81bc1c378b2fec1bac90351f026375f758ec4ab6b8e0e613701e92

SHA512
64df5df803a29420734740055bf151dd124d7a9e40526b156685a3a9186e836d2f0657b29b64cc604deee32e6ada0200d53386e9c6aa34c31e80335bf716a969

Download Submit